deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-3452
Published: 2022-10-11
Description: A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument category_name leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-210436.
CVSS Score: 3.5 (LOW)
CWE: CWE-707
References: https://vuldb.com/?id.210436; https://vuldb.com/?id.210436
CVE: CVE-2022-3453
Published: 2022-10-11
Description: A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /transcation.php. The manipulation of the argument buyer_name leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-210437 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-707
References: https://vuldb.com/?id.210437; https://vuldb.com/?id.210437
CVE: CVE-2022-42034
Published: 2022-10-11
Description: Wedding Planner v1.0 is vulnerable to arbitrary code execution via users_profile.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/debug601/bug_report/blob/main/vendors/pushpam02/wedding-planner/RCE-1.md; https://github.com/debug601/bug_report/blob/main/vendors/pushpam02/wedding-planner/RCE-1.md
CVE: CVE-2022-42229
Published: 2022-10-11
Description: Wedding Planner v1.0 is vulnerable to Arbitrary code execution via package_edit.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/Tr0ee/bug_report/blob/main/vendors/pushpam02/wedding-planner/RCE-1.md; https://github.com/Tr0ee/bug_report/blob/main/vendors/pushpam02/wedding-planner/RCE-1.md
CVE: CVE-2022-42230
Published: 2022-10-11
Description: Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/admin/?page=user/manage_user&id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/Tr0ee/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-1.md; https://github.com/Tr0ee/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-1.md
CVE: CVE-2022-42235
Published: 2022-10-11
Description: A Stored XSS issue in Student Clearance System v.1.0 allows the injection of arbitrary JavaScript in the Student registration form.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/draco1725/Stored-XSS/blob/main/poc; https://github.com/draco1725/Stored-XSS/blob/main/poc
CVE: CVE-2022-42236
Published: 2022-10-11
Description: A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/draco1725/vloggers/blob/main/poc; https://github.com/draco1725/vloggers/blob/main/poc
CVE: CVE-2022-42238
Published: 2022-10-11
Description: A Vertical Privilege Escalation issue in Merchandise Online Store v.1.0 allows an attacker to get access to the admin dashboard.
CVSS Score: 8.8 (HIGH)
CWE: CWE-425, CWE-425
References: https://github.com/draco1725/localpriv/blob/main/poc; https://github.com/draco1725/localpriv/blob/main/poc
CVE: CVE-2022-22035
Published: 2022-10-11
Description: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22035; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-22035
CVE: CVE-2022-24504
Published: 2022-10-11
Description: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24504; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24504
CVE: CVE-2022-30198
Published: 2022-10-11
Description: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30198; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30198
CVE: CVE-2022-33634
Published: 2022-10-11
Description: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33634; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-33634
CVE: CVE-2022-33635
Published: 2022-10-11
Description: Windows GDI+ Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33635; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-33635
CVE: CVE-2022-33645
Published: 2022-10-11
Description: Windows TCP/IP Driver Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33645; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-33645
CVE: CVE-2022-34689
Published: 2022-10-11
Description: Windows CryptoAPI Spoofing Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-290
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34689; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-34689
CVE: CVE-2022-35770
Published: 2022-10-11
Description: Windows NTLM Spoofing Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35770; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-35770
CVE: CVE-2022-35829
Published: 2022-10-11
Description: Service Fabric Explorer Spoofing Vulnerability
CVSS Score: 6.2 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35829; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-35829
CVE: CVE-2022-37599
Published: 2022-10-11
Description: A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/webpack/loader-utils/blob/d9f4e23cf411d8556f8bac2d3bf05a6e0103b568/lib/interpolateName.js#L38; https://github.com/webpack/loader-utils/blob/d9f4e23cf411d8556f8bac2d3bf05a6e0103b568/lib/interpolateName.js#L83; https://github.com/webpack/loader-utils/issues/211
CVE: CVE-2022-37609
Published: 2022-10-11
Description: Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://github.com/beautify-web/js-beautify/blob/6fa891e982cc3d615eed9a1a20a4fc50721bff16/js/src/core/options.js#L167; https://github.com/beautify-web/js-beautify/blob/6fa891e982cc3d615eed9a1a20a4fc50721bff16/js/src/core/options.js#L167.aa; https://github.com/beautify-web/js-beautify/issues/2106
CVE: CVE-2022-37965
Published: 2022-10-11
Description: Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
CVSS Score: 5.9 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37965; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37965
CVE: CVE-2022-37968
Published: 2022-10-11
Description: Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability could allow an unauthenticated user to elevate their privileges and potentially gain administrative control over the Kubernetes cluster. Additionally, because Azure Stack Edge allows customers to deploy Kubernetes workloads on their devices via Azure Arc, Azure Stack Edge devices are also vulnerable to this vulnerability.
