stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2023-2820 (severity: MEDIUM, weakness: CWE-200)
An information disclosure vulnerability in the faye endpoint in Proofpoint Threat Response / Threat Response Auto-Pull (PTR/TRAP) could be used by an attacker on an adjacent network to obtain credentials to integrated services via a man-in-the-middle position or cryptanalysis of the session traffic. An attacker could use these credentials to impersonate PTR/TRAP to these services. All versions prior to 5.10.0 are affected.
CVE-2023-28200 (severity: MEDIUM, weakness: CWE-20)
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to disclose kernel memory.
CVE-2023-28201 (severity: CRITICAL, weakness: CWE-362)
This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4. A remote user may be able to cause unexpected app termination or arbitrary code execution.
CVE-2023-28202 (severity: MEDIUM, weakness: CWE-640)
This issue was addressed with improved state management. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app firewall setting may not take effect after exiting the Settings app.
CVE-2023-28203 (severity: MEDIUM, weakness: CWE-200)
The issue was addressed with improved checks. This issue is fixed in Apple Music 4.2.0 for Android. An app may be able to access contacts.
CVE-2023-28204 (severity: MEDIUM, weakness: CWE-125)
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited.
CVE-2023-28205 (severity: HIGH, weakness: CWE-416)
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
CVE-2023-28206 (severity: HIGH, weakness: CWE-787)
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.
CVE-2023-28207 (severity: MEDIUM, weakness: CWE-277)
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A plug-in may be able to inherit app permissions and access user data.
CVE-2023-28208 (severity: MEDIUM, weakness: NVD-CWE-Other)
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may send a text from a secondary eSIM despite configuring a contact to use a primary eSIM.
CVE-2023-28209 (severity: HIGH, weakness: CWE-120)
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2023-28210 (severity: HIGH, weakness: CWE-120)
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2023-28211 (severity: HIGH, weakness: CWE-120)
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2023-28212 (severity: HIGH, weakness: CWE-120)
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2023-28213 (severity: HIGH, weakness: CWE-120)
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2023-28214 (severity: HIGH, weakness: CWE-120)
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2023-28215 (severity: HIGH, weakness: CWE-120)
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2023-28216 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2023-28217 (severity: HIGH, weakness: CWE-400)
Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVE-2023-28218 (severity: HIGH, weakness: CWE-122)
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2023-28219 (severity: HIGH, weakness: CWE-591)
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-2822 (severity: MEDIUM, weakness: CWE-79)
A vulnerability was found in Ellucian Ethos Identity up to 5.10.5. It has been classified as problematic. Affected is an unknown function of the file /cas/logout. The manipulation of the argument url leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.10.6 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-229596.
CVE-2023-28220 (severity: HIGH, weakness: CWE-591)
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-28221 (severity: HIGH, weakness: CWE-200)
Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2023-28222 (severity: HIGH, weakness: CWE-59)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-28223 (severity: MEDIUM, weakness: CWE-416)
Windows Domain Name Service Remote Code Execution Vulnerability
CVE-2023-28224 (severity: HIGH, weakness: CWE-591)
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
CVE-2023-28225 (severity: HIGH, weakness: CWE-122)
Windows NTLM Elevation of Privilege Vulnerability
CVE-2023-28226 (severity: MEDIUM, weakness: CWE-347)
Windows Enroll Engine Security Feature Bypass Vulnerability
CVE-2023-28227 (severity: HIGH, weakness: CWE-122)
Windows Bluetooth Driver Remote Code Execution Vulnerability
CVE-2023-28228 (severity: MEDIUM, weakness: CWE-347)
Windows Spoofing Vulnerability
CVE-2023-28229 (severity: HIGH, weakness: CWE-591)
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2023-2823 (severity: CRITICAL, weakness: CWE-89)
A vulnerability was found in SourceCodester Class Scheduling System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit_subject.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-229597 was assigned to this vulnerability.
