deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-36535
Published: 2023-08-08
Description: Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access.
CVSS Score: 7.1 (HIGH)
CWE: CWE-449
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-36540
Published: 2023-08-08
Description: Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.
CVSS Score: 7.3 (HIGH)
CWE: CWE-426, CWE-426
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-36541
Published: 2023-08-08
Description: Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access.
CVSS Score: 8.0 (HIGH)
CWE: CWE-345, CWE-345
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-36865
Published: 2023-08-08
Description: Microsoft Office Visio Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36865; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36865
CVE: CVE-2023-36866
Published: 2023-08-08
Description: Microsoft Office Visio Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36866; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36866
CVE: CVE-2023-36869
Published: 2023-08-08
Description: Azure DevOps Server Spoofing Vulnerability
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36869; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36869
CVE: CVE-2023-36876
Published: 2023-08-08
Description: Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36876; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36876
CVE: CVE-2023-36877
Published: 2023-08-08
Description: Azure Apache Oozie Spoofing Vulnerability
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36877; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36877
CVE: CVE-2023-36881
Published: 2023-08-08
Description: Azure Apache Ambari Spoofing Vulnerability
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36881; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36881
CVE: CVE-2023-36882
Published: 2023-08-08
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36882; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36882
CVE: CVE-2023-36889
Published: 2023-08-08
Description: Windows Group Policy Security Feature Bypass Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36889; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36889
CVE: CVE-2023-36890
Published: 2023-08-08
Description: Microsoft SharePoint Server Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36890; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36890
CVE: CVE-2023-36891
Published: 2023-08-08
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 8.0 (HIGH)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36891; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36891
CVE: CVE-2023-36892
Published: 2023-08-08
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 8.0 (HIGH)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36892; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36892
CVE: CVE-2023-36893
Published: 2023-08-08
Description: Microsoft Outlook Spoofing Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36893; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36893
CVE: CVE-2023-36894
Published: 2023-08-08
Description: Microsoft SharePoint Server Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36894; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36894
CVE: CVE-2023-36895
Published: 2023-08-08
Description: Microsoft Outlook Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36895; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36895
CVE: CVE-2023-36896
Published: 2023-08-08
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36896; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36896
CVE: CVE-2023-36897
Published: 2023-08-08
Description: Visual Studio Tools for Office Runtime Spoofing Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36897; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36897
CVE: CVE-2023-36898
Published: 2023-08-08
Description: Tablet Windows User Interface Application Core Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36898; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36898
CVE: CVE-2023-36900
Published: 2023-08-08
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36900; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36900
CVE: CVE-2023-36903
Published: 2023-08-08
Description: Windows System Assessment Tool Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36903; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36903
CVE: CVE-2023-36904
Published: 2023-08-08
Description: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36904; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36904
CVE: CVE-2023-36905
Published: 2023-08-08
Description: Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36905; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36905
CVE: CVE-2023-36906
Published: 2023-08-08
Description: Windows Cryptographic Services Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-170
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36906; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36906
CVE: CVE-2023-36907
Published: 2023-08-08
Description: Windows Cryptographic Services Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-170
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36907; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36907
CVE: CVE-2023-36908
Published: 2023-08-08
Description: Windows Hyper-V Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36908; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36908
CVE: CVE-2023-36909
Published: 2023-08-08
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-191
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36909; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36909
CVE: CVE-2023-36910
Published: 2023-08-08
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36910; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36910
CVE: CVE-2023-36911
Published: 2023-08-08
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36911; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36911
CVE: CVE-2023-36912
Published: 2023-08-08
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36912; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36912
CVE: CVE-2023-36913
Published: 2023-08-08
Description: Microsoft Message Queuing Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36913; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36913
CVE: CVE-2023-36914
Published: 2023-08-08
Description: Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36914; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36914
CVE: CVE-2023-38154
Published: 2023-08-08
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38154; http://packetstormsecurity.com/files/174568/Microsoft-Windows-Kernel-Recovery-Memory-Corruption.html; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38154
