Archive

11 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /11 August 2023 →

All Critical High Medium Low Exploited only Public exploit

112 results · Clear filters · Feed

Medium 6.5

GHSA-2w8w-qhg4-f78j

A stored XSS in jaeger UI might allow an attacker who controls a trace to perform arbitrary jaeger queries

Related UI vulnerability advisory: https://github.com/jaegertracing/jaeger-ui/security/advisories/GHSA-vv24-rm95-q56r ### Summary Jaeger UI is using the `json-markup` dependency to display span attributes and resources. This dependency is not sanitising keys …

github.com/jaegertracing/jaeger Go

Jul 11, 2023
Medium 6.5

CVE-2023-20575

A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the powe…

AMD 3rd Gen AMD EPYC™ Processors 2nd Gen AMD EPYC™ Processors 4th Gen AMD EPYC™ Processors

Jul 11, 2023
Medium 5.0

CVE-2023-37280

Pimcore admin UI vulnerable to Cross-site Scripting in two factor authentication setup page

Pimcore Admin Classic Bundle provides a Backend UI for Pimcore based on the ExtJS framework. An admin who has not setup two factor authentication before is vulnerable for this attack, without need for any form of privilege, causing the application to execute …

pimcore admin-ui-classic-bundle pimcore/admin-ui-classic-bundle Packagist

Jul 11, 2023
Medium 6.3

CVE-2023-3626

Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System UpLoadFloodPlanFile UpLoadFloodPlanFile.ashx unrestricted upload

A vulnerability, which was classified as critical, has been found in Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System up to 20230706. This issue affects some unknown processing of the file /Duty/AjaxHandle/UpLoadFloodPlanFile.a…

Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System

Jul 11, 2023
Medium 6.3

CVE-2023-3625

Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System Duty Write-UploadFile UploadFile.ashx unrestricted upload

A vulnerability classified as critical was found in Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System up to 20230706. This vulnerability affects unknown code of the file /Duty/AjaxHandle/Write/UploadFile.ashx of the component Du…

Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System

Jul 11, 2023
Medium 6.5

CVE-2023-36871

Azure Active Directory Security Feature Bypass Vulnerability

Azure Active Directory Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023
Medium 6.5

CVE-2023-36868

Azure Service Fabric on Windows Information Disclosure Vulnerability

Azure Service Fabric on Windows Information Disclosure Vulnerability

Microsoft Azure Service Fabric 9.0 for Windows Azure Service Fabric 9.1 for Windows Windows

Jul 11, 2023
Medium 5.3

CVE-2023-35373

Mono Authenticode Validation Spoofing Vulnerability

Mono Authenticode Validation Spoofing Vulnerability

Microsoft Mono 6.12.0

Jul 11, 2023
Medium 6.6

CVE-2023-35310

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 11, 2023
Medium 6.5

CVE-2023-35308

Windows MSHTML Platform Security Feature Bypass Vulnerability

Windows MSHTML Platform Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023
Medium 5.5

CVE-2023-35306

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023
Medium 6.5

CVE-2023-35296

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023
Medium 5.5

CVE-2023-32085

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023
Medium 6.5

CVE-2023-32083

Microsoft Failover Cluster Information Disclosure Vulnerability

Microsoft Failover Cluster Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 11, 2023
Medium 6.7

CVE-2023-32055

Active Template Library Elevation of Privilege Vulnerability

Active Template Library Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023
Medium 5.4

CVE-2023-32052

Microsoft Power Apps (online) Spoofing Vulnerability

Microsoft Power Apps (online) Spoofing Vulnerability

Microsoft Microsoft Power Apps

Jul 11, 2023
Medium 6.5

CVE-2023-33164

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023
Medium 5.5

CVE-2023-33162

Microsoft Excel Information Disclosure Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC for Mac 2021

Jul 11, 2023
Medium 6.3

CVE-2023-33156

Microsoft Defender Elevation of Privilege Vulnerability

Microsoft Defender Elevation of Privilege Vulnerability

Microsoft Microsoft Malware Protection Engine

Jul 11, 2023
Medium 5.5

CVE-2023-36872

VP9 Video Extensions Information Disclosure Vulnerability

VP9 Video Extensions Information Disclosure Vulnerability

Microsoft VP9 Video Extensions

Jul 11, 2023
Medium 6.6

CVE-2023-35351

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 11, 2023
Medium 6.5

CVE-2023-35348

Active Directory Federation Service Security Feature Bypass Vulnerability

Active Directory Federation Service Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 11, 2023
Medium 6.6

CVE-2023-35346

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 11, 2023
Medium 6.6

CVE-2023-35345

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 11, 2023
Medium 6.6

CVE-2023-35344

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 11, 2023
Medium 6.2

CVE-2023-35341

Microsoft DirectMusic Information Disclosure Vulnerability

Microsoft DirectMusic Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023
Medium 6.5

CVE-2023-35336

Windows MSHTML Platform Security Feature Bypass Vulnerability

Windows MSHTML Platform Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023
Medium 6.8

CVE-2023-35332

Windows Remote Desktop Protocol Security Feature Bypass

Windows Remote Desktop Protocol Security Feature Bypass

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023
Medium 6.5

CVE-2023-35331

Windows Local Security Authority (LSA) Denial of Service Vulnerability

Windows Local Security Authority (LSA) Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 11, 2023
Medium 6.5

CVE-2023-35329

Windows Authentication Denial of Service Vulnerability

Windows Authentication Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023
Medium 5.5

CVE-2023-35326

Windows CDP User Components Information Disclosure Vulnerability

Windows CDP User Components Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023
Medium 5.5

CVE-2023-35324

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023
Medium 6.5

CVE-2023-35321

Windows Deployment Services Denial of Service Vulnerability

Windows Deployment Services Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 11, 2023
Medium 6.5

CVE-2023-35319

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023
Medium 6.5

CVE-2023-35318

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023
Medium 6.5

CVE-2023-35316

Remote Procedure Call Runtime Information Disclosure Vulnerability

Remote Procedure Call Runtime Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023
Medium 6.5

CVE-2023-35314

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023
Medium 6.8

CVE-2023-32043

Windows Remote Desktop Security Feature Bypass Vulnerability

Windows Remote Desktop Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023
Medium 6.5

CVE-2023-32042

OLE Automation Information Disclosure Vulnerability

OLE Automation Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023
Medium 5.5

CVE-2023-32041

Windows Update Orchestrator Service Information Disclosure Vulnerability

Windows Update Orchestrator Service Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 11, 2023