deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-45393
Published: 2024-09-10
Description: Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. An attacker with a CVAT account can access webhook delivery information for any webhook registered on the CVAT instance, including that of other users. For each delivery, this contains information about the event that caused the delivery, typically including full details about the object on which an action was performed (such as the task for an "update:task" event), and the user who performed the action. In addition, the attacker can redeliver any past delivery of any webhook, and trigger a ping event for any webhook. Upgrade to CVAT 2.18.0 or any later version.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://github.com/cvat-ai/cvat/commit/0fafb797fdf022fb83ce81c6405ba19b583a236f; https://github.com/cvat-ai/cvat/security/advisories/GHSA-p3c9-m7jr-jxxj
CVE: CVE-2023-36103
Published: 2024-09-10
Description: Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/t0hka1/Tenda-AC15-Exp/blob/master/Tenda%20AC15%20V15.03.05.20%20Exp.md
CVE: CVE-2023-37232
Published: 2024-09-10
Description: Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://code-white.com; https://code-white.com/public-vulnerability-list/
CVE: CVE-2023-37233
Published: 2024-09-10
Description: Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611, CWE-611
References: https://code-white.com; https://code-white.com/public-vulnerability-list/; https://docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF14.htm
CVE: CVE-2023-37234
Published: 2024-09-10
Description: Loftware Spectrum through 4.6 has unprotected JMX Registry.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://code-white.com; https://code-white.com/public-vulnerability-list/
CVE: CVE-2024-31960
Published: 2024-09-10
Description: An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference count bug. This can lead to a use after free.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-31960/
CVE: CVE-2024-44676
Published: 2024-09-10
Description: eladmin v2.7 and before is vulnerable to Cross Site Scripting (XSS) which allows an attacker to execute arbitrary code via LocalStoreController. java.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/elunez/eladmin; https://github.com/jcxj/jcxj/blob/master/source/_posts/eladmin-%E5%A4%8D%E7%8E%B0.md; https://github.com/l1uyi/cve-list/blob/main/cve-list/eladmin-CVE-2024-44676_CVE-2024-44677.md
CVE: CVE-2024-44677
Published: 2024-09-10
Description: eladmin v2.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an attacker to execute arbitrary code via the DatabaseController.java component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918, CWE-352
References: https://github.com/elunez/eladmin; https://github.com/jcxj/jcxj/blob/master/source/_posts/eladmin-%E5%A4%8D%E7%8E%B0.md; https://github.com/l1uyi/cve-list/blob/main/cve-list/eladmin-CVE-2024-44676_CVE-2024-44677.md
CVE: CVE-2024-44815
Published: 2024-09-10
Description: Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-522, CWE-256
References: https://github.com/nitinronge91/Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-
CVE: CVE-2024-45407
Published: 2024-09-10
Description: Sunshine is a self-hosted game stream host for Moonlight. Clients that experience a MITM attack during the pairing process may inadvertantly allow access to an unintended client rather than failing authentication due to a PIN validation error. The pairing attempt fails due to the incorrect PIN, but the certificate from the forged pairing attempt is incorrectly persisted prior to the completion of the pairing request. This allows access to the certificate belonging to the attacker.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-300
References: https://github.com/LizardByte/Sunshine/commit/5fcd07ecb1428bfe245ad6fa349aead476c7e772; https://github.com/LizardByte/Sunshine/commit/fd7e68457a134102d1b30af5796c79f2aa623224; https://github.com/LizardByte/Sunshine/security/advisories/GHSA-jqph-8cp5-g874
CVE: CVE-2024-45412
Published: 2024-09-10
Description: Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Remote user-controlled data tags can reach a Unicode normalization with a compatibility form NFKD. Under Windows, such normalization is costly in resources and may lead to denial of service with attacks such as One Million Unicode payload. This can get worse with the use of special Unicode characters like U+2100 (℀), or U+2105 (℅) which could lead the payload size to be tripled. Versions prior to 2.1.11 are affected by this vulnerability. The patch is included in 2.1.11.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-770
References: https://github.com/yeti-platform/yeti/commit/f1f0082e7c165f148ae95f4deeb[PII_REDACTED]a39; https://github.com/yeti-platform/yeti/security/advisories/GHSA-cwwm-pq9x-2cxv; https://hackerone.com/reports/2258758
CVE: CVE-2024-45590
Published: 2024-09-10
Description: body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue is patched in 1.20.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-405
References: https://github.com/expressjs/body-parser/commit/b2695c4450f06ba3b0ccf48d872a229bb41c9bce; https://github.com/expressjs/body-parser/security/advisories/GHSA-qwcr-r2fm-qrc7
CVE: CVE-2024-45591
Published: 2024-09-10
Description: XWiki Platform is a generic wiki platform. The REST API exposes the history of any page in XWiki of which the attacker knows the name. The exposed information includes for each modification of the page the time of the modification, the version number, the author of the modification (both username and displayed name) and the version comment. This information is exposed regardless of the rights setup, and even when the wiki is configured to be fully private. On a private wiki, this can be tested by accessing /xwiki/rest/wikis/xwiki/spaces/Main/pages/WebHome/history, if this shows the history of the main page then the installation is vulnerable. This has been patched in XWiki 15.10.9 and XWiki 16.3.0RC1.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-359, CWE-862, CWE-862
