yahoo-inc/cve-impacts huggingface dataset:
CVE-2023-2815: A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-229429 was assigned to this vulnerability.
Key phrases: sql injection
CVE-2023-28150: An issue was discovered in Independentsoft JODF before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file.
Key phrases: xml external entity (xxe)
CVE-2023-28151: An issue was discovered in Independentsoft JSpreadsheet before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file.
Key phrases: xml external entity (xxe)
CVE-2023-28152: An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file.
Key phrases: xml external entity (xxe)
CVE-2023-28153: An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission.
Key phrases: reboot
CVE-2023-28154: Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.
Key phrases: obtain access, cross-realm object access
CVE-2023-28155: The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Key phrases: bypass of SSRF mitigations via an attacker-controller server, HTTPS, request package, ssrf mitigations
CVE-2023-28158: Privilege escalation via stored XSS using the file upload service to upload malicious content.The issue can be exploited only by authenticated users which can create directory name to inject some XSS content and gain some privileges such admin user.
Key phrases: gain some privileges, privilege escalation, stored xss, file upload, gain privileges
CVE-2023-28159: The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing attacks. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 111.
Key phrases: download popups, user confusion, spoofing
CVE-2023-2816: Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permission to modify the service(s) corresponding to those modified proxies.
CVE-2023-28160: When following a redirect to a publicly accessible web extension file, the URL may have been translated to the actual local path, leaking potentially sensitive information. This vulnerability affects Firefox < 111.
Key phrases: sensitive information
CVE-2023-28161: If temporary "one-time" permissions, such as the ability to use the Camera, were granted to a document loaded using a file: URL, that permission persisted in that tab for all other documents loaded from a file: URL. This is potentially dangerous if the local files came from different sources, such as in a download directory. This vulnerability affects Firefox < 111.
CVE-2023-28162: While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.
Key phrases: exploitable crash
CVE-2023-28163: When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those in the context of the current user. <br>*This bug only affects Firefox on Windows. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.
CVE-2023-28164: Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.
Key phrases: cross-origin iframe, user confusion, website spoofing
CVE-2023-28166: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Aakif Kadiwala Tags Cloud Manager plugin <=1.0.0 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-28167: Cross-Site Request Forgery (CSRF) vulnerability in Vsourz Digital CF7 Invisible reCAPTCHA plugin <=1.3.3 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-28169: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CoreFortress Easy Event calendar plugin <=1.0 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-2817: A post-authentication stored cross-site scripting vulnerability exists in Craft CMS versions <= 4.4.11. HTML, including script tags can be injected into field names which, when the field is added to a category or section, will trigger when users visit the Categories or Entries pages respectively.
Key phrases: cross-site scripting
CVE-2023-28170: Unrestricted Upload of File with Dangerous Type vulnerability in Themely Theme Demo Import.This issue affects Theme Demo Import: from n/a through 1.1.1.
Key phrases: unrestricted upload of file with dangerous type
CVE-2023-28171: Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in WP Chill Brilliance theme <=1.3.1 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-28172: Cross-Site Request Forgery (CSRF) vulnerability in flippercode WordPress Plugin for Google Maps  WP MAPS (formerly WP Google Map Plugin) plugin <=4.4.2 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-28173: Cross-Site Request Forgery (CSRF) vulnerability in Amit Agarwal Google XML Sitemap for Images plugin <=2.1.3 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-28174: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in eLightUp eRocket plugin <=1.2.4 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-28175: Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request.
Key phrases: access resources within the trusted internal network via, improper authorization
CVE-2023-28176: Memory safety bugs present in Firefox 110 and Firefox ESR 102.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.
Key phrases: run arbitrary code, memory safety bugs, memory corruption
CVE-2023-28177: Memory safety bugs present in Firefox 110. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 111.
Key phrases: run arbitrary code, memory safety bugs, memory corruption
CVE-2023-28178: A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to bypass Privacy preferences.
