Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-1600 State: PUBLISHED Published: 2024-04-10T17:07:58.422Z Last Updated: 2024-08-01T18:48:21.876Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: parisneo Products: parisneo/lollms-webui Problem Types: CWE-98 Description: A Local File Inclusion (LFI) vulnerability exists in the parisneo/lollms-webui application, specifically within the `/personalities` route. An attacker can exploit this vulnerability by crafting a URL that includes directory traversal sequences (`../../`) followed by the desired system file path, URL encoded. Successful exploitation allows the attacker to read any file on the filesystem accessible by the web server. This i
ded. Successful exploitation allows the attacker to read any file on the filesystem accessible by the web server. This issue arises due to improper control of filename for include/require statement in the application. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/29ec621a-bd69-4225-ab0f-5bb8a1d10c67 - https://github.com/parisneo/lollms-webui/commit/49b0332e98d42dd5204dda53dee410b160106265
CVE ID: CVE-2024-1601 State: PUBLISHED Published: 2024-04-16T00:00:14.318Z Last Updated: 2024-08-01T18:48:21.597Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: parisneo Products: parisneo/lollms-webui Problem Types: CWE-89 Description: An SQL injection vulnerability exists in the `delete_discussion()` function of the parisneo/lollms-webui application, allowing an attacker to delete all discussions and message data. The vulnerability is exploitable via a crafted HTTP POST request to the `/delete_discussion` endpoint, which internally calls the vulnerable `delete_discussion()` function. By sending a specially crafted payload in the 'id' parameter, an attacker
he vulnerable `delete_discussion()` function. By sending a specially crafted payload in the 'id' parameter, an attacker can manipulate SQL queries to delete all records from the 'discussion' and 'message' tables. This issue is due to improper neutralization of special elements used in an SQL command. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/652a176e-6bd7-4161-8775-63a34ecc71d5 - https://github.com/parisneo/lollms-webui/commit/f0bc8f2babdfd4770a5adbf3b60ec612e4f1db46
CVE ID: CVE-2024-1602 State: PUBLISHED Published: 2024-04-10T17:08:02.423Z Last Updated: 2024-08-01T18:48:21.887Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: parisneo Products: parisneo/lollms-webui Problem Types: CWE-79 Description: parisneo/lollms-webui is vulnerable to stored Cross-Site Scripting (XSS) that leads to Remote Code Execution (RCE). The vulnerability arises due to inadequate sanitization and validation of model output data, allowing an attacker to inject malicious JavaScript code. This code can be executed within the user's browser context, enabling the attacker to send a request to the `/execute_code` endpoint and establish a reverse shell
browser context, enabling the attacker to send a request to the `/execute_code` endpoint and establish a reverse shell to the attacker's host. The issue affects various components of the application, including the handling of user input and model output. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/59be0d5a-f18e-4418-8f29-72320269a097
CVE ID: CVE-2024-1603 State: PUBLISHED Published: 2024-03-23T18:24:29.431Z Last Updated: 2025-02-13T17:32:18.811Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: paddlepaddle Products: paddlepaddle/paddle Problem Types: CWE-73 Description: paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/7739eced-73a3-4a96-afcd-9c753c55929e
CVE ID: CVE-2024-1604 State: PUBLISHED Published: 2024-03-18T09:59:35.514Z Last Updated: 2024-10-10T15:36:14.867Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: BMC Products: Control-M Problem Types: CWE-639 Description: Improper authorization in the report management and creation module of BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users to read and make unauthorized changes to any reports available within the application, even without proper permissions. The attacker must know the unique identifier of the report they want to manipulate. Fix for 9.0.20 branch was released in version 9.0.20.238. Fix for 9.0.21 branch was released in version 9
to manipulate. Fix for 9.0.20 branch was released in version 9.0.20.238. Fix for 9.0.21 branch was released in version 9.0.21.201. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.pl/posts/2024/03/CVE-2024-1604 - https://cert.pl/en/posts/2024/03/CVE-2024-1604 - https://www.bmc.com/it-solutions/control-m.html
