rainbutterfly/cve_corpus huggingface dataset:
CVE-2023-36753 
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All versions < V2.16.0), RUGGEDCOM ROX RX1536 (All versions < V2.16.0), RUGGEDCOM ROX RX5000 (All versions < V2.16.0). The uninstall-app App-name parameter in the web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.
Problem types: cwe_id: CWE-77
description: CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected products: vendor: Siemens
product: RUGGEDCOM ROX MX5000
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX MX5000RE
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1400
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1500
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1501
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1510
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1511
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1512
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1524
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1536
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX5000
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
baseScore: 9.1
baseSeverity: CRITICAL
Published: 2023-07-11T09:07:20.117Z
CVE-2023-36754 
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All versions < V2.16.0), RUGGEDCOM ROX RX1536 (All versions < V2.16.0), RUGGEDCOM ROX RX5000 (All versions < V2.16.0). The SCEP server configuration URL parameter in the web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.
Problem types: cwe_id: CWE-77
description: CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected products: vendor: Siemens
product: RUGGEDCOM ROX MX5000
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX MX5000RE
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1400
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1500
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1501
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1510
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1511
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1512
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1524
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1536
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX5000
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
baseScore: 9.1
baseSeverity: CRITICAL
Published: 2023-07-11T09:07:21.194Z
CVE-2023-36755 
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All versions < V2.16.0), RUGGEDCOM ROX RX1536 (All versions < V2.16.0), RUGGEDCOM ROX RX5000 (All versions < V2.16.0). The SCEP CA Certificate Name parameter in the web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.
Problem types: cwe_id: CWE-77
description: CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected products: vendor: Siemens
product: RUGGEDCOM ROX MX5000
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX MX5000RE
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1400
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1500
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1501
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1510
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1511
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1512
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1524
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1536
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX5000
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
baseScore: 9.1
baseSeverity: CRITICAL
Published: 2023-07-11T09:07:22.285Z
CVE-2023-36756 Microsoft Exchange Server Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-502
description: CWE-502: Deserialization of Untrusted Data
Affected products: vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 23
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 13
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 12
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-09-12T16:58:31.333Z
CVE-2023-36757 Microsoft Exchange Server Spoofing Vulnerability
Problem types: cwe_id: CWE-502
description: CWE-502: Deserialization of Untrusted Data
Affected products: vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 23
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 12
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 13
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-09-12T16:58:30.805Z
CVE-2023-36758 Visual Studio Elevation of Privilege Vulnerability
Problem types: cwe_id: CWE-59
description: CWE-59: Improper Link Resolution Before File Access ('Link Following')
Affected products: vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.7
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-09-12T16:58:30.263Z
CVE-2023-36759 Visual Studio Elevation of Privilege Vulnerability
Problem types: cwe_id: CWE-822
description: CWE-822: Untrusted Pointer Dereference
Affected products: vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.2
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.4
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.7
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.6
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 6.7
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-09-12T16:58:29.748Z
CVE-2023-36760 3D Viewer Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-416
description: CWE-416: Use After Free
Affected products: vendor: Microsoft
product: 3D Viewer
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-09-12T16:58:46.573Z
CVE-2023-36761 Microsoft Word Information Disclosure Vulnerability
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: Microsoft
product: Microsoft Office 2019