Key phrases: bypass Privacy preferences, privacy preferences
CVE-2023-28179: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. Processing a maliciously crafted AppleScript binary may result in unexpected app termination or disclosure of process memory.
Key phrases: unexpected app termination, disclosure of process memory
CVE-2023-2818: An insecure filesystem permission in the Insider Threat Management Agent for Windows enables local unprivileged users to disrupt agent monitoring. All versions prior to 7.14.3 are affected. Agents for MacOS and Linux and Cloud are unaffected.
Key phrases: insecure filesystem permission
CVE-2023-28180: A denial-of-service issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. A user in a privileged network position may be able to cause a denial-of-service.
Key phrases: denial-of-service, denial of service
CVE-2023-28181: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.4, macOS Big Sur 11.7.7, tvOS 16.4, watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges.
Key phrases: execute arbitrary code
CVE-2023-28182: The issue was addressed with improved authentication. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A user in a privileged network position may be able to spoof a VPN server that is configured with EAP-only authentication on a device.
Key phrases: privileged network position, spoofing
CVE-2023-28185: An integer overflow was addressed through improved input validation. This issue is fixed in tvOS 16.4, macOS Big Sur 11.7.5, iOS 16.4 and iPadOS 16.4, watchOS 9.4, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4. An app may be able to cause a denial-of-service.
Key phrases: integer overflow, denial-of-service, denial of service
CVE-2023-28187: This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3. A user may be able to cause a denial-of-service.
Key phrases: denial-of-service, denial of service
CVE-2023-28188: A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. A remote user may be able to cause a denial-of-service.
Key phrases: denial-of-service issue, denial of service
CVE-2023-28189: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to view sensitive information.
Key phrases: sensitive information
CVE-2023-2819: A stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/ Threat Response Auto Pull (PTR/TRAP) could allow an authenticated administrator on an adjacent network to replace the image file with an arbitrary MIME type. ?This could result in arbitrary javascript code execution in an admin context.?All versions prior to 5.10.0 are affected.?
Key phrases: replace the image file with an arbitrary MIME, stored cross-site scripting, arbitrary javascript, code execution
CVE-2023-28190: A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in macOS Ventura 13.3. An app may be able to access user-sensitive data.
Key phrases: privacy issue
CVE-2023-28191: This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to bypass Privacy preferences.
Key phrases: bypass Privacy preferences, bypass privacy preferences, sensitive information
CVE-2023-28192: A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to read sensitive location information.
Key phrases: permissions issue, sensitive location information
CVE-2023-28194: The issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to unexpectedly create a bookmark on the Home Screen.
CVE-2023-28195: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3. An app may be able to read sensitive location information.
Key phrases: privacy issue
CVE-2023-28197: An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4. An app may be able to access user-sensitive data.
Key phrases: access issue
CVE-2023-28198: A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution.
Key phrases: use-after-free issue, arbitrary code execution, use after free
CVE-2023-28199: An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. An app may be able to disclose kernel memory.
Key phrases: out-of-bounds read issue, out of bounds read, disclosure
CVE-2023-2820: An information disclosure vulnerability in the faye endpoint in Proofpoint Threat Response / Threat Response Auto-Pull (PTR/TRAP) could be used by an attacker on an adjacent network to obtain credentials to integrated services via a man-in-the-middle position or cryptanalysis of the session traffic. An attacker could use these credentials to impersonate PTR/TRAP to these services. All versions prior to 5.10.0 are affected.
Key phrases: obtain credentials, information disclosure, man-in-the-middle position, man in the middle, impersonate
CVE-2023-28200: A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to disclose kernel memory.
Key phrases: disclose kernel memory
CVE-2023-28201: This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4. A remote user may be able to cause unexpected app termination or arbitrary code execution.
Key phrases: unexpected app termination, arbitrary code execution
CVE-2023-28202: This issue was addressed with improved state management. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app firewall setting may not take effect after exiting the Settings app.
