deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-38027
Published: 2024-07-09
Description: Windows Line Printer Daemon Service Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38027; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38027
CVE: CVE-2024-38028
Published: 2024-07-09
Description: Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
CWE: CWE-125, CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38028; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38028
CVE: CVE-2024-38030
Published: 2024-07-09
Description: Windows Themes Spoofing Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38030; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38030; https://www.vicarius.io/vsociety/posts/cve-2024-38030-detection-script-windows-themes-spoofing-vulnerability
CVE: CVE-2024-38031
Published: 2024-07-09
Description: Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38031; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38031
CVE: CVE-2024-38032
Published: 2024-07-09
Description: Microsoft Xbox Remote Code Execution Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38032; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38032
CVE: CVE-2024-38033
Published: 2024-07-09
Description: PowerShell Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38033; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38033
CVE: CVE-2024-38034
Published: 2024-07-09
Description: Windows Filtering Platform Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38034; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38034
CVE: CVE-2024-38041
Published: 2024-07-09
Description: Windows Kernel Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38041; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38041
CVE: CVE-2024-38043
Published: 2024-07-09
Description: PowerShell Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38043; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38043
CVE: CVE-2024-38044
Published: 2024-07-09
Description: DHCP Server Service Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
CWE: CWE-197, CWE-681
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38044; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38044
CVE: CVE-2024-38047
Published: 2024-07-09
Description: PowerShell Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38047; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38047
CVE: CVE-2024-38048
Published: 2024-07-09
Description: Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38048; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38048
CVE: CVE-2024-38049
Published: 2024-07-09
Description: Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-73, CWE-610
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38049; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38049
CVE: CVE-2024-38050
Published: 2024-07-09
Description: Windows Workstation Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-191, CWE-191
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38050; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38050
CVE: CVE-2024-38051
Published: 2024-07-09
Description: Windows Graphics Component Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38051; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38051
CVE: CVE-2024-38052
Published: 2024-07-09
Description: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38052; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38052
CVE: CVE-2024-38053
Published: 2024-07-09
Description: Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38053; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38053
CVE: CVE-2024-38054
Published: 2024-07-09
Description: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38054; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38054
CVE: CVE-2024-38055
Published: 2024-07-09
Description: Microsoft Windows Codecs Library Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38055; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38055
CVE: CVE-2024-38056
Published: 2024-07-09
Description: Microsoft Windows Codecs Library Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38056; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38056
CVE: CVE-2024-38057
Published: 2024-07-09
Description: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38057; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38057
CVE: CVE-2024-38058
Published: 2024-07-09
Description: BitLocker Security Feature Bypass Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38058; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38058
CVE: CVE-2024-38059
Published: 2024-07-09
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38059; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38059
CVE: CVE-2024-38060
Published: 2024-07-09
Description: Windows Imaging Component Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38060; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38060
CVE: CVE-2024-38061
Published: 2024-07-09
Description: DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38061; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38061
CVE: CVE-2024-38062
Published: 2024-07-09
Description: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38062; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38062; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1968
CVE: CVE-2024-38064
Published: 2024-07-09
Description: Windows TCP/IP Information Disclosure Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38064; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38064
CVE: CVE-2024-38065
Published: 2024-07-09
Description: Secure Boot Security Feature Bypass Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38065; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38065
CVE: CVE-2024-38066
Published: 2024-07-09
Description: Windows Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38066; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38066
CVE: CVE-2024-38067
Published: 2024-07-09
Description: Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38067; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38067
CVE: CVE-2024-38068
Published: 2024-07-09
Description: Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38068; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38068
CVE: CVE-2024-38069
Published: 2024-07-09
Description: Windows Enroll Engine Security Feature Bypass Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-347, CWE-347
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38069; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38069
CVE: CVE-2024-38070
Published: 2024-07-09
Description: Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38070; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38070
CVE: CVE-2024-38071
Published: 2024-07-09
Description: Windows Remote Desktop Licensing Service Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38071; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38071
CVE: CVE-2024-38072
Published: 2024-07-09
Description: Windows Remote Desktop Licensing Service Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38072; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38072
CVE: CVE-2024-38073
Published: 2024-07-09
Description: Windows Remote Desktop Licensing Service Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38073; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38073
CVE: CVE-2024-38074
Published: 2024-07-09
Description: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-191
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38074; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38074
CVE: CVE-2024-38076
Published: 2024-07-09
Description: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38076; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38076
CVE: CVE-2024-38077
Published: 2024-07-09
Description: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38077; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38077
CVE: CVE-2024-38078
Published: 2024-07-09
Description: Xbox Wireless Adapter Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38078; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38078
CVE: CVE-2024-38079
Published: 2024-07-09
Description: Windows Graphics Component Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38079; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38079