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise
vendor: Microsoft
product: Microsoft Office LTSC 2021
vendor: Microsoft
product: Microsoft Word 2016
vendor: Microsoft
product: Microsoft Word 2013 Service Pack 1
vendor: Microsoft
product: Microsoft Word 2013 Service Pack 1
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
Published: 2023-09-12T16:58:46.043Z
CVE-2023-36762 Microsoft Word Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: Microsoft
product: Microsoft SharePoint Enterprise Server 2016
vendor: Microsoft
product: Microsoft Office 2019
vendor: Microsoft
product: Microsoft Office 2019 for Mac
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise
vendor: Microsoft
product: Microsoft Office LTSC for Mac 2021
vendor: Microsoft
product: Microsoft Office LTSC 2021
vendor: Microsoft
product: Microsoft Word 2016
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.3
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C
Published: 2023-09-12T16:58:45.514Z
CVE-2023-36763 Microsoft Outlook Information Disclosure Vulnerability
Problem types: cwe_id: CWE-200
description: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: Microsoft
product: Microsoft Office 2019
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise
vendor: Microsoft
product: Microsoft Office LTSC 2021
vendor: Microsoft
product: Microsoft Outlook 2016
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Published: 2023-09-12T16:58:44.987Z
CVE-2023-36764 Microsoft SharePoint Server Elevation of Privilege Vulnerability
Problem types: cwe_id: CWE-73
description: CWE-73: External Control of File Name or Path
Affected products: vendor: Microsoft
product: Microsoft SharePoint Enterprise Server 2016
vendor: Microsoft
product: Microsoft SharePoint Server 2019
vendor: Microsoft
product: Microsoft SharePoint Server Subscription Edition
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-09-12T16:58:44.461Z
CVE-2023-36765 Microsoft Office Elevation of Privilege Vulnerability
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Microsoft Office 2019
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-09-12T16:58:29.228Z
CVE-2023-36766 Microsoft Excel Information Disclosure Vulnerability
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Microsoft
product: Microsoft Office 2019
vendor: Microsoft
product: Microsoft Office 2019 for Mac
vendor: Microsoft
product: Microsoft Office Online Server
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise
vendor: Microsoft
product: Microsoft Office LTSC for Mac 2021
vendor: Microsoft
product: Microsoft Office LTSC 2021
vendor: Microsoft
product: Microsoft Excel 2016
vendor: Microsoft
product: Microsoft Excel 2013 Service Pack 1
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-09-12T16:58:28.687Z
CVE-2023-36767 Microsoft Office Security Feature Bypass Vulnerability
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: Microsoft
product: Microsoft Office 2019
vendor: Microsoft
product: Microsoft Office 2019 for Mac
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise
vendor: Microsoft
product: Microsoft Office LTSC for Mac 2021
vendor: Microsoft
product: Microsoft Office LTSC 2021
vendor: Microsoft
product: Microsoft Office 2016
vendor: Microsoft
product: Microsoft Office 2013 Service Pack 1
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 4.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C
Published: 2023-09-12T16:58:28.137Z
CVE-2023-36769 Microsoft OneNote Spoofing Vulnerability
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft Office 2019
vendor: Microsoft
product: Microsoft Office LTSC 2021
vendor: Microsoft
product: Microsoft OneNote 2016
vendor: Microsoft
product: Microsoft OneNote 2013
vendor: Microsoft
product: Microsoft OneNote 2013 Service Pack 1
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 4.6
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C
Published: 2023-11-06T22:51:21.878Z
CVE-2023-36770 3D Builder Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: Microsoft
product: 3D Builder
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-09-12T16:58:43.929Z
CVE-2023-36771 3D Builder Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: Microsoft
product: 3D Builder
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-09-12T16:58:43.389Z
CVE-2023-36772 3D Builder Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: Microsoft
product: 3D Builder
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-09-12T16:58:42.871Z
CVE-2023-36773 3D Builder Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-126
description: CWE-126: Buffer Over-read
Affected products: vendor: Microsoft
product: 3D Builder
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-09-12T16:58:42.341Z
CVE-2023-36776 Win32k Elevation of Privilege Vulnerability
Problem types: cwe_id: CWE-416
description: CWE-416: Use After Free
Affected products: vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
vendor: Microsoft
product: Windows Server 2022
vendor: Microsoft
product: Windows 11 version 21H2
vendor: Microsoft
product: Windows 10 Version 21H2
vendor: Microsoft
product: Windows 11 version 22H2
vendor: Microsoft
product: Windows 10 Version 22H2
vendor: Microsoft
product: Windows 10 Version 1507
vendor: Microsoft
product: Windows 10 Version 1607
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008 Service Pack 2 (Server Core installation)
vendor: Microsoft
product: Windows Server 2008  Service Pack 2
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012
vendor: Microsoft
product: Windows Server 2012 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012 R2
vendor: Microsoft
product: Windows Server 2012 R2 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-10-10T17:08:12.638Z