CVE-2023-28203: The issue was addressed with improved checks. This issue is fixed in Apple Music 4.2.0 for Android. An app may be able to access contacts.
CVE-2023-28204: An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited.
Key phrases: out-of-bounds read, sensitive information, out of bounds read
CVE-2023-28205: A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Key phrases: use after free issue, arbitrary code execution
CVE-2023-28206: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.
Key phrases: execute arbitrary code, out-of-bounds write issue, out of bounds write
CVE-2023-28208: A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may send a text from a secondary eSIM despite configuring a contact to use a primary eSIM.
CVE-2023-28209: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
Key phrases: buffer overflow issue, system termination
CVE-2023-28210: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
Key phrases: buffer overflow issue, system termination
CVE-2023-28211: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
Key phrases: buffer overflow issue, system termination
CVE-2023-28212: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
Key phrases: buffer overflow issue, system termination
CVE-2023-28213: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
Key phrases: buffer overflow issue, system termination
CVE-2023-28214: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
Key phrases: buffer overflow issue, system termination
CVE-2023-28215: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
Key phrases: buffer overflow issue, system termination
CVE-2023-28216: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Key phrases: windows advanced local procedure call (alpc) elevation of privilege
CVE-2023-28217: Windows Network Address Translation (NAT) Denial of Service Vulnerability
Key phrases: windows network address translation (nat), denial of service
CVE-2023-28218: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Key phrases: winsock elevation of privilege
CVE-2023-28219: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
Key phrases: layer tunneling protocol remote code execution
CVE-2023-2822: A vulnerability was found in Ellucian Ethos Identity up to 5.10.5. It has been classified as problematic. Affected is an unknown function of the file /cas/logout. The manipulation of the argument url leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.10.6 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-229596.
Key phrases: cross site scripting, cross-site scripting
CVE-2023-28220: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
Key phrases: layer tunneling protocol remote code execution
CVE-2023-28221: Windows Error Reporting Service Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-28222: Windows Kernel Elevation of Privilege Vulnerability
Key phrases: windows kernel elevation of privilege
CVE-2023-28223: Windows  Domain Name Service Remote Code Execution Vulnerability
Key phrases: windows domain name service remote code execution
CVE-2023-28224: Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-28225: Windows NTLM Elevation of Privilege Vulnerability
Key phrases: windows ntlm elevation of privilege
CVE-2023-28226: Windows Enroll Engine Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, security feature bypass
CVE-2023-28227: Windows Bluetooth Driver Remote Code Execution Vulnerability
Key phrases: windows bluetooth driver remote code execution
CVE-2023-28228: Windows Spoofing Vulnerability
Key phrases: windows spoofing
CVE-2023-28229: Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
Key phrases: windows cng key isolation service elevation of privilege
CVE-2023-2823: A vulnerability was found in SourceCodester Class Scheduling System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit_subject.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-229597 was assigned to this vulnerability.
Key phrases: sql injection
CVE-2023-28231: DHCP Server Service Remote Code Execution Vulnerability
Key phrases: dhcp server service remote code execution
CVE-2023-28232: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Key phrases: windows point-to-point tunneling protocol remote code execution
CVE-2023-28233: Windows Secure Channel Denial of Service Vulnerability
Key phrases: denial of service
CVE-2023-28234: Windows Secure Channel Denial of Service Vulnerability
Key phrases: denial of service
CVE-2023-28235: Windows Lock Screen Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, windows lock screen security feature bypass
CVE-2023-28236: Windows Kernel Elevation of Privilege Vulnerability
Key phrases: windows kernel elevation of privilege
CVE-2023-28237: Windows Kernel Remote Code Execution Vulnerability
Key phrases: windows kernel remote code execution
CVE-2023-28238: Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-2824: A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/service.php of the component POST Parameter Handler. The manipulation of the argument service leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-229598 is the identifier assigned to this vulnerability.
