Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
nality, which is assumed to be safe due to network segmentation. Upon receiving an authenticated request instantiated from an attacker, this integrity is broken. Version 3.7 fixes this issue by removing subscribe.html from `web_accessible_resources`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/nt1m/livemarks/security/advisories/GHSA-3gg9-w4fm-jjcg - https://github.com/nt1m/livemarks/commit/1bcf39f6e91f7352301013f8feac6d488719450f - https://github.com/nt1m/livemarks/blob/9c5233c82aa2f7c8bac348a08ff52881b00c4f95/manifest.json#L4 - https://github.com/nt1m/livemarks/blob/9c5233c82aa2f7c8bac348a08ff52881b00c4f95/pages/subscribe/subs
/manifest.json#L4 - https://github.com/nt1m/livemarks/blob/9c5233c82aa2f7c8bac348a08ff52881b00c4f95/pages/subscribe/subscribe.js#L52 - https://github.com/nt1m/livemarks/blob/9c5233c82aa2f7c8bac348a08ff52881b00c4f95/shared/feed-parser.js#L5
CVE ID: CVE-2024-30253 State: PUBLISHED Published: 2024-04-17T15:07:27.546Z Last Updated: 2024-08-21T15:05:27.101Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: solana-labs Products: solana-web3.js Problem Types: CWE-119 Description: @solana/web3.js is the Solana JavaScript SDK. Using particular inputs with `@solana/web3.js` will result in memory exhaustion (OOM). If you have a server, client, mobile, or desktop product that accepts untrusted input for use with `@solana/web3.js`, your application/service may crash, resulting in a loss of availability. This vulnerability is fixed in 1.0.1, 1.10.2, 1.11.1, 1.12.1, 1.1.2, 1.13.1, 1.14.1, 1.15.1, 1.16.2, 1.17.1,
ailability. This vulnerability is fixed in 1.0.1, 1.10.2, 1.11.1, 1.12.1, 1.1.2, 1.13.1, 1.14.1, 1.15.1, 1.16.2, 1.17.1, 1.18.1, 1.19.1, 1.20.3, 1.21.1, 1.22.1, 1.23.1, 1.24.3, 1.25.1, 1.26.1, 1.27.1, 1.28.1, 1.2.8, 1.29.4, 1.30.3, 1.31.1, 1.3.1, 1.32.3, 1.33.1, 1.34.1, 1.35.2, 1.36.1, 1.37.3, 1.38.1, 1.39.2, 1.40.2, 1.41.11, 1.4.1, 1.42.1, 1.43.7, 1.44.4, 1.45.1, 1.46.1, 1.47.5, 1.48.1, 1.49.1, 1.50.2, 1.51.1, 1.5.1, 1.52.1, 1.53.1, 1.54.2, 1.55.1, 1.56.3, 1.57.1, 1.58.1, 1.59.2, 1.60.1, 1.61.2, 1.6.1, 1.62.2, 1.63.2, 1.64.1, 1.65.1, 1.66.6, 1.67.3, 1.68.2, 1.69.1, 1.70.4, 1.71.1, 1.72.1, 1.7.2, 1.73.5, 1.74.1, 1.75.1, 1.76.1, 1.77.4, 1.78.8, 1.79.1, 1.80.1, 1.81.1, 1.8.1, 1.82.1, 1.83.1, 1
1.71.1, 1.72.1, 1.7.2, 1.73.5, 1.74.1, 1.75.1, 1.76.1, 1.77.4, 1.78.8, 1.79.1, 1.80.1, 1.81.1, 1.8.1, 1.82.1, 1.83.1, 1.84.1, 1.85.1, 1.86.1, 1.87.7, 1.88.1, 1.89.2, 1.90.2, 1.9.2, and 1.91.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/solana-labs/solana-web3.js/security/advisories/GHSA-8m45-2rjm-j347 - https://github.com/solana-labs/solana-web3.js/commit/77d935221a4805107b20b60ae7c1148725e4e2d0
CVE ID: CVE-2024-30254 State: PUBLISHED Published: 2024-04-04T19:00:42.227Z Last Updated: 2024-08-26T20:43:45.256Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L) Vendors: JCWasmx86 Products: mesonlsp Problem Types: CWE-22 Description: MesonLSP is an unofficial, unendorsed language server for meson written in C++. A vulnerability in versions prior to 4.1.4 allows overwriting arbitrary files if the attacker can make the victim either run the language server within a specific crafted project or `mesonlsp --full`. Version 4.1.4 contains a patch for this issue. As a workaround, avoid running `mesonlsp --full` and set the language server option `others.neverDownloadAutoma
s issue. As a workaround, avoid running `mesonlsp --full` and set the language server option `others.neverDownloadAutomatically` to `true`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/JCWasmx86/mesonlsp/security/advisories/GHSA-48c5-35fh-846h - https://github.com/JCWasmx86/mesonlsp/commit/594b6334061371911cd59389124ab8af30ce0a3a
