deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-21341
Published: 2024-02-13
Description: Windows Kernel Remote Code Execution Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21341; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21341
CVE: CVE-2024-21342
Published: 2024-02-13
Description: Windows DNS Client Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21342; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21342
CVE: CVE-2024-21343
Published: 2024-02-13
Description: Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21343; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21343
CVE: CVE-2024-21344
Published: 2024-02-13
Description: Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21344; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21344
CVE: CVE-2024-21345
Published: 2024-02-13
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21345; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21345
CVE: CVE-2024-21346
Published: 2024-02-13
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21346; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21346
CVE: CVE-2024-21347
Published: 2024-02-13
Description: Microsoft ODBC Driver Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21347; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21347
CVE: CVE-2024-21348
Published: 2024-02-13
Description: Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21348; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21348
CVE: CVE-2024-21349
Published: 2024-02-13
Description: Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21349; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21349
CVE: CVE-2024-21350
Published: 2024-02-13
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21350; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21350
CVE: CVE-2024-21351
Published: 2024-02-13
Description: Windows SmartScreen Security Feature Bypass Vulnerability
CVSS Score: 7.6 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21351; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21351; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21351
CVE: CVE-2024-21352
Published: 2024-02-13
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21352; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21352
CVE: CVE-2024-21353
Published: 2024-02-13
Description: Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21353; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21353
CVE: CVE-2024-21354
Published: 2024-02-13
Description: Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21354; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21354
CVE: CVE-2024-21355
Published: 2024-02-13
Description: Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21355; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21355
CVE: CVE-2024-21356
Published: 2024-02-13
Description: Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21356; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21356
CVE: CVE-2024-21357
Published: 2024-02-13
Description: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21357; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21357
CVE: CVE-2024-21358
Published: 2024-02-13
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21358; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21358
CVE: CVE-2024-21359
Published: 2024-02-13
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21359; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21359
CVE: CVE-2024-21360
Published: 2024-02-13
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21360; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21360
CVE: CVE-2024-21361
Published: 2024-02-13
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21361; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21361
CVE: CVE-2024-21362
Published: 2024-02-13
Description: Windows Kernel Security Feature Bypass Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-367
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21362; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21362
CVE: CVE-2024-21363
Published: 2024-02-13
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21363; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21363
CVE: CVE-2024-21364
Published: 2024-02-13
Description: Microsoft Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21364; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21364
CVE: CVE-2024-21365
Published: 2024-02-13
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21365; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21365
CVE: CVE-2024-21366
Published: 2024-02-13
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21366; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21366
CVE: CVE-2024-21367
Published: 2024-02-13
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21367; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21367
CVE: CVE-2024-21368
Published: 2024-02-13
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21368; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21368
CVE: CVE-2024-21369
Published: 2024-02-13
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21369; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21369
CVE: CVE-2024-21370
Published: 2024-02-13
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21370; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21370
CVE: CVE-2024-21371
Published: 2024-02-13
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-367
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21371; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21371
CVE: CVE-2024-21372
Published: 2024-02-13
Description: Windows OLE Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21372; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21372
CVE: CVE-2024-21374
Published: 2024-02-13
Description: Microsoft Teams for Android Information Disclosure Vulnerability
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21374; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21374
CVE: CVE-2024-21375
Published: 2024-02-13
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21375; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21375
CVE: CVE-2024-21376
Published: 2024-02-13
Description: Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21376; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21376
CVE: CVE-2024-21377
Published: 2024-02-13
Description: Windows DNS Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21377; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21377
CVE: CVE-2024-21378
Published: 2024-02-13
Description: Microsoft Outlook Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21378; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21378
CVE: CVE-2024-21379
Published: 2024-02-13
Description: Microsoft Word Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21379; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21379
CVE: CVE-2024-21380
Published: 2024-02-13
Description: Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
CVSS Score: 8.0 (HIGH)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21380; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21380
CVE: CVE-2024-21381
Published: 2024-02-13
Description: Microsoft Azure Active Directory B2C Spoofing Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21381; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21381
CVE: CVE-2024-21384
Published: 2024-02-13
Description: Microsoft Office OneNote Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384
CVE: CVE-2024-21386
Published: 2024-02-13
Description: .NET Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21386; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21386
CVE: CVE-2024-21389
Published: 2024-02-13
Description: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVSS Score: 7.6 (HIGH)
CWE: CWE-79, CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21389; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21389
CVE: CVE-2024-21391
Published: 2024-02-13
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21391; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21391
CVE: CVE-2024-21393
Published: 2024-02-13
Description: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVSS Score: 7.6 (HIGH)
CWE: CWE-79, CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21393; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21393
CVE: CVE-2024-21394
Published: 2024-02-13
Description: Dynamics 365 Field Service Spoofing Vulnerability
CVSS Score: 7.6 (HIGH)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21394; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21394
CVE: CVE-2024-21395
Published: 2024-02-13
Description: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVSS Score: 8.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21395; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21395
CVE: CVE-2024-21396
Published: 2024-02-13
Description: Dynamics 365 Sales Spoofing Vulnerability
CVSS Score: 7.6 (HIGH)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21396; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21396
CVE: CVE-2024-21397
Published: 2024-02-13
Description: Microsoft Azure File Sync Elevation of Privilege Vulnerability
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21397; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21397
CVE: CVE-2024-21401
Published: 2024-02-13
Description: Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21401; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21401
CVE: CVE-2024-21402
Published: 2024-02-13
Description: Microsoft Outlook Elevation of Privilege Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-285
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21402; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21402
CVE: CVE-2024-21403
Published: 2024-02-13
Description: Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-552
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21403; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21403
CVE: CVE-2024-21404
Published: 2024-02-13
Description: .NET Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21404; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21404
CVE: CVE-2024-21405
Published: 2024-02-13
Description: Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21405; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21405
CVE: CVE-2024-21406
Published: 2024-02-13
Description: Windows Printing Service Spoofing Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21406; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21406
CVE: CVE-2024-21410
Published: 2024-02-13
Description: Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21410; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21410; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21410
CVE: CVE-2024-21412
Published: 2024-02-13
Description: Internet Shortcut Files Security Feature Bypass Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21412; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21412; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21412
CVE: CVE-2024-21413
Published: 2024-02-13
Description: Microsoft Outlook Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413; https://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture/
CVE: CVE-2024-21420
Published: 2024-02-13
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21420; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21420
CVE: CVE-2024-1082
Published: 2024-02-13
Description: A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker to gain unauthorized read permission to files by deploying arbitrary symbolic links to a GitHub Pages site with a specially crafted artifact tarball. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.8.15, 3.9.10, 3.10.7, 3.11.5. This vulnerability was reported via the GitHub Bug Bounty program.

CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.7; https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.5; https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.15
CVE: CVE-2024-1084
Published: 2024-02-13
Description: Cross-site Scripting in the tag name pattern field in the tag protections UI in GitHub Enterprise Server allows a malicious website that requires user interaction and social engineering to make changes to a user account via CSP bypass with created CSRF tokens. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12  and was fixed in all versions of 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the GitHub Bug Bounty program.


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.7; https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.5; https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.15
CVE: CVE-2024-1216
Published: 2024-02-13
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-1354
Published: 2024-02-13
Description: A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via the `syslog-ng` configuration file. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the GitHub Bug Bounty program.

CVSS Score: 8.0 (HIGH)
CWE: CWE-20, CWE-77
References: https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.7; https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.5; https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.15
CVE: CVE-2024-1355
Published: 2024-02-13
Description: A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via the actions-console docker container while setting a service URL. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the GitHub Bug Bounty program.

CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20, CWE-77, CWE-77
References: https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.7; https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.5; https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.15
CVE: CVE-2024-1359
Published: 2024-02-13
Description: A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when setting up an HTTP proxy. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the  GitHub Bug Bounty program https://bounty.github.com .

CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20, CWE-77
References: https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.7; https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.5; https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.15
CVE: CVE-2024-1369
Published: 2024-02-13
Description: A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when setting the username and password for collectd configurations. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the  GitHub Bug Bounty program https://bounty.github.com .

CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20, CWE-77
References: https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.7; https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.5; https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.15