Key phrases: cross site scripting
CVE-2023-28240: Windows Network Load Balancing Remote Code Execution Vulnerability
Key phrases: windows network load balancing remote code execution
CVE-2023-28241: Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
Key phrases: denial of service
CVE-2023-28243: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-28244: Windows Kerberos Elevation of Privilege Vulnerability
Key phrases: windows kerberos elevation of privilege
CVE-2023-28246: Windows Registry Elevation of Privilege Vulnerability
Key phrases: windows registry elevation of privilege
CVE-2023-28247: Windows Network File System Information Disclosure Vulnerability
Key phrases: windows network file system information disclosure
CVE-2023-28248: Windows Kernel Elevation of Privilege Vulnerability
Key phrases: windows kernel elevation of privilege
CVE-2023-28249: Windows Boot Manager Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, windows boot manager security feature bypass
CVE-2023-2825: An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment exists in a public project nested within at least five groups.
Key phrases: read arbitrary files, path traversal
CVE-2023-28250: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-28251: Windows Driver Revocation List Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, security feature bypass
CVE-2023-28252: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Key phrases: windows common log file system driver elevation of privilege
CVE-2023-28253: Windows Kernel Information Disclosure Vulnerability
Key phrases: windows kernel information disclosure
CVE-2023-28254: Windows DNS Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-28255: Windows DNS Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-28256: Windows DNS Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-2826: A vulnerability has been found in SourceCodester Class Scheduling System 1.0 and classified as problematic. This vulnerability affects unknown code of the file search_teacher_result.php of the component POST Parameter Handler. The manipulation of the argument teacher leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229612.
Key phrases: cross site scripting
CVE-2023-28260: .NET DLL Hijacking Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-28261: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-28262: Visual Studio Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-28263: Visual Studio Information Disclosure Vulnerability
Key phrases: visual studio information disclosure
CVE-2023-28266: Windows Common Log File System Driver Information Disclosure Vulnerability
Key phrases: driver information disclosure
CVE-2023-28267: Remote Desktop Protocol Client Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2023-28268: Netlogon RPC Elevation of Privilege Vulnerability
Key phrases: netlogon rpc elevation of privilege
CVE-2023-28269: Windows Boot Manager Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, windows boot manager security feature bypass
CVE-2023-2827: SAP Plant Connectivity - version 15.5 (PCo) or the Production Connector for SAP Digital Manufacturing - version 1.0, do not validate the signature of the JSON Web Token (JWT) in the HTTP request sent from SAP Digital Manufacturing. Therefore, unauthorized callers from the internal network could send service requests to PCo or the Production Connector, which could have an impact on the integrity of the integration with SAP Digital Manufacturing.
Key phrases: integrity
CVE-2023-28270: Windows Lock Screen Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, windows lock screen security feature bypass
CVE-2023-28271: Windows Kernel Memory Information Disclosure Vulnerability
Key phrases: windows kernel memory information disclosure
CVE-2023-28272: Windows Kernel Elevation of Privilege Vulnerability
Key phrases: windows kernel elevation of privilege
CVE-2023-28273: Windows Clip Service Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-28274: Windows Win32k Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-28275: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-28276: Windows Group Policy Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, windows group policy security feature bypass
CVE-2023-28277: Windows DNS Server Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2023-28278: Windows DNS Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-2828: Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers. The size limit for that cache database can be configured using the `max-cache-size` statement in the configuration file; it defaults to 90% of the total amount of memory available on the host. When the size of the cache reaches 7/8 of the configured limit, a cache-cleaning algorithm starts to remove expired and/or least-recently used RRsets from the cache, to keep memory use below the configured limit.It has been discovered that the effectiveness of the cache-cleaning algorithm used in `named` can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured `max-cache-size` limit to be significantly exceeded.This issue affects BIND 9 versions 9.11.0 through 9.16.41, 9.18.0 through 9.18.15, 9.19.0 through 9.19.13, 9.11.3-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.