CVE ID: CVE-2024-30255 State: PUBLISHED Published: 2024-04-04T19:41:02.634Z Last Updated: 2025-11-04T18:30:33.889Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: envoyproxy Products: envoy Problem Types: CWE-390 Description: Envoy is a cloud-native, open source edge and service proxy. The HTTP/2 protocol stack in Envoy versions prior to 1.29.3, 1.28.2, 1.27.4, and 1.26.8 are vulnerable to CPU exhaustion due to flood of CONTINUATION frames. Envoy's HTTP/2 codec allows the client to send an unlimited number of CONTINUATION frames even after exceeding Envoy's header map limits. This allows an attacker to send a sequence of CONTINUATION frames without the END_H
exceeding Envoy's header map limits. This allows an attacker to send a sequence of CONTINUATION frames without the END_HEADERS bit set causing CPU utilization, consuming approximately 1 core per 300Mbit/s of traffic and culminating in denial of service through CPU exhaustion. Users should upgrade to version 1.29.3, 1.28.2, 1.27.4, or 1.26.8 to mitigate the effects of the CONTINUATION flood. As a workaround, disable HTTP/2 protocol for downstream connections. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/envoyproxy/envoy/security/advisories/GHSA-j654-3ccm-vfmm - http://www.openwall.com/lists/oss-security/2024/04/05/3 - http://www.
xy/envoy/security/advisories/GHSA-j654-3ccm-vfmm - http://www.openwall.com/lists/oss-security/2024/04/05/3 - http://www.openwall.com/lists/oss-security/2024/04/03/16
CVE ID: CVE-2024-30256 State: PUBLISHED Published: 2024-04-16T14:24:21.747Z Last Updated: 2024-08-02T01:32:06.437Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: open-webui Products: open-webui Problem Types: CWE-918 Description: Open WebUI is a user-friendly WebUI for LLMs. Open-webui is vulnerable to authenticated blind server-side request forgery. This vulnerability is fixed in 0.1.117. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/open-webui/open-webui/security/advisories/GHSA-39wr-r5vm-3jxj - https://securitylab.github.com/advisories/GHSL-2024-033_open-webui
CVE ID: CVE-2024-30257 State: PUBLISHED Published: 2024-04-18T14:56:56.270Z Last Updated: 2024-08-02T01:32:05.409Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: 1Panel-dev Products: 1Panel Problem Types: CWE-203 Description: 1Panel is an open source Linux server operation and maintenance management panel. The password verification in the source code uses the != symbol instead hmac.Equal. This may lead to a timing attack vulnerability. This vulnerability is fixed in 1.10.3-lts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-6m9h-2pr2-9j8f - https://github.c
Container: References: - https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-6m9h-2pr2-9j8f - https://github.com/1Panel-dev/1Panel/blob/dev/backend/app/service/auth.go#L81C5-L81C26
CVE ID: CVE-2024-30258 State: PUBLISHED Published: 2024-05-13T14:41:52.318Z Last Updated: 2024-08-02T01:32:05.303Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: eProsima Products: Fast-DDS Problem Types: CWE-20 Description: FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves a malformed `RTPS` packet, the subscriber crashes when creating `pthread`. This can remotely crash any Fast-DDS process, potentially leading to a DOS attack. Versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8 contain a patch for the issue. Additional Anal
ially leading to a DOS attack. Versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8 contain a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-53xw-465j-rxfh - https://github.com/eProsima/Fast-DDS/commit/65236f93e9c4ea3ff9a49fba4dfd9e43eb94037b - https://drive.google.com/file/d/19W5UC52hPnAqVq_boZWO45d1TJ4WoCSh/view?usp=sharing
CVE ID: CVE-2024-30259 State: PUBLISHED Published: 2024-05-13T14:45:28.134Z Last Updated: 2024-08-02T01:32:05.392Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: eProsima Products: Fast-DDS Problem Types: CWE-120, CWE-122 Description: FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves malformed `RTPS` packet, heap buffer overflow occurs on the subscriber. This can remotely crash any Fast-DDS process, potentially leading to a DOS attack. Versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8 contain a patch for the issue. Addition
