Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-36059 State: PUBLISHED Published: 2024-06-27T00:00:00 Last Updated: 2024-08-02T03:30:13.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in Kalkitech ASE ASE61850 IEDSmart upto and including version 2.3.5 allows attackers to read/write arbitrary files via the IEC61850 File Transfer protocol. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://kalkitech.com/wp-content/uploads/2024/05/CYB_60704_Advisory_v1.0.pdf
CVE ID: CVE-2024-36060 State: PUBLISHED Published: 2024-10-30T00:00:00 Last Updated: 2024-10-31T15:03:31.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: EnGenius EnStation5-AC A8J-ENS500AC 1.0.0 devices allow blind OS command injection via shell metacharacters in the Ping and Speed Test parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/actuator/cve/blob/main/Engenius/CVE-2024-36060
CVE ID: CVE-2024-36061 State: PUBLISHED Published: 2024-11-11T00:00:00 Last Updated: 2024-11-12T16:27:15.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: EnGenius EWS356-FIT devices through 1.1.30 allow blind OS command injection. This allows an attacker to execute arbitrary OS commands via shell metacharacters to the Ping and Speed Test utilities. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/actuator/cve/blob/main/Engenius/CVE-2024-36061
CVE ID: CVE-2024-36062 State: PUBLISHED Published: 2024-11-07T00:00:00.000Z Last Updated: 2025-02-10T22:28:54.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: The com.callassistant.android (aka AI Call Assistant & Screener) application 1.174 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.callassistant.android.ui.call.incall.InCallActivity component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/actuator/com.callassistant.android/blob/main/CVE-2024-36062
CVE ID: CVE-2024-36063 State: PUBLISHED Published: 2024-11-07T00:00:00 Last Updated: 2024-11-08T16:28:34.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Goodwy com.goodwy.dialer (aka Right Dialer) application through 5.1.0 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.goodwy.dialer.activities.DialerActivity component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/actuator/com.goodwy.dialer/blob/main/CVE-2024-36063
CVE ID: CVE-2024-36064 State: PUBLISHED Published: 2024-11-07T00:00:00 Last Updated: 2024-11-08T16:13:24.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NLL com.nll.cb (aka ACR Phone) application through 0.330-playStore-NoAccessibility-arm8 for Android allows any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.nll.cb.dialer.dialer.DialerActivity component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/actuator/com.nll.cb/blob/main/CVE-2024-36064
CVE ID: CVE-2024-36066 State: PUBLISHED Published: 2024-09-12T00:00:00.000Z Last Updated: 2025-03-25T16:10:43.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RFC 4211, and might make man-in-the-middle attacks easier. CMP includes password-based MAC as one of the options for message integrity and authentication (the other option is certificate-based). RFC 4211 section 4.4 requires that password-based MAC parameters use a salt with a random value of at least 8 octets. This helps to inhibit dictionary attacks. Because the standalone CMP client
lt with a random value of at least 8 octets. This helps to inhibit dictionary attacks. Because the standalone CMP client originally was developed as test code, the salt was instead hardcoded and only 6 octets long. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://datatracker.ietf.org/doc/html/rfc4211#section-4.4 - https://support.keyfactor.com/hc/en-us/articles/26965687021595-EJBCA-Security-Advisory-EJBCA-standalone-CMP-CLI-client
CVE ID: CVE-2024-36068 State: PUBLISHED Published: 2024-08-27T00:00:00 Last Updated: 2024-08-27T18:47:18.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: An incorrect access control vulnerability in Rubrik CDM versions prior to 9.1.2-p1, 9.0.3-p6 and 8.1.3-p12, allows an attacker with network access to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rubrik.com/products/cloud-data-management - https://www.rubrik.com/advisories/rbk-20240619-v0044
CVE ID: CVE-2024-36070 State: PUBLISHED Published: 2024-05-19T18:48:57.845Z Last Updated: 2025-03-27T19:09:08.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: tine before 2023.11.8, when an LDAP backend is used, allows anonymous remote attackers to obtain sensitive authentication information via setup.php because of getRegistryData in Setup/Frontend/Json.php. (An update is also available for the 2022.11 series.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tine-groupware/tine/releases/tag/2023.11.8 - https://github.com/tine-groupware/tine/commit/5d556a1225aa358cbf7cfbeae518c9386b46f516
CVE ID: CVE-2024-36071 State: PUBLISHED Published: 2024-06-20T00:00:00 Last Updated: 2024-08-02T03:30:13.006Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the directory and DLL files used during the installation process. This occurs because of an Untrusted Search Path. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-36072 State: PUBLISHED Published: 2024-06-27T00:00:00 Last Updated: 2024-08-02T03:30:12.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the logging component of the Endpoint Protector and Unify server application which allows an unauthenticated remote attacker to send a malicious request, resulting in the ability to execute system commands with root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA0Qk0000001E5l
CVE Program Container: References: - https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA0Qk0000001E5lKAE.html
CVE ID: CVE-2024-36073 State: PUBLISHED Published: 2024-06-27T00:00:00 Last Updated: 2024-08-02T03:30:12.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the shadowing component of the Endpoint Protector and Unify agent which allows an attacker with administrative access to the Endpoint Protector or Unify server to overwrite sensitive configuration and subsequently execute system commands with SYSTEM/root privileges on a chosen client endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpcent
ent endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA0Qk0000001E5lKAE.html
CVE ID: CVE-2024-36074 State: PUBLISHED Published: 2024-06-27T00:00:00 Last Updated: 2024-08-02T03:30:12.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the Endpoint Protector and Unify agent in the way that the EasyLock dependency is acquired from the server. An attacker with administrative access to the Endpoint Protector or Unify server can cause a client to acquire and execute a malicious file resulting in remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpcenter.netwrix.
n. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA0Qk0000001E5lKAE.html
CVE ID: CVE-2024-36075 State: PUBLISHED Published: 2024-06-27T00:00:00 Last Updated: 2024-08-02T03:30:12.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CoSoSys Endpoint Protector through 5.9.3 and Unify agent through 7.0.6 is susceptible to an arbitrary code execution vulnerability due to the way an archive obtained from the Endpoint Protector or Unify server is extracted on the endpoint. An attacker who is able to modify the archive on the server could obtain remote code execution as an administrator on an endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/pag
Vulnrichment: - CVE Program Container: References: - https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA0Qk0000001E5lKAE.html
CVE ID: CVE-2024-36076 State: PUBLISHED Published: 2024-05-19T19:22:49.111Z Last Updated: 2025-02-13T15:59:15.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30 causes attackers to escalate privileges and obtain sensitive information when a logged-in SysReptor user visits a malicious same-site subdomain in the same browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Syslifters/sysreptor/releases/tag/2024.40 - https://github.com/Syslifters/sysreptor/security/advisories/GHSA-2vfc-3h43-vghh
CVE ID: CVE-2024-36077 State: PUBLISHED Published: 2024-05-22T16:46:31.738Z Last Updated: 2025-02-13T15:59:16.082Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Qlik Sense Enterprise for Windows before 14.187.4 allows a remote attacker to elevate their privilege due to improper validation. The attacker can elevate their privilege to the internal system role, which allows them to execute commands on the server. This affects February 2024 Patch 3 (14.173.3 through 14.173.7), November 2023 Patch 8 (14.159.4 through 14.159.13), August 2023 Patch 13 (14.139.3 through 14.139.20), May 2023 Patch 15 (14.129.3 through
h 8 (14.159.4 through 14.159.13), August 2023 Patch 13 (14.139.3 through 14.139.20), May 2023 Patch 15 (14.129.3 through 14.129.22), February 2023 Patch 13 (14.113.1 through 14.113.18), November 2022 Patch 13 (14.97.2 through 14.97.18), August 2022 Patch 16 (14.78.3 through 14.78.23), and May 2022 Patch 17 (14.67.7 through 14.67.31). This has been fixed in May 2024 (14.187.4), February 2024 Patch 4 (14.173.8), November 2023 Patch 9 (14.159.14), August 2023 Patch 14 (14.139.21), May 2023 Patch 16 (14.129.23), February 2023 Patch 14 (14.113.19), November 2022 Patch 14 (14.97.19), August 2022 Patch 17 (14.78.25), and May 2022 Patch 18 (14.67.34). Additional Analyst Notes: - CISA ADP Vulnrichmen
19), August 2022 Patch 17 (14.78.25), and May 2022 Patch 18 (14.67.34). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://community.qlik.com/t5/Official-Support-Articles/High-Severity-Security-fixes-for-Qlik-Sense-Enterprise-for/ta-p/2452509
CVE ID: CVE-2024-36078 State: PUBLISHED Published: 2024-05-19T19:36:21.613Z Last Updated: 2025-02-13T15:59:16.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zammad before 6.3.1, a Ruby gem bundled by Zammad is installed with world-writable file permissions. This allowed a local attacker on the server to modify the gem's files, injecting arbitrary code into Zammad processes (which run with the environment and permissions of the Zammad user). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://zammad.com/en/advisories/zaa-2024-04
CVE ID: CVE-2024-36079 State: PUBLISHED Published: 2024-05-24T21:47:05.948Z Last Updated: 2025-02-13T15:59:17.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Vaultize 21.07.27. When uploading files, there is no check that the filename parameter is correct. As a result, a temporary file will be created outside the specified directory when the file is downloaded. To exploit this, an authenticated user would upload a file with an incorrect file name, and then download it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DxRvs/vaultize_CVE-2024-36079
CVE ID: CVE-2024-36080 State: PUBLISHED Published: 2024-05-19T20:05:41.159Z Last Updated: 2025-02-13T15:59:17.702Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Westermo EDW-100 devices through 2024-05-03 have a hidden root user account with a hardcoded password that cannot be changed. NOTE: this is a serial-to-Ethernet converter that should not be placed at the edge of the network. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.westermo.com/-/media/Files/Cyber-security/westermo_sa_EDW-100_24-05.pdf