Key phrases: be significantly exceeded
CVE-2023-28283: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-28284: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, security feature bypass
CVE-2023-28285: Microsoft Office Remote Code Execution Vulnerability
Key phrases: microsoft office remote code execution
CVE-2023-28286: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, security feature bypass
CVE-2023-28287: Microsoft Publisher Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-28288: Microsoft SharePoint Server Spoofing Vulnerability
Key phrases: microsoft sharepoint server spoofing
CVE-2023-2829: A `named` instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache (RFC 8198) option (`synth-from-dnssec`) enabled can be remotely terminated using a zone with a malformed NSEC record.This issue affects BIND 9 versions 9.16.8-S1 through 9.16.41-S1 and 9.18.11-S1 through 9.18.15-S1.
Key phrases: malformed nsec record
CVE-2023-28290: Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2023-28291: Raw Image Extension Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-28292: Raw Image Extension Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-28293: Windows Kernel Elevation of Privilege Vulnerability
Key phrases: windows kernel elevation of privilege
CVE-2023-28295: Microsoft Publisher Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-28296: Visual Studio Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-28297: Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-28298: Windows Kernel Denial of Service Vulnerability
Key phrases: denial of service
CVE-2023-28299: Visual Studio Spoofing Vulnerability
Key phrases: spoofing
CVE-2023-2830: Cross-Site Request Forgery (CSRF) vulnerability in Trustindex.Io WP Testimonials plugin <=1.4.2 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-28300: Azure Service Connector Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, security feature bypass
CVE-2023-28301: Microsoft Edge (Chromium-based) Tampering Vulnerability
Key phrases: tampering
CVE-2023-28302: Microsoft Message Queuing Denial of Service Vulnerability
Key phrases: microsoft message queuing denial of service
CVE-2023-28303: Windows Snipping Tool Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2023-28304: Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-28305: Windows DNS Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-28306: Windows DNS Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-28307: Windows DNS Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-28308: Windows DNS Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-28309: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Key phrases: cross-site scripting
CVE-2023-2831: Mattermost fails to unescape Markdown strings in a memory-efficient way, allowing an attacker to cause a Denial of Service by sending a message containing a large number of escaped characters.
Key phrases: cause a Denial of Service by sending a, denial of service, escaped characters
CVE-2023-28310: Microsoft Exchange Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-28311: Microsoft Word Remote Code Execution Vulnerability
Key phrases: microsoft word remote code execution
CVE-2023-28312: Azure Machine Learning Information Disclosure Vulnerability
Key phrases: azure machine learning information disclosure
CVE-2023-28313: Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability
Key phrases: customer voice cross-site scripting
CVE-2023-28314: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Key phrases: cross-site scripting
CVE-2023-28316: A security vulnerability has been discovered in the implementation of 2FA on the rocket.chat platform, where other active sessions are not invalidated upon activating 2FA. This could potentially allow an attacker to maintain access to a compromised account even after 2FA is enabled.
Key phrases: maintain access to a compromised account even after
CVE-2023-28317: A vulnerability has been discovered in Rocket.Chat, where editing messages can change the original timestamp, causing the UI to display messages in an incorrect order.
Key phrases: incorrect order
CVE-2023-28318: A vulnerability has been discovered in Rocket.Chat, where messages can be hidden regardless of the Message_KeepHistory or Message_ShowDeletedStatus server configuration. This allows users to bypass the intended message deletion behavior, hiding messages and deletion notices.
Key phrases: bypass the intended message deletion behavior, hiding messages
CVE-2023-28319: A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this check fails, libcurl would free the memory for the fingerprint before it returns an error message containing the (now freed) hash. This flaw risks inserting sensitive heap-based data into the error message that might be shown to users or otherwise get leaked and revealed.
Key phrases: use after free, leaked and revealed
CVE-2023-2832:  SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0.
Key phrases: sql injection
CVE-2023-28320: A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using `alarm()` and `siglongjmp()`. When doing this, libcurl used a global buffer that was not mutex protected and a multi-threaded application might therefore crash or otherwise misbehave.
