deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-31495
Published: 2024-06-11
Description: A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions 7.0.0 through 7.0.6 and version 7.2.0 allows privileged user to obtain unauthorized information via the report download functionality.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-89
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-128; https://fortiguard.fortinet.com/psirt/FG-IR-24-128
CVE: CVE-2024-32148
Published: 2024-06-11
Description: Missing Authorization vulnerability in Salesforce Pardot.This issue affects Pardot: from n/a through 2.1.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/pardot/wordpress-pardot-plugin-2-1-0-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/pardot/wordpress-pardot-plugin-2-1-0-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-34820
Published: 2024-06-11
Description: Missing Authorization vulnerability in If So Plugin If-So Dynamic Content Personalization.This issue affects If-So Dynamic Content Personalization: from n/a through 1.7.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/if-so/wordpress-if-so-dynamic-content-personalization-plugin-1-7-1-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/if-so/wordpress-if-so-dynamic-content-personalization-plugin-1-7-1-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-34826
Published: 2024-06-11
Description: Missing Authorization vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler.This issue affects CF7 WOW Styler: from n/a through <= 1.6.4.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/cf7-styler/vulnerability/wordpress-cf7-wow-styler-plugin-1-6-4-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/cf7-styler/wordpress-cf7-wow-styler-plugin-1-6-4-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-35168
Published: 2024-06-11
Description: Missing Authorization vulnerability in Discourse WP Discourse.This issue affects WP Discourse: from n/a through 2.5.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/wp-discourse/wordpress-wp-discourse-plugin-2-5-1-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-discourse/wordpress-wp-discourse-plugin-2-5-1-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-35235
Published: 2024-06-11
Description: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the provided argument, providing world-writable access to the target. Given that cupsd is often running as root, this can result in the change of permission of any user or system files to be world writable. Given the aforementioned Ubuntu AppArmor context, on such systems this vulnerability is limited to those files modifiable by the cupsd process. In that specific case it was found to be possible to turn the configuration of the Listen argument into full control over the cupsd.conf and cups-files.conf configuration files. By later setting the User and Group arguments in cups-files.conf, and printing with a printer configured by PPD with a `FoomaticRIPCommandLine` argument, arbitrary user and group (not root) command execution could be achieved, which can further be used on Ubuntu systems to achieve full root command execution. Commit ff1f8a623e090dee8a8aadf12a6a4b25efac143d contains a patch for the issue.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-59, CWE-252
References: http://www.openwall.com/lists/oss-security/2024/06/11/1; http://www.openwall.com/lists/oss-security/2024/06/12/4; http://www.openwall.com/lists/oss-security/2024/06/12/5
CVE: CVE-2024-35628
Published: 2024-06-11
Description: Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by 10Web: from n/a through 1.8.25.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/photo-gallery/wordpress-photo-gallery-by-10web-plugin-1-8-23-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/photo-gallery/wordpress-photo-gallery-by-10web-plugin-1-8-23-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-35663
Published: 2024-06-11
Description: Missing Authorization vulnerability in HahnCreativeGroup WP Translate.This issue affects WP Translate: from n/a through 5.3.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/wp-translate/wordpress-wp-translate-plugin-5-3-0-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-translate/wordpress-wp-translate-plugin-5-3-0-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-35665
Published: 2024-06-11
Description: Missing Authorization vulnerability in namithjawahar Insert Post Ads.This issue affects Insert Post Ads: from n/a through 1.3.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/insert-post-ads/wordpress-insert-post-ads-plugin-1-3-2-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/insert-post-ads/wordpress-insert-post-ads-plugin-1-3-2-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-35667
Published: 2024-06-11
Description: Missing Authorization vulnerability in WP EasyCart.This issue affects WP EasyCart: from n/a through 5.5.19.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/wp-easycart/wordpress-shopping-cart-ecommerce-store-plugin-5-5-19-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-easycart/wordpress-shopping-cart-ecommerce-store-plugin-5-5-19-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-37161
Published: 2024-06-11
Description: MeterSphere is an open source continuous testing platform. Prior to version 1.10.1-lts, the system's step editor stores cross-site scripting vulnerabilities. Version 1.10.1-lts fixes this issue.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-79
References: https://github.com/metersphere/metersphere/security/advisories/GHSA-6h7v-q5rp-h6q9; https://github.com/metersphere/metersphere/security/advisories/GHSA-6h7v-q5rp-h6q9
CVE: CVE-2024-37294
Published: 2024-06-11
Description: Aimeos is an Open Source e-commerce framework for online shops. All SaaS and marketplace setups using Aimeos version from 2022/2023/2024 are affected by a potential denial of service attack. Users should upgrade to versions 2022.10.17, 2023.10.17, or 2024.04 of the aimeos/aimeos-core package to receive a patch.

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-270
References: https://github.com/aimeos/aimeos-core/security/advisories/GHSA-xjm6-jfmg-qc6p; https://github.com/aimeos/aimeos-core/security/advisories/GHSA-xjm6-jfmg-qc6p
CVE: CVE-2024-37295
Published: 2024-06-11
Description: Aimeos is an Open Source e-commerce framework for online shops. Starting in version 2024.01.1 and prior to version 2024.04.5, a user with administrative privileges can upload files that look like images but contain PHP code which can then be executed in the context of the web server. Version 2024.04.5 fixes the issue.