CVE-2023-28231 (severity: HIGH, weakness: CWE-122)
DHCP Server Service Remote Code Execution Vulnerability
CVE-2023-28232 (severity: HIGH, weakness: CWE-362)
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-28233 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Secure Channel Denial of Service Vulnerability
CVE-2023-28234 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Secure Channel Denial of Service Vulnerability
CVE-2023-28235 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Lock Screen Security Feature Bypass Vulnerability
CVE-2023-28236 (severity: HIGH, weakness: CWE-591)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-28237 (severity: HIGH, weakness: CWE-190)
Windows Kernel Remote Code Execution Vulnerability
CVE-2023-28238 (severity: HIGH, weakness: CWE-591)
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
CVE-2023-2824 (severity: MEDIUM, weakness: CWE-79)
A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/service.php of the component POST Parameter Handler. The manipulation of the argument service leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-229598 is the identifier assigned to this vulnerability.
CVE-2023-28240 (severity: HIGH, weakness: CWE-122)
Windows Network Load Balancing Remote Code Execution Vulnerability
CVE-2023-28241 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
CVE-2023-28243 (severity: HIGH, weakness: CWE-843)
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-28244 (severity: HIGH, weakness: CWE-327)
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2023-28246 (severity: HIGH, weakness: CWE-284)
Windows Registry Elevation of Privilege Vulnerability
CVE-2023-28247 (severity: HIGH, weakness: CWE-191)
Windows Network File System Information Disclosure Vulnerability
CVE-2023-28248 (severity: HIGH, weakness: CWE-190)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-28249 (severity: MEDIUM, weakness: CWE-863)
Windows Boot Manager Security Feature Bypass Vulnerability
CVE-2023-2825 (severity: HIGH, weakness: CWE-22)
An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment exists in a public project nested within at least five groups.
CVE-2023-28250 (severity: CRITICAL, weakness: CWE-191)
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2023-28251 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Driver Revocation List Security Feature Bypass Vulnerability
CVE-2023-28252 (severity: HIGH, weakness: CWE-122)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-28253 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Kernel Information Disclosure Vulnerability
CVE-2023-28254 (severity: HIGH, weakness: CWE-122)
Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-28255 (severity: MEDIUM, weakness: CWE-591)
Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-28256 (severity: MEDIUM, weakness: CWE-591)
Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-2826 (severity: MEDIUM, weakness: CWE-79)
A vulnerability has been found in SourceCodester Class Scheduling System 1.0 and classified as problematic. This vulnerability affects unknown code of the file search_teacher_result.php of the component POST Parameter Handler. The manipulation of the argument teacher leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229612.
CVE-2023-28260 (severity: HIGH, weakness: NVD-CWE-Other)
.NET DLL Hijacking Remote Code Execution Vulnerability
CVE-2023-28261 (severity: MEDIUM, weakness: CWE-269)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2023-28262 (severity: HIGH, weakness: CWE-122)
Visual Studio Elevation of Privilege Vulnerability
CVE-2023-28263 (severity: MEDIUM, weakness: CWE-170)
Visual Studio Information Disclosure Vulnerability
CVE-2023-28266 (severity: MEDIUM, weakness: CWE-126)
Windows Common Log File System Driver Information Disclosure Vulnerability
CVE-2023-28267 (severity: MEDIUM, weakness: CWE-126)
Remote Desktop Protocol Client Information Disclosure Vulnerability
CVE-2023-28268 (severity: HIGH, weakness: NVD-CWE-Other)
Netlogon RPC Elevation of Privilege Vulnerability
CVE-2023-28269 (severity: MEDIUM, weakness: CWE-122)
Windows Boot Manager Security Feature Bypass Vulnerability
CVE-2023-2827 (severity: MEDIUM, weakness: CWE-306)
SAP Plant Connectivity - version 15.5 (PCo) or the Production Connector for SAP Digital Manufacturing - version 1.0, do not validate the signature of the JSON Web Token (JWT) in the HTTP request sent from SAP Digital Manufacturing. Therefore, unauthorized callers from the internal network could send service requests to PCo or the Production Connector, which could have an impact on the integrity of the integration with SAP Digital Manufacturing.