Key phrases: time-out slow operations using `alarm, denial of service, application crash
CVE-2023-28321: An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as "Subject Alternative Name" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.
Key phrases: certificate validation, improper certificate validation
CVE-2023-28322: An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.
Key phrases: information disclosure
CVE-2023-28323: A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user to elevate rights. This exploit could potentially be used in conjunction with other OS (Operating System) vulnerabilities to escalate privileges on the machine or be used as a stepping stone to get to other network attached machines.
Key phrases: elevate rights, deserialization of untrusted data, os (operating system), stepping stone, escalate privilege
CVE-2023-28324: A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that could allow privilege escalation or remote code execution.
Key phrases: privilege escalation or remote code execution, improper input validation
CVE-2023-28325: An improper authorization vulnerability exists in Rocket.Chat <6.0 that could allow a hacker to manipulate the rid parameter and change the updateMessage method that only checks whether the user is allowed to edit message in the target room.
Key phrases: manipulate the rid parameter and change the updateMessage, improper authorization
CVE-2023-28326: Vendor: The Apache Software FoundationVersions Affected: Apache OpenMeetings from 2.0.0 before 7.0.0Description: Attacker can elevate their privileges in any room
Key phrases: elevate privileges
CVE-2023-28327: A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service.
Key phrases: crash or potentially cause a denial of service, null pointer dereference flaw
CVE-2023-28328: A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel. The message from user space is not checked properly before transferring into the device. This flaw allows a local user to crash the system or potentially cause a denial of service.
Key phrases: crash the system or potentially cause a denial, null pointer dereference flaw, denial of service, crash system
CVE-2023-28329: Insufficient validation of profile field availability condition resulted in an SQL injection risk (by default only available to teachers and managers).
Key phrases: sql injection risk, availability
CVE-2023-2833: The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'wp_screen_options[option]' and 'wp_screen_options[value]' parameters during a screen option update.
Key phrases: privilege escalation
CVE-2023-28330: Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default.
Key phrases: arbitrary file read risk
CVE-2023-28331: Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk.
Key phrases: xss risk
CVE-2023-28332: If the algebra filter was enabled but not functional (eg the necessary binaries were missing from the server), it presented an XSS risk.
Key phrases: xss risk
CVE-2023-28333: The Mustache pix helper contained a potential Mustache injection risk if combined with user input (note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS).
Key phrases: mustache injection risk
CVE-2023-28334: Authenticated users were able to enumerate other users' names via the learning plans page.
CVE-2023-28335: The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk.
Key phrases: csrf risk
CVE-2023-28336: Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not otherwise access.
Key phrases: insufficient filtering
CVE-2023-28337: When uploading a firmware image to a Netgear Nighthawk Wifi6 Router (RAX30), a hidden forceFWUpdate parameter may be provided to force the upgrade to complete and bypass certain validation checks. End users can use this to upload modified, unofficial, and potentially malicious firmware to the device.
Key phrases: bypass certain validation, forcefwupdate parameter
CVE-2023-28338: Any request send to a Netgear Nighthawk Wifi6 Router (RAX30)'s web service containing a Content-Type of multipartboundary= will result in the request body being written to /tmp/mulipartFile on the device itself. A sufficiently large file will cause device resources to be exhausted, resulting in the device becoming unusable until it is rebooted.
Key phrases: unusable, reboot
CVE-2023-28339: OpenDoas through 6.8.2, when TIOCSTI is available, allows privilege escalation because of sharing a terminal with the original session. NOTE: TIOCSTI is unavailable in OpenBSD 6.0 and later, and can be made unavailable in the Linux kernel 6.2 and later.
Key phrases: privilege escalation because of sharing a terminal with
CVE-2023-2834: The BookIt plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.3.7. This is due to insufficient verification on the user being supplied during booking an appointment through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email.
Key phrases: bypass in versions up to, authentication bypass
CVE-2023-28340: Zoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack.