References: https://github.com/xwiki/xwiki-platform/commit/26482ee5d29fc21f31134d1ee13db48716e89e0f; https://github.com/xwiki/xwiki-platform/commit/9cbca[PII_REDACTED]c67779bb9a665d85cf9e3d4b8; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-pvmm-55r5-g3mm
CVE: CVE-2024-45592
Published: 2024-09-10
Description: auditor-bundle, formerly known as DoctrineAuditBundle, integrates auditor library into any Symfony 3.4+ application. Prior to version 5.2.6, there is an unescaped entity property enabling Javascript injection. This is possible because `%source_label%` in twig macro is not escaped. Therefore script tags can be inserted and are executed. The vulnerability is fixed in versions 6.0.0 and 5.2.6.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79
References: https://github.com/DamienHarper/auditor-bundle/commit/42ba2940d8b99467de0c806ea5655cc1c6882cd1; https://github.com/DamienHarper/auditor-bundle/commit/e7deb377fa89677d44973b486d26d6a7374233ae; https://github.com/DamienHarper/auditor-bundle/security/advisories/GHSA-78vg-7v27-hj67
CVE: CVE-2024-45593
Published: 2024-09-10
Description: Nix is a package manager for Linux and other Unix systems. A bug in Nix 2.24 prior to 2.24.6 allows a substituter or malicious user to craft a NAR that, when unpacked by Nix, causes Nix to write to arbitrary file system locations to which the Nix process has access. This will be with root permissions when using the Nix daemon. This issue is fixed in Nix 2.24.6.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://github.com/NixOS/nix/commit/eb11c1499876cd4c9c188cbda5b1003b36ce2e59; https://github.com/NixOS/nix/security/advisories/GHSA-h4vv-h3jq-v493
CVE: CVE-2024-45595
Published: 2024-09-10
Description: D-Tale is a visualizer for Pandas data structures. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Users should upgrade to version 3.14.1 where the "Custom Filter" input is turned off by default.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/man-group/dtale#custom-filter; https://github.com/man-group/dtale/commit/b6e[PII_REDACTED]0d1400b55acbb13e5487b8472e8; https://github.com/man-group/dtale/security/advisories/GHSA-pw44-4h99-wqff
CVE: CVE-2024-6876
Published: 2024-09-10
Description: Out-of-Bounds read vulnerability in OSCAT Basic Library allows an local, unprivileged attacker to access limited internal data of the PLC which may lead to a crash of the affected service.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://certvde.com/en/advisories/VDE-2024-046/; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18601&token=27389a52e058d95ff70b17a2370fedf07e073034&download=
CVE: CVE-2023-6841
Published: 2024-09-10
Description: A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limited,an attacker by sending repeated HTTP requests could cause a resource exhaustion when the application send back rows with long attribute values.
CVSS Score: 7.5 (HIGH)
CWE: CWE-231
References: https://access.redhat.com/security/cve/CVE-2023-6841; https://bugzilla.redhat.com/show_bug.cgi?id=2254714
CVE: CVE-2024-21416
Published: 2024-09-10
Description: Windows TCP/IP Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21416
CVE: CVE-2024-26186
Published: 2024-09-10
Description: Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26186
CVE: CVE-2024-26191
Published: 2024-09-10
Description: Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26191
CVE: CVE-2024-30073
Published: 2024-09-10
Description: Windows Security Zone Mapping Security Feature Bypass Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-41
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30073
CVE: CVE-2024-37335
Published: 2024-09-10
Description: Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37335
CVE: CVE-2024-37337
Published: 2024-09-10
Description: Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37337
CVE: CVE-2024-37338
Published: 2024-09-10
Description: Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37338
CVE: CVE-2024-37339
Published: 2024-09-10
Description: Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37339
CVE: CVE-2024-37340
Published: 2024-09-10
Description: Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37340
CVE: CVE-2024-37341
Published: 2024-09-10
Description: Microsoft SQL Server Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37341
CVE: CVE-2024-37342
Published: 2024-09-10
Description: Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37342
CVE: CVE-2024-37965
Published: 2024-09-10
Description: Microsoft SQL Server Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37965
CVE: CVE-2024-37966
Published: 2024-09-10
Description: Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37966
CVE: CVE-2024-37980
Published: 2024-09-10
Description: Microsoft SQL Server Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37980
CVE: CVE-2024-38014
Published: 2024-09-10
Description: Windows Installer Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38014; http://seclists.org/fulldisclosure/2024/Sep/43; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38014
CVE: CVE-2024-38018
Published: 2024-09-10
Description: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38018
CVE: CVE-2024-38045
Published: 2024-09-10
Description: Windows TCP/IP Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38045
CVE: CVE-2024-38046
Published: 2024-09-10
Description: PowerShell Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38046
CVE: CVE-2024-38119
Published: 2024-09-10
Description: Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38119
CVE: CVE-2024-38188
Published: 2024-09-10
Description: Azure Network Watcher VM Agent Elevation of Privilege Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38188
CVE: CVE-2024-38194
Published: 2024-09-10
Description: An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network.