CVE-2023-28270 (severity: MEDIUM, weakness: CWE-863)
Windows Lock Screen Security Feature Bypass Vulnerability
CVE-2023-28271 (severity: MEDIUM, weakness: CWE-200)
Windows Kernel Memory Information Disclosure Vulnerability
CVE-2023-28272 (severity: HIGH, weakness: CWE-191)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-28273 (severity: HIGH, weakness: CWE-591)
Windows Clip Service Elevation of Privilege Vulnerability
CVE-2023-28274 (severity: HIGH, weakness: CWE-20)
Windows Win32k Elevation of Privilege Vulnerability
CVE-2023-28275 (severity: HIGH, weakness: CWE-122)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2023-28276 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Group Policy Security Feature Bypass Vulnerability
CVE-2023-28277 (severity: MEDIUM, weakness: CWE-190)
Windows DNS Server Information Disclosure Vulnerability
CVE-2023-28278 (severity: MEDIUM, weakness: CWE-591)
Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-2828 (severity: HIGH, weakness: CWE-770)
Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers. The size limit for that cache database can be configured using the `max-cache-size` statement in the configuration file; it defaults to 90% of the total amount of memory available on the host. When the size of the cache reaches 7/8 of the configured limit, a cache-cleaning algorithm starts to remove expired and/or least-recently used RRsets from the cache, to keep memory use below the configured limit. It has been discovered that the effectiveness of the cache-cleaning algorithm used in `named` can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured `max-cache-size` limit to be significantly exceeded. This issue affects BIND 9 versions 9.11.0 through 9.16.41, 9.18.0 through 9.18.15, 9.19.0 through 9.19.13, 9.11.3-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.
CVE-2023-28283 (severity: HIGH, weakness: CWE-591)
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2023-28284 (severity: MEDIUM, weakness: CWE-693)
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2023-28285 (severity: HIGH, weakness: CWE-416)
Microsoft Office Remote Code Execution Vulnerability
CVE-2023-28286 (severity: MEDIUM, weakness: CWE-693)
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2023-28287 (severity: HIGH, weakness: CWE-416)
Microsoft Publisher Remote Code Execution Vulnerability
CVE-2023-28288 (severity: HIGH, weakness: CWE-918)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-2829 (severity: HIGH, weakness: NVD-CWE-Other)
A `named` instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache (RFC 8198) option (`synth-from-dnssec`) enabled can be remotely terminated using a zone with a malformed NSEC record. This issue affects BIND 9 versions 9.16.8-S1 through 9.16.41-S1 and 9.18.11-S1 through 9.18.15-S1.
CVE-2023-28290 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability
CVE-2023-28291 (severity: HIGH, weakness: CWE-20)
Raw Image Extension Remote Code Execution Vulnerability
CVE-2023-28292 (severity: HIGH, weakness: CWE-122)
Raw Image Extension Remote Code Execution Vulnerability
CVE-2023-28293 (severity: HIGH, weakness: CWE-191)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-28295 (severity: HIGH, weakness: CWE-190)
Microsoft Publisher Remote Code Execution Vulnerability
CVE-2023-28296 (severity: HIGH, weakness: CWE-415)
Visual Studio Remote Code Execution Vulnerability
CVE-2023-28297 (severity: HIGH, weakness: CWE-416)
Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability
CVE-2023-28298 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Kernel Denial of Service Vulnerability
CVE-2023-28299 (severity: MEDIUM, weakness: NVD-CWE-Other)
Visual Studio Spoofing Vulnerability
CVE-2023-2830 (severity: HIGH, weakness: CWE-352)
Cross-Site Request Forgery (CSRF) vulnerability in Trustindex.Io WP Testimonials plugin <= 1.4.2 versions.
