deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-1629
Published: 2024-05-14
Description: Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-22
References: https://securityupdate.gehealthcare.com/; https://securityupdate.gehealthcare.com/
CVE: CVE-2024-1630
Published: 2024-05-14
Description: Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component
CVSS Score: 7.7 (HIGH)
CWE: CWE-22
References: https://securityupdate.gehealthcare.com/; https://securityupdate.gehealthcare.com/
CVE: CVE-2024-23105
Published: 2024-05-14
Description: A Use Of Less Trusted Source [CWE-348] vulnerability in Fortinet FortiPortal version 7.0.0 through 7.0.6 and version 7.2.0 through 7.2.1 allows an unauthenticated attack to bypass IP protection through crafted HTTP or HTTPS packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-348
References: https://fortiguard.com/psirt/FG-IR-24-021; https://fortiguard.com/psirt/FG-IR-24-021
CVE: CVE-2024-26007
Published: 2024-05-14
Description: An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allows an unauthenticated attacker to provoke a denial of service on the administrative interface via crafted HTTP requests.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-703
References: https://fortiguard.com/psirt/FG-IR-24-017; https://fortiguard.com/psirt/FG-IR-24-017
CVE: CVE-2024-26238
Published: 2024-05-14
Description: Microsoft PLUGScheduler Scheduled Task Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26238; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26238
CVE: CVE-2024-27106
Published: 2024-05-14
Description: Vulnerable data in transit in GE HealthCare EchoPAC products
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-311
References: https://securityupdate.gehealthcare.com/; https://securityupdate.gehealthcare.com/
CVE: CVE-2024-27107
Published: 2024-05-14
Description: Weak account password in GE HealthCare EchoPAC products
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-798
References: https://securityupdate.gehealthcare.com/; https://securityupdate.gehealthcare.com/
CVE: CVE-2024-27108
Published: 2024-05-14
Description: Non privileged access to critical file vulnerability in GE HealthCare EchoPAC products
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-732
References: https://securityupdate.gehealthcare.com/; https://securityupdate.gehealthcare.com/
CVE: CVE-2024-27109
Published: 2024-05-14
Description: Insufficiently protected credentials in GE HealthCare EchoPAC products
CVSS Score: 7.6 (HIGH)
CWE: CWE-522
References: https://securityupdate.gehealthcare.com/; https://securityupdate.gehealthcare.com/
CVE: CVE-2024-29994
Published: 2024-05-14
Description: Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29994; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29994
CVE: CVE-2024-29996
Published: 2024-05-14
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29996; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29996
CVE: CVE-2024-29997
Published: 2024-05-14
Description: Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29997; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29997
CVE: CVE-2024-29998
Published: 2024-05-14
Description: Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29998; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29998
CVE: CVE-2024-29999
Published: 2024-05-14
Description: Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29999; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29999
CVE: CVE-2024-30000
Published: 2024-05-14
Description: Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30000; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30000
CVE: CVE-2024-30001
Published: 2024-05-14
Description: Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30001; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30001
CVE: CVE-2024-30002
Published: 2024-05-14
Description: Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30002; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30002
CVE: CVE-2024-30003
Published: 2024-05-14
Description: Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30003; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30003
CVE: CVE-2024-30004
Published: 2024-05-14
Description: Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30004; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30004
CVE: CVE-2024-30005
Published: 2024-05-14
Description: Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30005; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30005
CVE: CVE-2024-30006
Published: 2024-05-14
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30006; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30006
CVE: CVE-2024-30007
Published: 2024-05-14
Description: Microsoft Brokering File System Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30007; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30007
CVE: CVE-2024-30008
Published: 2024-05-14
Description: Windows DWM Core Library Information Disclosure  Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-191
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30008; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30008
CVE: CVE-2024-30009
Published: 2024-05-14
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30009; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30009
CVE: CVE-2024-30010
Published: 2024-05-14
Description: Windows Hyper-V Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-23
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30010; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30010
CVE: CVE-2024-30011
Published: 2024-05-14
Description: Windows Hyper-V Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-191
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30011; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30011
CVE: CVE-2024-30012
Published: 2024-05-14
Description: Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30012; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30012
CVE: CVE-2024-30014
Published: 2024-05-14
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30014; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30014
CVE: CVE-2024-30015
Published: 2024-05-14
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30015; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30015
CVE: CVE-2024-30016
Published: 2024-05-14
Description: Windows Cryptographic Services Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30016; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30016
CVE: CVE-2024-30017
Published: 2024-05-14
Description: Windows Hyper-V Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30017; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30017
CVE: CVE-2024-30018
Published: 2024-05-14
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30018; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30018
CVE: CVE-2024-30019
Published: 2024-05-14
Description: DHCP Server Service Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30019; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30019
CVE: CVE-2024-30020
Published: 2024-05-14
Description: Windows Cryptographic Services Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-122, CWE-295
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30020; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30020
CVE: CVE-2024-30021
Published: 2024-05-14
Description: Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30021; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30021
CVE: CVE-2024-30022
Published: 2024-05-14
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30022; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30022
CVE: CVE-2024-30023
Published: 2024-05-14
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30023; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30023
CVE: CVE-2024-30024
Published: 2024-05-14
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30024; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30024
CVE: CVE-2024-30025
Published: 2024-05-14
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30025; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30025
CVE: CVE-2024-30027
Published: 2024-05-14
Description: NTFS Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30027; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30027