Key phrases: conduct an XXE attack, xxe
CVE-2023-28341: Stored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious javascript on the incorrect login details page.
Key phrases: inject malicious javascript on the incorrect login details, stored cross site scripting (xss)
CVE-2023-28342: Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API.
Key phrases: conduct a Denial-of-Service attack, denial-of-service, mobile app authentication api
CVE-2023-28343: OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timezone parameter, because of set_timezone in models/management_model.php.
Key phrases: os command injection, shell metacharacters
CVE-2023-28344: An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application allows unauthenticated attackers to view constantly updated screenshots of student desktops and to submit falsified screenshots on behalf of students. Attackers are able to view screenshots of student desktops without their consent. These screenshots may potentially contain sensitive/personal data. Attackers can also rapidly submit falsified images, hiding the actual contents of student desktops from the Teacher Console.
Key phrases: view constantly updated screenshots of student desktops and
CVE-2023-28345: An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application exposes the teacher's Console password in cleartext via an API endpoint accessible from localhost. Attackers with physical access to the Teacher Console can open a web browser, navigate to the affected endpoint and obtain the teacher's password. This enables them to log into the Teacher Console and begin trivially attacking student machines.
Key phrases: obtain the teacher's password, cleartext, trivially
CVE-2023-28346: An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for a remote attacker to communicate with the private API endpoints exposed at /login, /consoleSettings, /console, etc. despite Virtual Host Routing being used to block this access. Remote attackers can interact with private pages on the web server, enabling them to perform privileged actions such as logging into the console and changing console settings if they have valid credentials.
CVE-2023-28347: An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for an attacker to create a proof-of-concept script that functions similarly to a Student Console, providing unauthenticated attackers with the ability to exploit XSS vulnerabilities within the Teacher Console application and achieve remote code execution as NT AUTHORITY/SYSTEM on all connected Student Consoles and the Teacher Console in a Zero Click manner.
Key phrases: xss, zero click manner, remote code execution
CVE-2023-28348: An issue was discovered in Faronics Insight 10.0.19045 on Windows. A suitably positioned attacker could perform a man-in-the-middle attack on either a connected student or teacher, enabling them to intercept student keystrokes or modify executable files being sent from teachers to students.
Key phrases: man-in-the-middle, man in the middle
CVE-2023-28349: An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for an attacker to create a crafted program that functions similarly to the Teacher Console. This can compel Student Consoles to connect and put themselves at risk automatically. Connected Student Consoles can be compelled to write arbitrary files to arbitrary locations on disk with NT AUTHORITY/SYSTEM level permissions, enabling remote code execution.
Key phrases: write arbitrary files, remote code execution
CVE-2023-2835: The WP Directory Kit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search' parameter in versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Key phrases: inject arbitrary web scripts, reflected cross-site scripting
CVE-2023-28350: An issue was discovered in Faronics Insight 10.0.19045 on Windows. Attacker-supplied input is not validated/sanitized before being rendered in both the Teacher and Student Console applications, enabling an attacker to execute JavaScript in these applications. Due to the rich and highly privileged functionality offered by the Teacher Console, the ability to silently exploit Cross Site Scripting (XSS) on the Teacher Machine enables remote code execution on any connected student machine (and the teacher's machine).
Key phrases: cross site scripting (xss), remote code execution
CVE-2023-28351: An issue was discovered in Faronics Insight 10.0.19045 on Windows. Every keystroke made by any user on a computer with the Student application installed is logged to a world-readable directory. A local attacker can trivially extract these cleartext keystrokes, potentially enabling them to obtain PII and/or to compromise personal accounts owned by the victim.
Key phrases: obtain PII and/or to compromise personal accounts owned, world-readable directory, cleartext keystrokes
CVE-2023-28352: An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP broadcast discovery system, an attacker-controlled artificial Student Console can connect to and attack a Teacher Console even after Enhanced Security Mode has been enabled.