CVE ID: CVE-2024-1605 State: PUBLISHED Published: 2024-03-18T09:59:49.339Z Last Updated: 2025-04-10T20:26:19.226Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L) Vendors: BMC Products: Control-M Problem Types: CWE-276 Description: BMC Control-M branches 9.0.20 and 9.0.21 upon user login load all Dynamic Link Libraries (DLL) from a directory that grants Write and Read permissions to all users. Leveraging it leads to loading of a potentially malicious libraries, which will execute with the application's privileges. Fix for 9.0.20 branch was released in version 9.0.20.238. Fix for 9.0.21 branch was released in version 9.0.21.201. Additional Analyst Notes: - CISA ADP Vul
n version 9.0.20.238. Fix for 9.0.21 branch was released in version 9.0.21.201. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.pl/posts/2024/03/CVE-2024-1604 - https://cert.pl/en/posts/2024/03/CVE-2024-1604 - https://www.bmc.com/it-solutions/control-m.html
CVE ID: CVE-2024-1606 State: PUBLISHED Published: 2024-03-18T10:00:05.221Z Last Updated: 2024-08-27T20:06:28.801Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: BMC Products: Control-M Problem Types: CWE-80 Description: Lack of input sanitization in BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users for manipulation of generated web pages via injection of HTML code. This might lead to a successful phishing attack for example by tricking users into using a hyperlink pointing to a website controlled by an attacker. Fix for 9.0.20 branch was released in version 9.0.20.238. Fix for 9.0.21 branch was released in version 9.0.21.200. Additional Analys
0 branch was released in version 9.0.20.238. Fix for 9.0.21 branch was released in version 9.0.21.200. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.pl/posts/2024/03/CVE-2024-1604 - https://cert.pl/en/posts/2024/03/CVE-2024-1604 - https://www.bmc.com/it-solutions/control-m.html
CVE ID: CVE-2024-1608 State: PUBLISHED Published: 2024-02-20T09:09:13.528Z Last Updated: 2024-08-01T18:48:21.911Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: OPPO Products: Usercenter Credit sdk Problem Types: Escalation of Privilege Description: In OPPO Usercenter Credit SDK, there's a possible escalation of privilege due to loose permission check, This could lead to application internal information leak w/o user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1759867611954552832
CVE ID: CVE-2024-1609 State: PUBLISHED Published: 2024-12-25T03:14:43.216Z Last Updated: 2024-12-26T19:52:25.743Z Vendors: OPPO Products: OPPP Store Problem Types: CWE-287 Description: In OPPOStore iOS App, there's a possible escalation of privilege due to improper input validation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1869215920048840704
CVE ID: CVE-2024-1610 State: PUBLISHED Published: 2024-12-18T06:18:48.588Z Last Updated: 2024-12-18T15:33:31.880Z Vendors: OPPO Products: OPPO Store APP Problem Types: CWE-287 Description: In OPPO Store APP, there's a possible escalation of privilege due to improper input validation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1869215920048840704
CVE ID: CVE-2024-1618 State: PUBLISHED Published: 2024-03-12T15:04:05.067Z Last Updated: 2024-08-01T19:33:49.763Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Faronics Products: Deep Freeze Server Standard Problem Types: CWE-428 Description: A search path or unquoted item vulnerability in Faronics Deep Freeze Server Standard, which affects versions 8.30.020.4627 and earlier. This vulnerability affects the DFServ.exe file. An attacker with local user privileges could exploit this vulnerability to replace the legitimate DFServ.exe service executable with a malicious file of the same name and located in a directory that has a higher priority than the legitimat
ecutable with a malicious file of the same name and located in a directory that has a higher priority than the legitimate directory. Thus, when the service starts, it will run the malicious file instead of the legitimate executable, allowing the attacker to execute arbitrary code, gain unauthorized access to the compromised system or stop the service from running. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/unquoted-item-or-search-path-vulnerability-faronics-deep-freeze-server
CVE ID: CVE-2024-1619 State: PUBLISHED Published: 2024-02-29T09:22:03.588Z Last Updated: 2024-08-01T18:48:20.684Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Kaspersky Products: Kaspersky Security for Linux Mail Server 8 Problem Types: CWE-74 Description: Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server. The issue was that an attacker could potentially force an administrator to click on a malicious link to perform unauthorized actions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.kaspersky.com/vulnerability/list-of-advisories/12430#010224
