Wizor's CVEs and Security Vulnerabilities

CVE-2024-47759

GLPI has a stored XSS via document upload

GLPI is a free Asset and IT management software package. An technician can upload a SVG containing a malicious script. The script will then be executed when any user will try to see the document contents. Upgrade to 10.0.17.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Glpi-project

Products

Glpi

CVE-2024-55410

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 7.8 High EPSS n/a KEV · Not listed

Vendors

—

Products

—

CVE-2023-24934

Microsoft Defender Security Feature Bypass Vulnerability

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Malware Protection Platform

CVE-2023-28249

Windows Boot Manager Security Feature Bypass Vulnerability

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 9 more

CVE-2023-28269

Windows Boot Manager Security Feature Bypass Vulnerability

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 9 more

CVE-2023-28312

Azure Machine Learning Information Disclosure Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Microsoft

Products

Azure Machine Learning

CVE-2023-28308

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2008 Windows Server 2012 Windows Server 2016 and 2 more

CVE-2023-28307

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2008 Windows Server 2012 Windows Server 2016 and 2 more

CVE-2023-28306

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2008 Windows Server 2012 Windows Server 2016 and 2 more

CVE-2023-28299

Visual Studio Spoofing Vulnerability

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio 2017 Visual Studio 2019 Visual Studio 2022

CVE-2023-28296

Visual Studio Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio 2017 Visual Studio 2019 Visual Studio 2022

CVE-2023-28293

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 20h2 and 9 more

CVE-2023-28263

Visual Studio Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio 2019 Visual Studio 2022

CVE-2023-28262

Visual Studio Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio 2019 Visual Studio 2022

CVE-2023-28256

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2008 Windows Server 2012 Windows Server 2016 and 2 more

CVE-2023-28278

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2008 Windows Server 2012 Windows Server 2016 and 2 more

CVE-2023-28255

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2008 Windows Server 2012 Windows Server 2016 and 2 more

CVE-2023-28277

Windows DNS Server Information Disclosure Vulnerability

CVSS 3.1 · 4.9 Medium EPSS 1.4% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2022

CVE-2023-28254

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2008 Windows Server 2012 Windows Server 2016 and 2 more

CVE-2023-28276

Windows Group Policy Security Feature Bypass Vulnerability

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 10 more

Search vulnerabilities

GLPI has a stored XSS via document upload

Microsoft Defender Security Feature Bypass Vulnerability

Windows Boot Manager Security Feature Bypass Vulnerability

Windows Boot Manager Security Feature Bypass Vulnerability

Azure Machine Learning Information Disclosure Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Visual Studio Spoofing Vulnerability

Visual Studio Remote Code Execution Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Visual Studio Information Disclosure Vulnerability

Visual Studio Elevation of Privilege Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Information Disclosure Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows Group Policy Security Feature Bypass Vulnerability