WuThreat身份安全云-TVD每日漏洞情报-2023-03-13

漏洞名称:Microsoft Windows CryptoAPI 欺骗漏洞
漏洞级别:高危
漏洞编号:CVE-2022-34689,CNNVD-202210-565
相关涉及:Windows 10 Version 21H1 for ARM64-based Systems
漏洞状态:POC
参考链接:https://tvd.wuthreat.com/#/listDetail?TVD_ID=TVD-2022-18206

漏洞名称:Windows Ancillary Function Driver for WinSock 权限提升漏洞
漏洞级别:高危
漏洞编号:CVE-2023-21768,CNNVD-202301-714
相关涉及:Microsoft Windows Server 2022
漏洞状态:POC
参考链接:https://tvd.wuthreat.com/#/listDetail?TVD_ID=TVD-2023-00800

漏洞名称:LMXCMS SQL 注入
漏洞级别:中危
漏洞编号:CVE-2023-1321
相关涉及:LMXCMS 1.41
漏洞状态:POC
参考链接:https://tvd.wuthreat.com/#/listDetail?TVD_ID=TVD-2023-05917

漏洞名称:LIFEREA OS 命令注入
漏洞级别:中危
漏洞编号:CVE-2023-1350
相关涉及:Liferea<1.14.0
漏洞状态:POC
参考链接:https://tvd.wuthreat.com/#/listDetail?TVD_ID=TVD-2023-06003

漏洞名称:Apache Dubbo 反序列化漏洞
漏洞级别:中危
漏洞编号:CVE-2023-23638,CNNVD-202303-617
相关涉及:2.7.0<=Apache Dubbo<=2.7.21
漏洞状态:POC
参考链接:https://tvd.wuthreat.com/#/listDetail?TVD_ID=TVD-2023-05731