CVE: CVE-2024-38080
Published: 2024-07-09
Description: Windows Hyper-V Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38080; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38080; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38080
CVE: CVE-2024-38081
Published: 2024-07-09
Description: .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38081; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38081
CVE: CVE-2024-38085
Published: 2024-07-09
Description: Windows Graphics Component Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38085; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38085
CVE: CVE-2024-38086
Published: 2024-07-09
Description: Azure Kinect SDK Remote Code Execution Vulnerability
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38086; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38086
CVE: CVE-2024-38087
Published: 2024-07-09
Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-415
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38087; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38087
CVE: CVE-2024-38088
Published: 2024-07-09
Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38088; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38088
CVE: CVE-2024-38089
Published: 2024-07-09
Description: Microsoft Defender for IoT Elevation of Privilege Vulnerability
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38089; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38089
CVE: CVE-2024-38091
Published: 2024-07-09
Description: Microsoft WS-Discovery Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-166
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38091; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38091
CVE: CVE-2024-38092
Published: 2024-07-09
Description: Azure CycleCloud Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38092; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38092
CVE: CVE-2024-38094
Published: 2024-07-09
Description: Microsoft SharePoint Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
CWE: CWE-502, CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38094
CVE: CVE-2024-38095
Published: 2024-07-09
Description: .NET and Visual Studio Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38095; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38095
CVE: CVE-2024-38099
Published: 2024-07-09
Description: Windows Remote Desktop Licensing Service Denial of Service Vulnerability
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38099; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38099
CVE: CVE-2024-38100
Published: 2024-07-09
Description: Windows File Explorer Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38100; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38100
CVE: CVE-2024-38101
Published: 2024-07-09
Description: Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38101; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38101
CVE: CVE-2024-38102
Published: 2024-07-09
Description: Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38102; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38102
CVE: CVE-2024-38104
Published: 2024-07-09
Description: Windows Fax Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-822, CWE-119
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38104; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38104
CVE: CVE-2024-38105
Published: 2024-07-09
Description: Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38105; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38105
CVE: CVE-2024-38112
Published: 2024-07-09
Description: Windows MSHTML Platform Spoofing Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-451
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38112; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38112; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38112
CVE: CVE-2024-39118
Published: 2024-07-09
Description: Mommy Heather Advanced Backups up to v3.5.3 allows attackers to write arbitrary files via restoring a crafted back up.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://gist.github.com/apple502j/[PII_REDACTED]5fe1a6708309ce934e4ed; https://github.com/MommyHeather/AdvancedBackups/commit/1545f499f73bf434ed292c31121fdda8042ff5d6; https://gist.github.com/apple502j/[PII_REDACTED]5fe1a6708309ce934e4ed
CVE: CVE-2024-39171
Published: 2024-07-09
Description: Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statements to .htaccess and code to a file with a .png suffix.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-35
References: http://phpvibe.com; https://github.com/751897386/PHPVibe_vulnerability_Directory-Traversal; http://phpvibe.com
CVE: CVE-2024-5652
Published: 2024-07-09
Description: In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-400
References: https://docs.docker.com/desktop/release-notes/#4310; https://docs.docker.com/desktop/release-notes/#4310
CVE: CVE-2024-6237
Published: 2024-07-09
Description: A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-230
References: https://access.redhat.com/errata/RHSA-2024:4997; https://access.redhat.com/errata/RHSA-2024:5192; https://access.redhat.com/security/cve/CVE-2024-6237
CVE: CVE-2023-48194
Published: 2024-07-09
Description: Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the gp register can be obtained.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://tenda.com; https://github.com/zt20xx/CVE-2023-48194; https://www.tenda.com.cn/download/detail-3683.html
CVE: CVE-2024-27183
Published: 2024-07-09
Description: XSS vulnerability in  DJ-HelpfulArticles component for Joomla.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://extensions.joomla.org/extension/dj-helpfularticles/; https://extensions.joomla.org/extension/dj-helpfularticles/
CVE: CVE-2024-27360
Published: 2024-07-09
Description: A vulnerability was discovered in Samsung Mobile Processors Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, and Exynos W930 where they do not properly check length of the data, which can lead to a Denial of Service.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-1284, CWE-1284
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27360/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE: CVE-2024-27362
Published: 2024-07-09
Description: A vulnerability was discovered in Samsung Mobile Processors Exynos 1280, Exynos 2200, Exynos 1330, Exynos 1380, and Exynos 2400 where they do not properly check the length of the data, which can lead to a Information disclosure.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-1284, CWE-200
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-27362/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE: CVE-2024-28067
Published: 2024-07-09
Description: A vulnerability in Samsung Exynos Modem 5300 allows a Man-in-the-Middle (MITM) attacker to downgrade the security mode of packets going to the victim, enabling the attacker to send messages to the victim in plaintext.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-295
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-28067/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE: CVE-2024-31957
Published: 2024-07-09
Description: A vulnerability was discovered in Samsung Mobile Processors Exynos 2200 and Exynos 2400 where they lack a check for the validation of native handles, which can result in a DoS(Denial of Service) attack by unmapping an invalid length.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-1284, CWE-1284
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-31957/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE: CVE-2024-38970
Published: 2024-07-09
Description: vaeThink 1.0.2 is vulnerable to Information Disclosure via the system backend,access management administrator function.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: https://gist.github.com/fltys/b2c430bca85c97211010bdc602437978; https://github.com/tingyuu/vaeThink; https://gist.github.com/fltys/b2c430bca85c97211010bdc602437978
CVE: CVE-2024-38971
Published: 2024-07-09
Description: vaeThink 1.0.2 is vulnerable to stored Cross Site Scripting (XSS) in the system backend.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://gist.github.com/fltys/998d96272545d2cf7cd6b182adbfd672; https://github.com/tingyuu/vaeThink; https://gist.github.com/fltys/998d96272545d2cf7cd6b182adbfd672