CVE: CVE-2023-38167
Published: 2023-08-08
Description: Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
CVSS Score: 7.2 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38167; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38167
CVE: CVE-2023-38169
Published: 2023-08-08
Description: Microsoft SQL OLE DB Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38169; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38169
CVE: CVE-2023-38170
Published: 2023-08-08
Description: HEVC Video Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38170; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38170
CVE: CVE-2023-38172
Published: 2023-08-08
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38172; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38172
CVE: CVE-2023-38175
Published: 2023-08-08
Description: Microsoft Windows Defender Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38175; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38175
CVE: CVE-2023-38176
Published: 2023-08-08
Description: Azure Arc-Enabled Servers Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-22
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38176; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38176
CVE: CVE-2023-38178
Published: 2023-08-08
Description: .NET Core and Visual Studio Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38178; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38178
CVE: CVE-2023-38181
Published: 2023-08-08
Description: Microsoft Exchange Server Spoofing Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38181; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38181
CVE: CVE-2023-38182
Published: 2023-08-08
Description: Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS Score: 8.0 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38182; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38182
CVE: CVE-2023-38184
Published: 2023-08-08
Description: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38184; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38184
CVE: CVE-2023-38185
Published: 2023-08-08
Description: Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-23
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38185; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38185
CVE: CVE-2023-38186
Published: 2023-08-08
Description: Windows Mobile Device Management Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38186; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38186
CVE: CVE-2023-38188
Published: 2023-08-08
Description: Azure Apache Hadoop Spoofing Vulnerability
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38188; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38188
CVE: CVE-2023-38254
Published: 2023-08-08
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38254; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38254
CVE: CVE-2023-38814
Published: 2023-08-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not in the allowed scope of that CNA's CVE ID assignments. Notes: none.
CVE: CVE-2023-39216
Published: 2023-08-08
Description: Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-80
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-39217
Published: 2023-08-08
Description: Improper input validation in Zoom SDK’s before 5.14.10 may allow an unauthenticated user to enable a denial of service via network access.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-80
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-39218
Published: 2023-08-08
Description: Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-602
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-39342
Published: 2023-08-08
Description: Dangerzone is software for converting potentially dangerous PDFs, office documents, or images to safe PDFs. The Dangerzone CLI (`dangerzone-cli` command) logs output from the container where the file sanitization takes place, to the user's terminal. Prior to version 0.4.2, if the container is compromised and can return attacker-controlled strings, then the attacker may be able to spoof messages in the user's terminal or change the window title. Besides logging output from containers, it also logs the names of the files it sanitizes. If these files contain ANSI escape sequences, then the same issue applies. Dangerzone is predominantly a GUI application, so this issue should leave most of our users unaffected. Nevertheless, we always suggest updating to the newest version. This issue is fixed in Dangerzone 0.4.2.
CVSS Score: 3.6 (LOW)
CWE: CWE-150
References: https://github.com/freedomofpress/dangerzone/pull/491; https://github.com/freedomofpress/dangerzone/releases/tag/v0.4.2; https://github.com/freedomofpress/dangerzone/security/advisories/GHSA-pvwq-6vpp-2632
CVE: CVE-2023-3894
Published: 2023-08-08
Description: Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.

CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20, CWE-787
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50083; https://github.com/FasterXML/jackson-dataformats-text/blob/2.16/release-notes/VERSION-2.x; https://github.com/FasterXML/jackson-dataformats-text/pull/398
CVE: CVE-2023-35391
Published: 2023-08-08
Description: ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
CVSS Score: 6.2 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35391; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35391
CVE: CVE-2023-36873
Published: 2023-08-08
Description: .NET Framework Spoofing Vulnerability
CVSS Score: 7.4 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36873; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36873
CVE: CVE-2023-36899
Published: 2023-08-08
Description: ASP.NET Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36899; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36899
CVE: CVE-2023-38180
Published: 2023-08-08
Description: .NET and Visual Studio Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38180; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CL2L4WE5QRT7WEXANYXSKSU43APC5N2V/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWVZFKTLNMNKPZ755EMRYIA6GHFOWGKY/
CVE: CVE-2023-38815
Published: 2023-08-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-40042. Reason: This candidate is a reservation duplicate of CVE-2023-40042. Notes: All CVE users should reference CVE-2023-40042 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2023-39518
Published: 2023-08-08
Description: social-media-skeleton is an uncompleted social media project implemented using PHP, MySQL, CSS, JavaScript, and HTML. Versions 1.0.0 until 1.0.3 have a stored cross-site scripting vulnerability. The problem is patched in v1.0.3.

CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/fobybus/social-media-skeleton/commit/6765d1109016e1f1d707ef47917927c7704e6428; https://github.com/fobybus/social-media-skeleton/pull/4; https://github.com/fobybus/social-media-skeleton/security/advisories/GHSA-2jxx-r967-f76p
CVE: CVE-2023-39533
Published: 2023-08-08
Description: go-libp2p is the Go implementation of the libp2p Networking Stack. Prior to versions 0.27.8, 0.28.2, and 0.29.1 malicious peer can use large RSA keys to run a resource exhaustion attack & force a node to spend time doing signature verification of the large key. This vulnerability is present in the core/crypto module of go-libp2p and can occur during the Noise handshake and the libp2p x509 extension verification step. To prevent this attack, go-libp2p versions 0.27.8, 0.28.2, and 0.29.1 restrict RSA keys to <= 8192 bits. To protect one's application, it is necessary to update to these patch releases and to use the updated Go compiler in 1.20.7 or 1.19.12. There are no known workarounds for this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/golang/go/commit/2350afd2e8ab054390e284c95d5b089c142db017; https://github.com/golang/go/issues/61460; https://github.com/libp2p/go-libp2p/commit/0cce607219f3710addc7e18672cffd1f1d912fbb
CVE: CVE-2023-40041
Published: 2023-08-08
Description: TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cste_modules/wps.so. Attackers can send crafted data in an MQTT packet, via the pin parameter, to control the return address and execute code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Korey0sh1/IoT_vuln/blob/main/TOTOLINK/T10_V2/lib-cste_modules-wps.md; https://github.com/Korey0sh1/IoT_vuln/blob/main/TOTOLINK/T10_V2/lib-cste_modules-wps.md
CVE: CVE-2023-40042
Published: 2023-08-08
Description: TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setStaticDhcpConfig in /lib/cste_modules/lan.so. Attackers can send crafted data in an MQTT packet, via the comment parameter, to control the return address and execute code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.totolink.cn; https://github.com/Korey0sh1/IoT_vuln/blob/main/TOTOLINK/T10_V2/setStaticDhcpConfig.md; https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/172/ids/36.html
CVE: CVE-2023-26961
Published: 2023-08-08
Description: Alteryx Server 2022.1.1.42590 does not employ file type verification for uploaded files. This vulnerability allows attackers to upload arbitrary files (e.g., JavaScript content for stored XSS) via the type field in a JSON document within a PUT /gallery/api/media request.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://alteryx.com; https://gist.github.com/DylanGrl/4269ae834c5d0ec77c9b928ad35d3be3; http://alteryx.com
CVE: CVE-2023-36344
Published: 2023-08-08
Description: An issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to execute arbitrary code via not restricting the search path for required DLLs and not verifying the signature.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://packetstormsecurity.com/files/173990/Diebold-Nixdorf-Vynamic-View-Console-5.3.1-DLL-Hijacking.html; https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/view/; https://packetstormsecurity.com/files/173990/Diebold-Nixdorf-Vynamic-View-Console-5.3.1-DLL-Hijacking.html
CVE: CVE-2023-36482
Published: 2023-08-08
Description: An issue was discovered in Samsung NFC S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82. A buffer copy without checking its input size can cause an NFC service restart.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-120
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE: CVE-2023-39086
Published: 2023-08-08
Description: ASUS RT-AC66U B1 3.0.0.4.286_51665 was discovered to transmit sensitive information in cleartext.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: http://121.41.98.87/2023/08/04/info/; http://asus.com; http://na.com