CVSS Score: 7.2 (HIGH)
CWE: CWE-73
References: https://github.com/aimeos/aimeos-core/security/advisories/GHSA-rhc2-23c2-ww7c; https://github.com/aimeos/aimeos-core/security/advisories/GHSA-rhc2-23c2-ww7c
CVE: CVE-2024-37296
Published: 2024-06-11
Description: The Aimeos HTML client provides Aimeos HTML components for e-commerce projects. Starting in version 2020.04.1 and prior to versions 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14, and 2024.04.5, digital downloads sold in online shops can be downloaded without valid payment, e.g. if the payment didn't succeed. Versions 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14, and 2024.04.5 fix this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-841, CWE-862
References: https://github.com/aimeos/ai-client-html/commit/12d8aad1a373bf9d350872501adec3e222164f83; https://github.com/aimeos/ai-client-html/commit/5a[PII_REDACTED]b3ce70959ab1fb70c7e7c251e214; https://github.com/aimeos/ai-client-html/commit/6460ffe8f4929d864164aa96c5b49eca5326d975
CVE: CVE-2023-51519
Published: 2024-06-11
Description: Missing Authorization vulnerability in Soliloquy Team Slider by Soliloquy.This issue affects Slider by Soliloquy: from n/a through 2.7.2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/soliloquy-lite/wordpress-slider-by-soliloquy-responsive-image-slider-for-wordpress-plugin-2-7-2-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/soliloquy-lite/wordpress-slider-by-soliloquy-responsive-image-slider-for-wordpress-plugin-2-7-2-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-51682
Published: 2024-06-11
Description: Missing Authorization vulnerability in ibericode MC4WP.This issue affects MC4WP: from n/a through 4.9.9.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/mailchimp-for-wp/wordpress-mc4wp-plugin-4-9-9-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/mailchimp-for-wp/wordpress-mc4wp-plugin-4-9-9-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-52233
Published: 2024-06-11
Description: Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6.
CVSS Score: 8.6 (HIGH)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/post-smtp/wordpress-post-smtp-mailer-plugin-2-8-6-broken-access-control-on-api-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/post-smtp/wordpress-post-smtp-mailer-plugin-2-8-6-broken-access-control-on-api-vulnerability?_s_id=cve
CVE: CVE-2024-23503
Published: 2024-06-11
Description: Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.6.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/ninja-tables/wordpress-ninja-tables-plugin-5-0-5-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/ninja-tables/wordpress-ninja-tables-plugin-5-0-5-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-23521
Published: 2024-06-11
Description: Missing Authorization vulnerability in Happyforms.This issue affects Happyforms: from n/a through 1.25.10.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/happyforms/wordpress-happyforms-plugin-1-25-10-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/happyforms/wordpress-happyforms-plugin-1-25-10-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-32144
Published: 2024-06-11
Description: Missing Authorization vulnerability in Welcart Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.14.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/usc-e-shop/wordpress-welcart-e-commerce-plugin-2-9-14-broken-access-control-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/usc-e-shop/wordpress-welcart-e-commerce-plugin-2-9-14-broken-access-control-csrf-vulnerability?_s_id=cve
CVE: CVE-2024-34753
Published: 2024-06-11
Description: Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://patchstack.com/database/vulnerability/radio-player/wordpress-radio-player-plugin-2-0-73-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/radio-player/wordpress-radio-player-plugin-2-0-73-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-34819
Published: 2024-06-11
Description: Missing Authorization vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert.This issue affects MC Woocommerce Wishlist: from n/a through <= 1.7.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/smart-wishlist-for-more-convert/vulnerability/wordpress-mc-woocommerce-wishlist-plugin-1-7-2-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/smart-wishlist-for-more-convert/wordpress-mc-woocommerce-wishlist-plugin-1-7-2-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-34821
Published: 2024-06-11
Description: Missing Authorization vulnerability in Anssi Laitila Contact List contact-list.This issue affects Contact List: from n/a through <= 2.9.87.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/contact-list/vulnerability/wordpress-contact-list-plugin-2-9-87-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/contact-list/wordpress-contact-list-plugin-2-9-87-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-34822
Published: 2024-06-11
Description: Missing Authorization vulnerability in weDevs weMail.This issue affects weMail: from n/a through 1.14.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/wemail/wordpress-wemail-plugin-1-14-2-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wemail/wordpress-wemail-plugin-1-14-2-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-36650
Published: 2024-06-11
Description: TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247_B20211129, in the cgi function `setNoticeCfg` of the file `/lib/cste_modules/system.so`, the length of the user input string `NoticeUrl` is not checked. This can lead to a buffer overflow, allowing attackers to construct malicious HTTP or MQTT requests to cause a denial-of-service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://gist.github.com/Swind1er/f442fcac520a48c05c744c7b72362483; https://gist.github.com/Swind1er/f442fcac520a48c05c744c7b72362483
CVE: CVE-2024-5812
Published: 2024-06-11
Description: A low severity vulnerability in BIPS has been identified where an attacker with high privileges or a compromised high privilege account can overwrite Read-Only smart rules via a specially crafted API request.