CVE-2023-36777 Microsoft Exchange Server Information Disclosure Vulnerability
Problem types: cwe_id: CWE-502
description: CWE-502: Deserialization of Untrusted Data
Affected products: vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 12
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 23
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 13
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 5.7
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Published: 2023-09-12T16:58:41.822Z
CVE-2023-36778 Microsoft Exchange Server Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-426
description: CWE-426: Untrusted Search Path
Affected products: vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 13
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 12
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 23
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-10-10T17:08:12.082Z
CVE-2023-36780 Skype for Business Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-426
description: CWE-426: Untrusted Search Path
Affected products: vendor: Microsoft
product: Skype for Business Server 2019 CU7
vendor: Microsoft
product: Skype for Business Server 2015 CU13
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.2
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-10-10T17:08:11.540Z
CVE-2023-36785 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-191
description: CWE-191: Integer Underflow (Wrap or Wraparound)
Affected products: vendor: Microsoft
product: Microsoft SQL Server 2019 (GDR)
vendor: Microsoft
product: Microsoft SQL Server 2022 (GDR)
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on Windows
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on Linux
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on MacOS
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on Windows
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on Linux
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on MacOS
vendor: Microsoft
product: Microsoft SQL Server 2019 (CU 22)
vendor: Microsoft
product: Microsoft SQL Server 2022 (CU 8)
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-10-10T17:08:10.995Z
CVE-2023-36786 Skype for Business Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-36
description: CWE-36: Absolute Path Traversal
Affected products: vendor: Microsoft
product: Skype for Business Server 2015 CU13
vendor: Microsoft
product: Skype for Business Server 2019 CU7
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.2
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-10-10T17:08:10.444Z
CVE-2023-36787 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Problem types: cwe_id: CWE-416
description: CWE-416: Use After Free
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-08-21T19:04:29.357Z
CVE-2023-36788 .NET Framework Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft .NET Framework 3.5 AND 4.8
vendor: Microsoft
product: Microsoft .NET Framework 3.5 AND 4.7.2
vendor: Microsoft
product: Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
vendor: Microsoft
product: Microsoft .NET Framework 3.5 AND 4.8.1
vendor: Microsoft
product: Microsoft .NET Framework 3.5 and 4.6.2
vendor: Microsoft
product: Microsoft .NET Framework 2.0 Service Pack 2
vendor: Microsoft
product: Microsoft .NET Framework 3.0 Service Pack 2
vendor: Microsoft
product: Microsoft .NET Framework 3.5
vendor: Microsoft
product: Microsoft .NET Framework 3.5.1
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-09-12T16:58:41.302Z
CVE-2023-36789 Skype for Business Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-94
description: CWE-94: Improper Control of Generation of Code ('Code Injection')
Affected products: vendor: Microsoft
product: Skype for Business Server 2019 CU7
vendor: Microsoft
product: Skype for Business Server 2015 CU13
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.2
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-10-10T17:08:09.912Z
CVE-2023-36790 Windows RDP Encoder Mirror Driver Elevation of Privilege Vulnerability
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008 Service Pack 2 (Server Core installation)
vendor: Microsoft
product: Windows Server 2008  Service Pack 2
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-10-10T17:08:09.390Z
CVE-2023-36792 Visual Studio Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-190
description: CWE-190: Integer Overflow or Wraparound
Affected products: vendor: Microsoft
product: Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.2
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.4
vendor: Microsoft
product: .NET 6.0
vendor: Microsoft
product: .NET 7.0
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.6
vendor: Microsoft
product: PowerShell 7.2
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.7
vendor: Microsoft
product: Microsoft .NET Framework 4.8
vendor: Microsoft
product: Microsoft .NET Framework 3.5 AND 4.8
vendor: Microsoft
product: Microsoft .NET Framework 3.5 AND 4.7.2
vendor: Microsoft
product: Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
vendor: Microsoft
product: Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
vendor: Microsoft
product: Microsoft .NET Framework 3.5 AND 4.8.1
vendor: Microsoft
product: Microsoft .NET Framework 4.6.2
vendor: Microsoft
product: Microsoft .NET Framework 3.5 and 4.6.2
vendor: Microsoft
product: Microsoft .NET Framework 2.0 Service Pack 2
vendor: Microsoft
product: Microsoft .NET Framework 3.0 Service Pack 2
vendor: Microsoft
product: Microsoft .NET Framework 3.5
vendor: Microsoft
product: Microsoft .NET Framework 3.5.1
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-09-12T16:58:40.779Z