CVE ID: CVE-2024-36081 State: PUBLISHED Published: 2024-05-19T20:05:09.526Z Last Updated: 2025-02-13T15:59:18.236Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a cleartext password. NOTE: this is a serial-to-Ethernet converter that should not be placed at the edge of the network. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.westermo.com/-/media/Files/Cyber-security/westermo_sa_EDW-100_24-05.pdf
CVE ID: CVE-2024-36082 State: PUBLISHED Published: 2024-06-07T03:42:21.207Z Last Updated: 2024-10-30T19:21:50.395Z Vendors: CodePeople Products: Music Store - WordPress eCommerce Problem Types: SQL Injection Description: SQL injection vulnerability in Music Store - WordPress eCommerce versions prior to 1.1.14 allows a remote authenticated attacker with an administrative privilege to execute arbitrary SQL commands. Information stored in the database may be obtained or altered by the attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wordpress.org/plugins/music-store/ - https://plugins.trac.wordpress.org/changeset?new=3085975%40music-sto
ces: - https://wordpress.org/plugins/music-store/ - https://plugins.trac.wordpress.org/changeset?new=3085975%40music-store%2Ftrunk%2Fmusic-store.php&old=3079647%40music-store%2Ftrunk%2Fmusic-store.php - https://jvn.jp/en/jp/JVN79213252/
CVE ID: CVE-2024-36103 State: PUBLISHED Published: 2024-06-12T00:34:39.129Z Last Updated: 2024-08-02T03:30:13.076Z Vendors: ELECOM CO.,LTD. Products: WRC-X5400GS-B, WRC-X5400GSA-B Problem Types: OS command injection Description: OS command injection vulnerability in WRC-X5400GS-B v1.0.10 and earlier, and WRC-X5400GSA-B v1.0.10 and earlier allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20240528-01/ - https://jvn.jp/en/vu/JVNVU97214223/
CVE ID: CVE-2024-36104 State: PUBLISHED Published: 2024-06-04T07:25:07.746Z Last Updated: 2025-02-13T17:52:36.097Z Vendors: Apache Software Foundation Products: Apache OFBiz Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to version 18.12.14, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://ofbiz.apache.org/download.html - https://ofbiz.apache.org/security.html - https://issues.apache.org/jira/browse/OFBIZ-13092 - https://lists.apache.org/threa
ps://ofbiz.apache.org/security.html - https://issues.apache.org/jira/browse/OFBIZ-13092 - https://lists.apache.org/thread/sv0xr8b1j7mmh5p37yldy9vmnzbodz2o - http://www.openwall.com/lists/oss-security/2024/06/03/1
CVE ID: CVE-2024-36105 State: PUBLISHED Published: 2024-05-27T17:17:39.875Z Last Updated: 2024-08-21T14:20:58.463Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: dbt-labs Products: dbt-core Problem Types: CWE-1327 Description: dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. Prior to versions 1.6.15, 1.7.15, and 1.8.1, Binding to `INADDR_ANY (0.0.0.0)` or `IN6ADDR_ANY (::)` exposes an application on all network interfaces, increasing the risk of unauthorized access. As stated in the Python docs, a special form for address is accepted instead of a host address: `''` re
thorized access. As stated in the Python docs, a special form for address is accepted instead of a host address: `''` represents `INADDR_ANY`, equivalent to `"0.0.0.0"`. On systems with IPv6, '' represents `IN6ADDR_ANY`, which is equivalent to `"::"`. A user who serves docs on an unsecured public network, may unknowingly be hosting an unsecured (http) web site for any remote user/system to access on the same network. The issue has has been mitigated in dbt-core v1.6.15, dbt-core v1.7.15, and dbt-core v1.8.1 by binding to localhost explicitly by default in `dbt docs serve`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dbt-labs/db
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dbt-labs/dbt-core/security/advisories/GHSA-pmrx-695r-4349 - https://github.com/dbt-labs/dbt-core/issues/10209 - https://github.com/dbt-labs/dbt-core/pull/10208 - https://github.com/dbt-labs/dbt-core/commit/0c08d7a19ad1740be3cb0b2e6d9d64f6537176f7 - https://cwe.mitre.org/data/definitions/1327.html - https://docs.python.org/3/library/socket.html#socket-families - https://docs.securesauce.dev/rules/PY030 - https://github.com/dbt-labs/dbt-core/blob/main/core/dbt/task/docs/serve.py#L23C38-L23C39 - https://github.com/dbt-labs/dbt-core/releases/tag/v1.6.15 - https://github.com/dbt-labs/dbt-c