CVSS Score: 3.3 (LOW)
CWE: CWE-290, CWE-290
References: https://www.beyondtrust.com/trust-center/security-advisories/bt24-07; https://www.beyondtrust.com/trust-center/security-advisories/bt24-07
CVE: CVE-2024-5813
Published: 2024-06-11
Description: A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://www.beyondtrust.com/trust-center/security-advisories/bt24-08; https://www.beyondtrust.com/trust-center/security-advisories/bt24-08
CVE: CVE-2023-48273
Published: 2024-06-11
Description: Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Preloader for Website.This issue affects Preloader for Website: from n/a through 1.2.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/preloader-for-website/wordpress-preloader-for-website-plugin-1-2-2-unauthenticated-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/preloader-for-website/wordpress-preloader-for-website-plugin-1-2-2-unauthenticated-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-52224
Published: 2024-06-11
Description: Missing Authorization vulnerability in Revolut Revolut Gateway for WooCommerce.This issue affects Revolut Gateway for WooCommerce: from n/a through 4.9.7.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/revolut-gateway-for-woocommerce/wordpress-revolut-gateway-for-woocommerce-plugin-4-9-5-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/revolut-gateway-for-woocommerce/wordpress-revolut-gateway-for-woocommerce-plugin-4-9-5-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-52227
Published: 2024-06-11
Description: Missing Authorization vulnerability in MailerLite MailerLite – WooCommerce integration.This issue affects MailerLite – WooCommerce integration: from n/a through 2.0.8.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/woo-mailerlite/wordpress-mailerlite-woocommerce-integration-plugin-2-0-7-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/woo-mailerlite/wordpress-mailerlite-woocommerce-integration-plugin-2-0-7-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-23518
Published: 2024-06-11
Description: Missing Authorization vulnerability in Navneil Naicker ACF Photo Gallery Field.This issue affects ACF Photo Gallery Field: from n/a through 2.6.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/navz-photo-gallery/wordpress-acf-photo-gallery-field-plugin-2-5-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/navz-photo-gallery/wordpress-acf-photo-gallery-field-plugin-2-5-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-26330
Published: 2024-06-11
Description: An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout, user credentials remain in memory while the process is still open, and can be obtained by dumping the process memory and parsing it.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: https://www.secuvera.de/advisories/secuvera-SA-2024-04.md; https://www.secuvera.de/advisories/secuvera-SA-2024-04.txt; https://www.secuvera.de/advisories/secuvera-SA-2024-04.md
CVE: CVE-2024-29060
Published: 2024-06-11
Description: Visual Studio Elevation of Privilege Vulnerability
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29060; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29060
CVE: CVE-2024-30052
Published: 2024-06-11
Description: Visual Studio Remote Code Execution Vulnerability
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30052; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30052
CVE: CVE-2024-30062
Published: 2024-06-11
Description: Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30062; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30062
CVE: CVE-2024-30063
Published: 2024-06-11
Description: Windows Distributed File System (DFS) Remote Code Execution Vulnerability
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-641
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30063; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30063
CVE: CVE-2024-30064
Published: 2024-06-11
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30064; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30064
CVE: CVE-2024-30065
Published: 2024-06-11
Description: Windows Themes Denial of Service Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30065; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30065
CVE: CVE-2024-30066
Published: 2024-06-11
Description: Winlogon Elevation of Privilege Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30066; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30066
CVE: CVE-2024-30067
Published: 2024-06-11
Description: Winlogon Elevation of Privilege Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30067; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30067
CVE: CVE-2024-30068
Published: 2024-06-11
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30068; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30068
CVE: CVE-2024-30069
Published: 2024-06-11
Description: Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30069; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30069
CVE: CVE-2024-30070
Published: 2024-06-11
Description: DHCP Server Service Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-191
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30070; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30070
CVE: CVE-2024-30072
Published: 2024-06-11
Description: Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30072; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30072
CVE: CVE-2024-30074
Published: 2024-06-11
Description: Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
CVSS Score: 8.0 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30074; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30074
CVE: CVE-2024-30075
Published: 2024-06-11
Description: Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
CVSS Score: 8.0 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30075; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30075
CVE: CVE-2024-30076
Published: 2024-06-11
Description: Windows Container Manager Service Elevation of Privilege Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30076; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30076
CVE: CVE-2024-30077
Published: 2024-06-11
Description: Windows OLE Remote Code Execution Vulnerability
CVSS Score: 8.0 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30077; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30077
CVE: CVE-2024-30078
Published: 2024-06-11
Description: Windows Wi-Fi Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30078; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30078; https://www.vicarius.io/vsociety/posts/cve-2024-30078-detection-script-windows-wi-fi-driver-remote-code-execution-vulnerability
CVE: CVE-2024-30080
Published: 2024-06-11
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30080; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30080; https://www.vicarius.io/vsociety/posts/cve-2024-30080-detection-script-remote-code-execution-vulnerability-affecting-microsoft-msmq-1