CVSS Score: 10.0 (CRITICAL)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37968; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37968
CVE: CVE-2022-37970
Published: 2022-10-11
Description: Windows DWM Core Library Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37970; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37970
CVE: CVE-2022-37971
Published: 2022-10-11
Description: Microsoft Windows Defender Elevation of Privilege Vulnerability
CVSS Score: 7.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37971; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37971; https://www.withsecure.com/en/support/security-advisories/cve-2022-37971
CVE: CVE-2022-37973
Published: 2022-10-11
Description: Windows Local Session Manager (LSM) Denial of Service Vulnerability
CVSS Score: 7.7 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37973; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37973
CVE: CVE-2022-37974
Published: 2022-10-11
Description: Windows Mixed Reality Developer Tools Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37974; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37974
CVE: CVE-2022-37975
Published: 2022-10-11
Description: Windows Group Policy Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37975; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37975
CVE: CVE-2022-37976
Published: 2022-10-11
Description: Active Directory Certificate Services Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37976; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37976
CVE: CVE-2022-37977
Published: 2022-10-11
Description: Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37977; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37977
CVE: CVE-2022-37978
Published: 2022-10-11
Description: Windows Active Directory Certificate Services Security Feature Bypass
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37978; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37978
CVE: CVE-2022-37979
Published: 2022-10-11
Description: Windows Hyper-V Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37979; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37979
CVE: CVE-2022-37980
Published: 2022-10-11
Description: Windows DHCP Client Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37980; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37980
CVE: CVE-2022-37981
Published: 2022-10-11
Description: Windows Event Logging Service Denial of Service Vulnerability
CVSS Score: 4.3 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37981; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37981
CVE: CVE-2022-37982
Published: 2022-10-11
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37982; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37982
CVE: CVE-2022-37983
Published: 2022-10-11
Description: Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37983; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37983
CVE: CVE-2022-37984
Published: 2022-10-11
Description: Windows WLAN Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37984; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37984
CVE: CVE-2022-37985
Published: 2022-10-11
Description: Windows Graphics Component Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37985; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37985
CVE: CVE-2022-37986
Published: 2022-10-11
Description: Windows Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37986; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37986
CVE: CVE-2022-37987
Published: 2022-10-11
Description: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37987; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37987
CVE: CVE-2022-37988
Published: 2022-10-11
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37988; http://packetstormsecurity.com/files/169731/Windows-Kernel-Registry-Use-After-Free.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37988
CVE: CVE-2022-37989
Published: 2022-10-11
Description: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37989; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37989
CVE: CVE-2022-37990
Published: 2022-10-11
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37990; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37990
CVE: CVE-2022-37991
Published: 2022-10-11
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37991; http://packetstormsecurity.com/files/169807/Windows-Kernel-Long-Registry-Key-Value-Out-Of-Bounds-Read.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37991
CVE: CVE-2022-37993
Published: 2022-10-11
Description: Windows Group Policy Preference Client Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37993; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37993
CVE: CVE-2022-37994
Published: 2022-10-11
Description: Windows Group Policy Preference Client Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37994; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37994
CVE: CVE-2022-37995
Published: 2022-10-11
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37995; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37995
CVE: CVE-2022-37996
Published: 2022-10-11
Description: Windows Kernel Memory Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37996; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37996
CVE: CVE-2022-37997
Published: 2022-10-11
Description: Windows Graphics Component Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37997; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37997
CVE: CVE-2022-37998
Published: 2022-10-11
Description: Windows Local Session Manager (LSM) Denial of Service Vulnerability
CVSS Score: 7.7 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37998; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37998
CVE: CVE-2022-37999
Published: 2022-10-11
Description: Windows Group Policy Preference Client Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37999; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37999
CVE: CVE-2022-38000
Published: 2022-10-11
Description: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38000; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38000
CVE: CVE-2022-38001
Published: 2022-10-11
Description: Microsoft Office Spoofing Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38001; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38001
CVE: CVE-2022-38003
Published: 2022-10-11
Description: Windows Resilient File System Elevation of Privilege
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38003; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38003
CVE: CVE-2022-38016
Published: 2022-10-11
Description: Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38016; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38016
CVE: CVE-2022-38017
Published: 2022-10-11
Description: StorSimple 8000 Series Elevation of Privilege Vulnerability
CVSS Score: 6.8 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38017; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38017
CVE: CVE-2022-38021
Published: 2022-10-11
Description: Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38021; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38021
CVE: CVE-2022-38022
Published: 2022-10-11
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 3.3 (LOW)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38022; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38022
CVE: CVE-2022-38025
Published: 2022-10-11
Description: Windows Distributed File System (DFS) Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38025; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38025
CVE: CVE-2022-38026
Published: 2022-10-11
Description: Windows DHCP Client Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38026; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38026
CVE: CVE-2022-38027
Published: 2022-10-11
Description: Windows Storage Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38027; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38027
CVE: CVE-2022-38028
Published: 2022-10-11
Description: Windows Print Spooler Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38028; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38028; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-38028
CVE: CVE-2022-38029
Published: 2022-10-11
Description: Windows ALPC Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38029; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38029
CVE: CVE-2022-38030
Published: 2022-10-11
Description: Windows USB Serial Driver Information Disclosure Vulnerability
CVSS Score: 4.3 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38030; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38030
CVE: CVE-2022-38031
Published: 2022-10-11
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38031; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38031
CVE: CVE-2022-38032
Published: 2022-10-11
Description: Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability
CVSS Score: 6.6 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38032; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38032
CVE: CVE-2022-38033
Published: 2022-10-11
Description: Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38033; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38033
CVE: CVE-2022-38034
Published: 2022-10-11
Description: Windows Workstation Service Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38034; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38034
CVE: CVE-2022-38036
Published: 2022-10-11
Description: Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38036; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38036
CVE: CVE-2022-38037
Published: 2022-10-11
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38037; http://packetstormsecurity.com/files/169791/Windows-Kernel-Type-Confusion-Memory-Corruption.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38037
CVE: CVE-2022-38038
Published: 2022-10-11
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38038; http://packetstormsecurity.com/files/169805/Windows-Kernel-Long-Registry-Path-Memory-Corruption.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38038
CVE: CVE-2022-38039
Published: 2022-10-11
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38039; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38039
CVE: CVE-2022-38040
Published: 2022-10-11
Description: Microsoft ODBC Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38040; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38040
CVE: CVE-2022-38041
Published: 2022-10-11
Description: Windows Secure Channel Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38041; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38041