potentially leading to a DOS attack. Versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8 contain a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-qcj9-939p-p662 - https://drive.google.com/file/d/1Y2bGvP3UIOJCLh_XEURLdhrM2Sznlvlp/view?usp=sharing - https://vimeo.com/907641887?share=copy
CVE ID: CVE-2024-30260 State: PUBLISHED Published: 2024-04-04T15:15:44.653Z Last Updated: 2025-11-04T16:11:54.904Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: nodejs Products: undici Problem Types: CWE-285 Description: Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici cleared Authorization and Proxy-Authorization headers for `fetch()`, but did not clear them for `undici.request()`. This vulnerability was patched in version(s) 5.28.4 and 6.11.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7 - https://github.com/nodejs/undi
References: - https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7 - https://github.com/nodejs/undici/commit/64e3402da4e032e68de46acb52800c9a06aaea3f - https://github.com/nodejs/undici/commit/6805746680d27a5369d7fb67bc05f95a28247d75 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P6Q4RGETHVYVHDIQGTJGU5AV6NJEI67E/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQVHWAS6WDXXIU7F72XI55VZ2LTZUB33/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NC3V3HFZ5MOJRZDY5ZELL6REIRSPFROJ/
CVE ID: CVE-2024-30261 State: PUBLISHED Published: 2024-04-04T15:09:11.369Z Last Updated: 2025-11-04T16:11:56.039Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: nodejs Products: undici Problem Types: CWE-284 Description: Undici is an HTTP/1.1 client, written from scratch for Node.js. An attacker can alter the `integrity` option passed to `fetch()`, allowing `fetch()` to accept requests as valid even if they have been tampered. This vulnerability was patched in version(s) 5.28.4 and 6.11.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672 - https:/
CISA ADP Vulnrichment: References: - https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672 - https://github.com/nodejs/undici/commit/2b39440bd9ded841c93dd72138f3b1763ae26055 - https://github.com/nodejs/undici/commit/d542b8cd39ec1ba303f038ea26098c3f355974f3 - https://hackerone.com/reports/2377760 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P6Q4RGETHVYVHDIQGTJGU5AV6NJEI67E/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQVHWAS6WDXXIU7F72XI55VZ2LTZUB33/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NC3V3HFZ5MOJRZDY5ZELL6RE
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NC3V3HFZ5MOJRZDY5ZELL6REIRSPFROJ/
CVE ID: CVE-2024-30262 State: PUBLISHED Published: 2024-04-09T16:45:57.132Z Last Updated: 2024-08-02T01:32:07.058Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: contao Products: contao Problem Types: CWE-613, CWE-384 Description: Contao is an open source content management system. Prior to version 4.13.40, when a frontend member changes their password in the personal data or the password lost module, the corresponding remember-me tokens are not removed. If someone compromises an account and is able to get a remember-me token, changing the password would not be enough to reclaim control over the account. Version 4.13.40 contains a fix for the issue. As a wo
password would not be enough to reclaim control over the account. Version 4.13.40 contains a fix for the issue. As a workaround, disable "Allow auto login" in the login module. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/contao/contao/security/advisories/GHSA-r4r6-j2j3-7pp5 - https://github.com/contao/contao/commit/3032baa456f607169ffae82a8920354adb338fe9