CVE ID: CVE-2024-1621 State: PUBLISHED Published: 2024-09-02T19:53:10.487Z Last Updated: 2024-09-03T14:00:16.816Z Vendors: NT-ware Products: uniFLOW Online Problem Types: CWE-940 Description: The registration process of uniFLOW Online (NT-ware product) apps, prior to and including version 2024.1.0, can be compromised when email login is enabled on the tenant. Those tenants utilising email login in combination with Microsoft Safe Links or similar are impacted. This vulnerability may allow the attacker to register themselves against a genuine user in the system and allow malicious users with similar access and capabilities via the app to the existing genuine user. Additional Analyst Notes: - C
cious users with similar access and capabilities via the app to the existing genuine user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ntware.atlassian.net/wiki/spaces/SA/pages/12113215492/2024+Security+Advisory+Device+registration+susceptible+to+compromise - https://www.canon-europe.com/psirt/advisory-information/
CVE ID: CVE-2024-1622 State: PUBLISHED Published: 2024-02-26T13:35:51.909Z Last Updated: 2025-02-13T17:32:19.432Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: NLnet Labs Products: Routinator Problem Types: CWE-253 Description: Due to a mistake in error checking, Routinator will terminate when an incoming RTR connection is reset by the peer too quickly after opening. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.nlnetlabs.nl/downloads/routinator/CVE-2024-1622.txt - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K52QRRYBHLP73RAS3CGOPBWYT7EZVP6O/ - https://l
project.org/archives/list/package-announce@lists.fedoraproject.org/message/K52QRRYBHLP73RAS3CGOPBWYT7EZVP6O/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N2N3N3SNBHSH7GN3JOLR7YUF5FCTQQ5O/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HPRUIPAI2BBDGFVLN733JLIUJWLEBLF/
CVE ID: CVE-2024-1623 State: PUBLISHED Published: 2024-03-14T12:47:40.629Z Last Updated: 2024-08-28T18:19:52.425Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Sagemcom Products: FAST3686 V2 Vodafone Problem Types: CWE-613 Description: Insufficient session timeout vulnerability in the FAST3686 V2 Vodafone router from Sagemcom. This vulnerability could allow a local attacker to access the administration panel without requiring login credentials. This vulnerability is possible because the 'Login.asp and logout.asp' files do not handle session details correctly. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ww
details correctly. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/insufficient-session-timeout-vulnerability-sagemcom-router
CVE ID: CVE-2024-1624 State: PUBLISHED Published: 2024-03-01T15:47:43.521Z Last Updated: 2024-08-28T15:01:15.090Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: Dassault Systèmes Products: Documentation server Problem Types: CWE-78 Description: An OS Command Injection vulnerability affecting documentation server on 3DEXPERIENCE from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x, SIMULIA Abaqus from Release 2022 through Release 2024, SIMULIA Isight from Release 2022 through Release 2024 and CATIA Composer from Release R2023 through Release R2024. A specially crafted HTTP request can lead to arbitrary command execution. Additional Analyst
023 through Release R2024. A specially crafted HTTP request can lead to arbitrary command execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2024-1625 State: PUBLISHED Published: 2024-04-10T17:07:55.385Z Last Updated: 2025-01-30T13:09:20.467Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-639 Description: An Insecure Direct Object Reference (IDOR) vulnerability exists in the lunary-ai/lunary application version 0.3.0, allowing unauthorized deletion of any organization's project. The vulnerability is due to insufficient authorization checks in the project deletion endpoint, where the endpoint fails to verify if the project ID provided in the request belongs to the requesting user's organization. As a result, an attacker can delete
e project ID provided in the request belongs to the requesting user's organization. As a result, an attacker can delete projects belonging to any organization by sending a crafted DELETE request with the target project's ID. This issue affects the project deletion functionality implemented in the projects.delete route. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/cf6dd625-e6c9-44df-a072-13686816de21 - https://github.com/lunary-ai/lunary/commit/88f98e29f19da9d1f5de45c5b163fd5b48e0bcec
