Description
Visual Studio Remote Code Execution Vulnerability
Base Score: 8.4 HIGH
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23381
Description
Windows Graphics Component Remote Code Execution Vulnerability
Base Score: 7.8 HIGH
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21823
Description
Visual Studio Remote Code Execution Vulnerability
Base Score: 8.4 HIGH
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21815
Description
.NET and Visual Studio Remote Code Execution Vulnerability
Base Score: 7.8 HIGH
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21808
______________________________________________________
Description
Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability
Base Score: 8.3 HIGH
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21778
Description
Visual Studio Elevation of Privilege Vulnerability
Base Score: 7.8 HIGH
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21566
Description
Azure DevOps Server Remote Code Execution Vulnerability
Base Score: 7.5 HIGH
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21553
Description
Print 3D Remote Code Execution Vulnerability
Base Score: 7.8 HIGH
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23378
Description
3D Builder Remote Code Execution Vulnerability
Base Score: 7.8 HIGH
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23377
Description
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Base Score: 7.8 HIGH
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23376
Description
3D Builder Remote Code Execution Vulnerability
Base Score: 7.8 HIGH
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23390
CVE-2021-24581 Description The Blue Admin WordPress plugin through 21.06.01 does not sanitise or escape its “Logo Title” setting before outputting in a page, leading to a Stored Cross-Site Scripting issue. Furthermore, the plugin does not have CSRF check in place when saving its settings, allowing the issue to be exploited via a CSRF attack. Base […]
CVE-2022-20929 Description A vulnerability in the upgrade signature verification of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, local attacker to provide an unauthentic upgrade file for upload. This vulnerability is due to insufficient cryptographic signature verification of upgrade files. An attacker could exploit this vulnerability by providing an administrator with an unauthentic […]
CVE-2022-43883 Description IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to a Log Injection attack by constructing URLs from user-controlled data. This could enable attackers to make arbitrary requests to the internal network or to the local file system. IBM X-Force ID: 240266. Base Score: 7.5 HIGH https://www.ibm.com/support/pages/node/6841801 ____________________ CVE-2022-38708 Description IBM Cognos Analytics […]
Leave a Reply