CVE ID: CVE-2024-30263 State: PUBLISHED Published: 2024-04-04T16:51:44.212Z Last Updated: 2024-08-21T14:35:52.094Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: xwikisas Products: macro-pdfviewer Problem Types: CWE-200 Description: macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. Users with edit rights can access restricted PDF attachments using the PDF Viewer macro, just by passing the attachment URL as the value of the ``file`` parameter. Users with view rights can access restricted PDF attachments if they are shown on public pages where the PDF Viewer macro is called using the attachment URL instead of its reference. This vulnerabilit
n public pages where the PDF Viewer macro is called using the attachment URL instead of its reference. This vulnerability has been patched in version 2.5.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwikisas/macro-pdfviewer/security/advisories/GHSA-93qq-2h34-g29f - https://github.com/xwikisas/macro-pdfviewer/issues/49
CVE ID: CVE-2024-30264 State: PUBLISHED Published: 2024-04-04T20:18:08.993Z Last Updated: 2024-08-02T01:32:06.369Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: baptisteArno Products: typebot.io Problem Types: CWE-79 Description: Typebot is an open-source chatbot builder. A reflected cross-site scripting (XSS) in the sign-in page of typebot.io prior to version 2.24.0 may allow an attacker to hijack a user's account. The sign-in page takes the `redirectPath` parameter from the URL. If a user clicks on a link where the `redirectPath` parameter has a javascript scheme, the attacker that crafted the link may be able to execute arbitrary JavaScript with the privi
r has a javascript scheme, the attacker that crafted the link may be able to execute arbitrary JavaScript with the privileges of the user. Version 2.24.0 contains a patch for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-mx2f-9mcr-8j73 - https://github.com/baptisteArno/typebot.io/commit/d0be29e25732c410b561cbc3c5607c3c1d4b6c8e - https://github.com/baptisteArno/typebot.io/blob/v2.23.0/apps/builder/src/features/auth/components/SignInForm.tsx#L35
CVE ID: CVE-2024-30265 State: PUBLISHED Published: 2024-04-03T22:55:20.202Z Last Updated: 2024-08-02T01:32:06.621Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: voila-dashboards Products: voila Problem Types: CWE-73 Description: Collabora Online is a collaborative online office suite based on LibreOffice technology. Any deployment of voilà dashboard allow local file inclusion. Any file on a filesystem that is readable by the user that runs the voilà dashboard server can be downloaded by someone with network access to the server. Whether this still requires authentication depends on how voilà is deployed. This issue has been patched in 0.2.17, 0.3.8, 0.4.4 an
s still requires authentication depends on how voilà is deployed. This issue has been patched in 0.2.17, 0.3.8, 0.4.4 and 0.5.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/voila-dashboards/voila/security/advisories/GHSA-2q59-h24c-w6fg - https://github.com/voila-dashboards/voila/commit/00d6362c237b6b4d466873535554d6076ead0c52 - https://github.com/voila-dashboards/voila/commit/28faacc9b03b160fd8fa920ad045f4ec0667ab67 - https://github.com/voila-dashboards/voila/commit/5542e4ae36bb5d184deaa48f95e76be477756af2 - https://github.com/voila-dashboards/voila/commit/98b6a40fec27723572314fdbba99bdc147d904c8 - https://github.com/voila-dash
ttps://github.com/voila-dashboards/voila/commit/98b6a40fec27723572314fdbba99bdc147d904c8 - https://github.com/voila-dashboards/voila/commit/c045be6988539d07cceeb9f82fc660a49485d504
CVE ID: CVE-2024-30266 State: PUBLISHED Published: 2024-04-04T15:42:00.200Z Last Updated: 2024-08-02T01:32:07.072Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: bytecodealliance Products: wasmtime Problem Types: CWE-843 Description: wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host runtime. A valid WebAssembly module, when executed at runtime, may cause this panic. This vulnerability has been patched in version 19.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https
tched in version 19.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-75hq-h6g9-h4q5 - https://github.com/bytecodealliance/wasmtime/issues/8281 - https://github.com/bytecodealliance/wasmtime/pull/8018 - https://github.com/bytecodealliance/wasmtime/pull/8283 - https://github.com/bytecodealliance/wasmtime/commit/7f57d0bb0948fa56cc950278d0db230ed10e8664