s/serve.py#L23C38-L23C39 - https://github.com/dbt-labs/dbt-core/releases/tag/v1.6.15 - https://github.com/dbt-labs/dbt-core/releases/tag/v1.7.15 - https://github.com/dbt-labs/dbt-core/releases/tag/v1.8.1
CVE ID: CVE-2024-36106 State: PUBLISHED Published: 2024-06-06T15:09:36.474Z Last Updated: 2024-09-03T15:39:17.996Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: argoproj Products: argo-cd Problem Types: CWE-209 Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. It’s possible for authenticated users to enumerate clusters by name by inspecting error messages. It’s also possible to enumerate the names of projects with project-scoped clusters if you know the names of the clusters. This vulnerability is fixed in 2.11.3, 2.10.12, and 2.9.17. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
d in 2.11.3, 2.10.12, and 2.9.17. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/argoproj/argo-cd/security/advisories/GHSA-3cqf-953p-h5cp - https://github.com/argoproj/argo-cd/commit/c2647055c261a550e5da075793260f6524e65ad9
CVE ID: CVE-2024-36107 State: PUBLISHED Published: 2024-05-28T18:50:51.013Z Last Updated: 2024-09-03T15:28:54.674Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: minio Products: minio Problem Types: CWE-200 Description: MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. `If-Modified-Since` and `If-Unmodified-Since` headers when used with anonymous requests by sending a random object name requests can be used to determine if an object exists or not on the server on a specific bucket and also gain access to some amount of information such as `Last-Modified (of the latest version)`, `Etag (of the latest version)`,
in access to some amount of information such as `Last-Modified (of the latest version)`, `Etag (of the latest version)`, `x-amz-version-id (of the latest version)`, `Expires (metadata value of the latest version)`, `Cache-Control (metadata value of the latest version)`. This conditional check was being honored before validating if the anonymous access is indeed allowed on the metadata of an object. This issue has been addressed in commit `e0fe7cc3917`. Users must upgrade to RELEASE.2024-05-27T19-17-46Z for the fix. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/minio/minio/security/ad
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/minio/minio/security/advisories/GHSA-95fr-cm4m-q5p9 - https://github.com/minio/minio/pull/19810 - https://github.com/minio/minio/commit/e0fe7cc391724fc5baa85b45508f425020fe4272 - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/If-Modified-Since - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/If-Unmodified-Since
CVE ID: CVE-2024-36108 State: PUBLISHED Published: 2024-05-31T14:37:05.399Z Last Updated: 2024-09-03T16:00:17.094Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: casgate Products: casgate Problem Types: CWE-285 Description: casgate is an Open Source Identity and Access Management system. In affected versions `casgate` allows remote unauthenticated attacker to obtain sensitive information via GET request to an API endpoint. This issue has been addressed in PR #201 which is pending merge. An attacker could use `id` parameter of GET requests with value `anonymous/ anonymous` to bypass authorization on certain API endpoints. Successful exploitation of the vul
s with value `anonymous/ anonymous` to bypass authorization on certain API endpoints. Successful exploitation of the vulnerability could lead to account takeover, privilege escalation or provide attacker with credential to other services. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/casgate/casgate/security/advisories/GHSA-mj5q-rc67-h56c - https://github.com/casgate/casgate/pull/201
CVE ID: CVE-2024-36109 State: PUBLISHED Published: 2024-05-28T18:40:55.068Z Last Updated: 2024-08-02T03:30:13.042Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L) Vendors: sagemathinc Products: cocalc Problem Types: CWE-79 Description: CoCalc is web-based software that enables collaboration in research, teaching, and scientific publishing. In affected versions the markdown parser allows `<script>` tags to be included which execute when published. This issue has been addressed in commit `419862a9c9879c`. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Referen
workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/sagemathinc/cocalc/security/advisories/GHSA-8w44-hggw-p5rf - https://github.com/sagemathinc/cocalc/commit/419862a9c9879c