CVE: CVE-2024-30028
Published: 2024-05-14
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30028; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30028
CVE: CVE-2024-30029
Published: 2024-05-14
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30029; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30029
CVE: CVE-2024-30030
Published: 2024-05-14
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-476, CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30030; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30030
CVE: CVE-2024-30031
Published: 2024-05-14
Description: Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30031; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30031
CVE: CVE-2024-30032
Published: 2024-05-14
Description: Windows DWM Core Library Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30032; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30032
CVE: CVE-2024-30033
Published: 2024-05-14
Description: Windows Search Service Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30033; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30033
CVE: CVE-2024-30034
Published: 2024-05-14
Description: Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30034; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30034
CVE: CVE-2024-30035
Published: 2024-05-14
Description: Windows DWM Core Library Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30035; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30035
CVE: CVE-2024-30036
Published: 2024-05-14
Description: Windows Deployment Services Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-41
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30036; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30036
CVE: CVE-2024-30037
Published: 2024-05-14
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30037; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30037
CVE: CVE-2024-30038
Published: 2024-05-14
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30038; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30038
CVE: CVE-2024-30039
Published: 2024-05-14
Description: Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30039; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30039
CVE: CVE-2024-30040
Published: 2024-05-14
Description: Windows MSHTML Platform Security Feature Bypass Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30040; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30040; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-30040
CVE: CVE-2024-30041
Published: 2024-05-14
Description: Microsoft Bing Search Spoofing Vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30041; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30041
CVE: CVE-2024-30042
Published: 2024-05-14
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30042; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30042
CVE: CVE-2024-30043
Published: 2024-05-14
Description: Microsoft SharePoint Server Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30043; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30043
CVE: CVE-2024-30044
Published: 2024-05-14
Description: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
CWE: CWE-502, CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30044; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30044
CVE: CVE-2024-30045
Published: 2024-05-14
Description: .NET and Visual Studio Remote Code Execution Vulnerability
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30045; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30045; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-30046
Published: 2024-05-14
Description: Visual Studio Denial of Service Vulnerability
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30046; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30046
CVE: CVE-2024-30047
Published: 2024-05-14
Description: Dynamics 365 Customer Insights Spoofing Vulnerability
CVSS Score: 7.6 (HIGH)
CWE: CWE-79, CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30047; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30047
CVE: CVE-2024-30048
Published: 2024-05-14
Description: Dynamics 365 Customer Insights Spoofing Vulnerability
CVSS Score: 7.6 (HIGH)
CWE: CWE-79, CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30048; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30048
CVE: CVE-2024-30049
Published: 2024-05-14
Description: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30049; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30049
CVE: CVE-2024-30050
Published: 2024-05-14
Description: Windows Mark of the Web Security Feature Bypass Vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30050; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30050
CVE: CVE-2024-30051
Published: 2024-05-14
Description: Windows DWM Core Library Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30051; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30051; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-30051
CVE: CVE-2024-30053
Published: 2024-05-14
Description: Azure Migrate Cross-Site Scripting Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30053; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30053
CVE: CVE-2024-30054
Published: 2024-05-14
Description: Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30054; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30054
CVE: CVE-2024-30059
Published: 2024-05-14
Description: Microsoft Intune for Android Mobile Application Management Tampering Vulnerability
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30059; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30059
CVE: CVE-2024-31488
Published: 2024-05-14
Description: An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and reflected cross site scripting (XSS) attack via crafted HTTP requests.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/psirt/FG-IR-24-040; https://fortiguard.com/psirt/FG-IR-24-040
CVE: CVE-2024-31491
Published: 2024-05-14
Description: A client-side enforcement of server-side security vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6 allows attacker to execute unauthorized code or commands via HTTP requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-602
References: https://fortiguard.com/psirt/FG-IR-24-054; https://fortiguard.com/psirt/FG-IR-24-054
CVE: CVE-2024-27110
Published: 2024-05-14
Description: Elevation of privilege vulnerability in GE HealthCare EchoPAC products
CVSS Score: 8.4 (HIGH)
CWE: CWE-250
References: https://securityupdate.gehealthcare.com/; https://securityupdate.gehealthcare.com/
CVE: CVE-2024-33485
Published: 2024-05-14
Description: SQL Injection vulnerability in CASAP Automated Enrollment System using PHP/MySQLi with Source Code V1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the login.php component
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/CveSecLook/cve/issues/17; https://www.exploit-db.com/exploits/49463; https://github.com/CveSecLook/cve/issues/17
CVE: CVE-2024-4367
Published: 2024-05-14
Description: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.
CVSS Score: 8.8 (HIGH)
CWE: CWE-754
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1893645; https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html; https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html
CVE: CVE-2024-4764
Published: 2024-05-14
Description: Multiple WebRTC threads could have claimed a newly connected audio input leading to use-after-free. This vulnerability affects Firefox < 126.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1879093; https://www.mozilla.org/security/advisories/mfsa2024-21/; https://bugzilla.mozilla.org/show_bug.cgi?id=1879093
CVE: CVE-2024-4765
Published: 2024-05-14
Description: Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite another application's manifest. This could have been exploited to run arbitrary code in another application's context. 
*This issue only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 126.
CVSS Score: 8.1 (HIGH)
CWE: CWE-327
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1871109; https://www.mozilla.org/security/advisories/mfsa2024-21/; https://bugzilla.mozilla.org/show_bug.cgi?id=1871109