CVE ID: CVE-2024-30268 State: PUBLISHED Published: 2024-05-13T14:56:18.471Z Last Updated: 2024-08-02T01:32:06.680Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Cacti Products: cacti Problem Types: CWE-79 Description: Cacti provides an operational monitoring and fault management framework. A reflected cross-site scripting vulnerability on the 1.3.x DEV branch allows attackers to obtain cookies of administrator and other users and fake their login using obtained cookies. This issue is fixed in commit a38b9046e9772612fda847b46308f9391a49891e. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Cacti/ca
e. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Cacti/cacti/security/advisories/GHSA-9m3v-whmr-pc2q - https://github.com/Cacti/cacti/commit/a38b9046e9772612fda847b46308f9391a49891e - https://github.com/Cacti/cacti/blob/08497b8bcc6a6037f7b1aae303ad8f7dfaf7364e/settings.php#L66
CVE ID: CVE-2024-30269 State: PUBLISHED Published: 2024-04-08T14:19:56.293Z Last Updated: 2024-08-02T01:32:07.018Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: dataease Products: dataease Problem Types: CWE-200 Description: DataEase, an open source data visualization and analysis tool, has a database configuration information exposure vulnerability prior to version 2.5.0. Visiting the `/de2api/engine/getEngine;.js` path via a browser reveals that the platform's database configuration is returned. The vulnerability has been fixed in v2.5.0. No known workarounds are available aside from upgrading. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pro
0. No known workarounds are available aside from upgrading. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/dataease/dataease/security/advisories/GHSA-8gvx-4qvj-6vv5 - https://github.com/dataease/dataease/releases/tag/v2.5.0
CVE ID: CVE-2024-30270 State: PUBLISHED Published: 2024-04-04T20:27:40.370Z Last Updated: 2024-12-12T20:52:59.248Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L) Vendors: mailcow Products: mailcow-dockerized Problem Types: CWE-22 Description: mailcow: dockerized is an open source groupware/email suite based on docker. A security vulnerability has been identified in mailcow affecting versions prior to 2024-04. This vulnerability is a combination of path traversal and arbitrary code execution, specifically targeting the `rspamd_maps()` function. It allows authenticated admin users to overwrite any file writable by the www-data user by exploiting improper path validati
llows authenticated admin users to overwrite any file writable by the www-data user by exploiting improper path validation. The exploit chain can lead to the execution of arbitrary commands on the server. Version 2024-04 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-4m8r-87gc-3vvp - https://mailcow.email/posts/2024/release-2024-04 - https://www.sonarsource.com/blog/remote-code-execution-in-mailcow-always-sanitize-error-messages
CVE ID: CVE-2024-30271 State: PUBLISHED Published: 2024-04-11T18:11:51.836Z Last Updated: 2024-08-02T01:32:06.526Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-787 Description: Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/illustrator/apsb24-25.html
CVE ID: CVE-2024-30272 State: PUBLISHED Published: 2024-04-11T18:11:50.644Z Last Updated: 2024-08-02T01:32:06.877Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-787 Description: Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/illustrator/apsb24-25.html
CVE ID: CVE-2024-30273 State: PUBLISHED Published: 2024-04-11T18:11:49.872Z Last Updated: 2024-08-02T01:32:06.777Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-121 Description: Illustrator versions 28.3, 27.9.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/illustrator/apsb24-25.h
P Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/illustrator/apsb24-25.html