CVE-2023-28300 (severity: HIGH, weakness: CWE-284)
Azure Service Connector Security Feature Bypass Vulnerability
CVE-2023-28301 (severity: LOW, weakness: CWE-20)
Microsoft Edge (Chromium-based) Tampering Vulnerability
CVE-2023-28302 (severity: HIGH, weakness: CWE-20)
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-28303 (severity: LOW, weakness: CWE-359)
Windows Snipping Tool Information Disclosure Vulnerability
CVE-2023-28304 (severity: HIGH, weakness: CWE-20)
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
CVE-2023-28305 (severity: MEDIUM, weakness: CWE-416)
Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-28306 (severity: MEDIUM, weakness: CWE-416)
Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-28307 (severity: MEDIUM, weakness: CWE-416)
Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-28308 (severity: MEDIUM, weakness: CWE-416)
Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-28309 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-2831 (severity: MEDIUM, weakness: CWE-400)
Mattermost fails to unescape Markdown strings in a memory-efficient way, allowing an attacker to cause a Denial of Service by sending a message containing a large number of escaped characters.
CVE-2023-28310 (severity: HIGH, weakness: CWE-502)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-28311 (severity: HIGH, weakness: CWE-122)
Microsoft Word Remote Code Execution Vulnerability
CVE-2023-28312 (severity: MEDIUM, weakness: CWE-284)
Azure Machine Learning Information Disclosure Vulnerability
CVE-2023-28313 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability
CVE-2023-28314 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-28316 (severity: CRITICAL, weakness: CWE-384)
A security vulnerability has been discovered in the implementation of 2FA on the rocket.chat platform, where other active sessions are not invalidated upon activating 2FA. This could potentially allow an attacker to maintain access to a compromised account even after 2FA is enabled.
CVE-2023-28317 (severity: MEDIUM, weakness: CWE-285)
A vulnerability has been discovered in Rocket.Chat, where editing messages can change the original timestamp, causing the UI to display messages in an incorrect order.
CVE-2023-28318 (severity: MEDIUM, weakness: CWE-285)
A vulnerability has been discovered in Rocket.Chat, where messages can be hidden regardless of the Message_KeepHistory or Message_ShowDeletedStatus server configuration. This allows users to bypass the intended message deletion behavior, hiding messages and deletion notices.
CVE-2023-28319 (severity: HIGH, weakness: CWE-416)
A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this check fails, libcurl would free the memory for the fingerprint before it returns an error message containing the (now freed) hash. This flaw risks inserting sensitive heap-based data into the error message that might be shown to users or otherwise get leaked and revealed.
CVE-2023-2832 (severity: HIGH, weakness: CWE-89)
SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0.
CVE-2023-28320 (severity: MEDIUM, weakness: CWE-400)
A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using `alarm()` and `siglongjmp()`. When doing this, libcurl used a global buffer that was not mutex protected and a multi-threaded application might therefore crash or otherwise misbehave.
CVE-2023-28321 (severity: MEDIUM, weakness: CWE-295)
An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as "Subject Alternative Name" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.
CVE-2023-28322 (severity: LOW, weakness: CWE-200)
An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.
CVE-2023-28323 (severity: CRITICAL, weakness: CWE-502)
A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user to elevate rights. This exploit could potentially be used in conjunction with other OS (Operating System) vulnerabilities to escalate privileges on the machine or be used as a stepping stone to get to other network attached machines.
CVE-2023-28324 (severity: HIGH, weakness: CWE-20)
A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that could allow privilege escalation or remote code execution.
CVE-2023-28325 (severity: MEDIUM, weakness: CWE-285)
An improper authorization vulnerability exists in Rocket.Chat <6.0 that could allow a hacker to manipulate the rid parameter and change the updateMessage method that only checks whether the user is allowed to edit message in the target room.
CVE-2023-28326 (severity: CRITICAL, weakness: CWE-306)
Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.0.0 Description: Attacker can elevate their privileges in any room
CVE-2023-28327 (severity: MEDIUM, weakness: CWE-476)
A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service.