CVSS Score: 8.4 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38194
CVE: CVE-2024-38216
Published: 2024-09-10
Description: Azure Stack Hub Elevation of Privilege Vulnerability
CVSS Score: 8.2 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38216
CVE: CVE-2024-38217
Published: 2024-09-10
Description: Windows Mark of the Web Security Feature Bypass Vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38217; https://www.elastic.co/security-labs/dismantling-smart-app-control; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38217
CVE: CVE-2024-38220
Published: 2024-09-10
Description: Azure Stack Hub Elevation of Privilege Vulnerability
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38220
CVE: CVE-2024-38225
Published: 2024-09-10
Description: Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38225
CVE: CVE-2024-38226
Published: 2024-09-10
Description: Microsoft Publisher Security Feature Bypass Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38226; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38226
CVE: CVE-2024-38227
Published: 2024-09-10
Description: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38227
CVE: CVE-2024-38228
Published: 2024-09-10
Description: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38228
CVE: CVE-2024-38230
Published: 2024-09-10
Description: Windows Standards-Based Storage Management Service Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38230
CVE: CVE-2024-38231
Published: 2024-09-10
Description: Windows Remote Desktop Licensing Service Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-285
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38231
CVE: CVE-2024-38232
Published: 2024-09-10
Description: Windows Networking Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38232
CVE: CVE-2024-38233
Published: 2024-09-10
Description: Windows Networking Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38233
CVE: CVE-2024-38234
Published: 2024-09-10
Description: Windows Networking Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38234
CVE: CVE-2024-38235
Published: 2024-09-10
Description: Windows Hyper-V Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38235
CVE: CVE-2024-38236
Published: 2024-09-10
Description: DHCP Server Service Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38236
CVE: CVE-2024-38237
Published: 2024-09-10
Description: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38237
CVE: CVE-2024-38238
Published: 2024-09-10
Description: Kernel Streaming Service Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38238
CVE: CVE-2024-38239
Published: 2024-09-10
Description: Windows Kerberos Elevation of Privilege Vulnerability
CVSS Score: 7.2 (HIGH)
CWE: CWE-1390
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38239
CVE: CVE-2024-38240
Published: 2024-09-10
Description: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38240
CVE: CVE-2024-38241
Published: 2024-09-10
Description: Kernel Streaming Service Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38241
CVE: CVE-2024-38242
Published: 2024-09-10
Description: Kernel Streaming Service Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38242
CVE: CVE-2024-38243
Published: 2024-09-10
Description: Kernel Streaming Service Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38243
CVE: CVE-2024-38244
Published: 2024-09-10
Description: Kernel Streaming Service Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38244
CVE: CVE-2024-38245
Published: 2024-09-10
Description: Kernel Streaming Service Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38245
CVE: CVE-2024-38246
Published: 2024-09-10
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-121
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38246
CVE: CVE-2024-38247
Published: 2024-09-10
Description: Windows Graphics Component Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38247
CVE: CVE-2024-38248
Published: 2024-09-10
Description: Windows Storage Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38248
CVE: CVE-2024-38249
Published: 2024-09-10
Description: Windows Graphics Component Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38249
CVE: CVE-2024-38250
Published: 2024-09-10
Description: Windows Graphics Component Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38250
CVE: CVE-2024-38252
Published: 2024-09-10
Description: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38252
CVE: CVE-2024-38253
Published: 2024-09-10
Description: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38253
CVE: CVE-2024-38254
Published: 2024-09-10
Description: Windows Authentication Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38254
CVE: CVE-2024-38256
Published: 2024-09-10
Description: Windows Kernel-Mode Driver Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38256
CVE: CVE-2024-38257
Published: 2024-09-10
Description: Microsoft AllJoyn API Information Disclosure Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38257; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1980
CVE: CVE-2024-38258
Published: 2024-09-10
Description: Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-23
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38258
CVE: CVE-2024-38259
Published: 2024-09-10
Description: Microsoft Management Console Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38259
CVE: CVE-2024-38260
Published: 2024-09-10
Description: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38260