{"vulnerability": "CVE-2023-3671", "sightings": [{"uuid": "96bd63fc-1b3d-4d07-9aac-c99e309eafdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36719", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13946", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-36719\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability\n\ud83d\udccf Published: 2023-11-14T17:57:04.546Z\n\ud83d\udccf Modified: 2025-04-29T23:34:51.021Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36719", "creation_timestamp": "2025-04-30T00:12:27.000000Z"}, {"uuid": "e984a958-9218-403a-872e-6512f47201f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36717", "type": "seen", "source": "https://t.me/arpsyndicate/350", "content": "#ExploitObserverAlert\n\nCVE-2023-36717\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-36717. Windows Virtual Trusted Platform Module Denial of Service Vulnerability\n\nFIRST-EPSS: 0.000480000\nNVD-IS: 4.0\nNVD-ES: 2.0", "creation_timestamp": "2023-11-22T14:04:06.000000Z"}, {"uuid": "175264df-c9fa-48d8-819f-4c94e9349be9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36710", "type": "seen", "source": "https://t.me/cibsecurity/72022", "content": "\u203c CVE-2023-36710 \u203c\n\nWindows Media Foundation Core Remote Code Execution Vulnerability\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-10T22:23:06.000000Z"}, {"uuid": "0ed77b65-9036-46aa-ba16-865f8c2a49b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36718", "type": "seen", "source": "https://t.me/cibsecurity/72034", "content": "\u203c CVE-2023-36718 \u203c\n\nMicrosoft Virtual Trusted Platform Module Remote Code Execution Vulnerability\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-10T22:26:53.000000Z"}, {"uuid": "fc497821-3f7d-4495-b8df-18024626534d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36713", "type": "seen", "source": "https://t.me/cibsecurity/72041", "content": "\u203c CVE-2023-36713 \u203c\n\nWindows Common Log File System Driver Information Disclosure Vulnerability\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-10T22:29:56.000000Z"}, {"uuid": "13bb9952-5a95-4fd9-b78e-77dd020ca421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36717", "type": "seen", "source": "https://t.me/cibsecurity/72003", "content": "\u203c CVE-2023-36717 \u203c\n\nWindows Virtual Trusted Platform Module Denial of Service Vulnerability\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-10T22:17:04.000000Z"}, {"uuid": "50249b62-8868-42d1-b137-ed94abe02fc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3671", "type": "seen", "source": "https://t.me/cibsecurity/67879", "content": "\u203c CVE-2023-3671 \u203c\n\nThe MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.4 does not sanitise and escape various parameters before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-07T18:13:53.000000Z"}]}