Security Vulnerabilities - CVEs Published In June 2023
Windows CryptoAPI Denial of Service Vulnerability
CVSS Score
6.5
EPSS Score
0.054
Published
2023-06-14
The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_status_order_message function. This makes it possible for unauthenticated attackers to update status order message via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score
4.3
EPSS Score
0.001
Published
2023-06-14
The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_new_order_message function. This makes it possible for unauthenticated attackers to update new order message via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score
4.3
EPSS Score
0.001
Published
2023-06-14
The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_new_order_title function. This makes it possible for unauthenticated attackers to update new order title via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score
4.3
EPSS Score
0.001
Published
2023-06-14
The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_limit_product function. This makes it possible for unauthenticated attackers to update limit the number of product per category to use cache data in home screen via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score
4.3
EPSS Score
0.001
Published
2023-06-14
Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score
7.3
EPSS Score
0.004
Published
2023-06-14
Microsoft Outlook Remote Code Execution Vulnerability
CVSS Score
8.8
EPSS Score
0.026
Published
2023-06-14
Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score
6.3
EPSS Score
0.003
Published
2023-06-14
Microsoft Excel Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.142
Published
2023-06-14
.NET and Visual Studio Elevation of Privilege Vulnerability
CVSS Score
7.3
EPSS Score
0.011
Published
2023-06-14