CVE ID: CVE-2024-1626 State: PUBLISHED Published: 2024-04-16T00:00:14.496Z Last Updated: 2025-01-31T11:05:20.240Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-639 Description: An Insecure Direct Object Reference (IDOR) vulnerability exists in the lunary-ai/lunary repository, version 0.3.0, within the project update endpoint. The vulnerability allows authenticated users to modify the name of any project within the system without proper authorization checks, by directly referencing the project's ID in the PATCH request to the '/v1/projects/:projectId' endpoint. This issue arises because the endpoint
the project's ID in the PATCH request to the '/v1/projects/:projectId' endpoint. This issue arises because the endpoint does not verify if the provided project ID belongs to the currently authenticated user, enabling unauthorized modifications across different organizational projects. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/ccc291db-ae9c-403c-b6b5-6fe3f4800933 - https://github.com/lunary-ai/lunary/commit/9eb9e526edff8bf82ae032f7a04867c8d58572bc
CVE ID: CVE-2024-1628 State: PUBLISHED Published: 2024-05-14T16:04:57.780Z Last Updated: 2024-08-01T18:48:21.580Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: GE HealthCare Products: Venue, Venue Go, Venue Fit, LOGIQ e, LOGIQ He, Vivid E, Vivid S, Vivid T, Vivid iq, Voluson Expert 16, Voluson Expert 18, Voluson Expert 22, Voluson SWIFT, Invenia ABUS 2.0, LOGIQ E10, LOGIQ E10s, LOGIQ Fortis Problem Types: CWE-78 Description: OS command injection vulnerabilities in GE HealthCare ultrasound devices Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securityupdate.gehealthcare.com/
CVE ID: CVE-2024-1629 State: PUBLISHED Published: 2024-05-14T16:32:43.530Z Last Updated: 2024-08-01T18:48:21.479Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: GE HealthCare Products: Venue, Venue Go, Venue Fit, LOGIQ e, LOGIQ He, Vivid E, Vivid S, Vivid T, Vivid iq, Voluson Expert 16, Voluson Expert 18, Voluson Expert 22, Voluson SWIFT, LOGIQ E10, LOGIQ E10s, LOGIQ Fortis Problem Types: CWE-22 Description: Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securityupdate.gehealthcare.c
nal Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securityupdate.gehealthcare.com/
CVE ID: CVE-2024-1630 State: PUBLISHED Published: 2024-05-14T16:55:56.853Z Last Updated: 2024-08-22T17:51:14.776Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: GE HealthCare Products: Venue, Venue Go, Venue Fit, LOGIQ e, LOGIQ He, Vivid E, Vivid T, Vivid iq, Voluson Expert 16, Voluson Expert 18, Voluson Expert 22, Voluson SWIFT, LOGIQ E10, LOGIQ E10s, LOGIQ Fortis Problem Types: CWE-22 Description: Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://securityupdate.gehealthcare.com
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://securityupdate.gehealthcare.com/
CVE ID: CVE-2024-1631 State: PUBLISHED Published: 2024-02-21T02:12:38.403Z Last Updated: 2024-08-16T14:55:17.037Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Internet Computer Products: agent-js Problem Types: CWE-321, CWE-330 Description: Impact: The library offers a function to generate an ed25519 key pair via Ed25519KeyIdentity.generate with an optional param to provide a 32 byte seed value, which will then be used as the secret key. When no seed value is provided, it is expected that the library generates the secret key using secure randomness. However, a recent change broke this guarantee and uses an insecure seed for key pair generation. Since th
re randomness. However, a recent change broke this guarantee and uses an insecure seed for key pair generation. Since the private key of this identity (535yc-uxytb-gfk7h-tny7p-vjkoe-i4krp-3qmcl-uqfgr-cpgej-yqtjq-rqe) is compromised, one could lose funds associated with the principal on ledgers or lose access to a canister where this principal is the controller. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dfinity/agent-js/pull/851 - https://www.npmjs.com/package/@dfinity/identity/v/1.0.1 - https://github.com/dfinity/agent-js - https://agent-js.icp.xyz/identity/index.html - https://github.com/dfinity/agent-js/security/advisories/
inity/agent-js - https://agent-js.icp.xyz/identity/index.html - https://github.com/dfinity/agent-js/security/advisories/GHSA-c9vv-fhgv-cjc3
CVE ID: CVE-2024-1632 State: PUBLISHED Published: 2024-02-28T12:04:45.869Z Last Updated: 2024-08-02T19:28:52.380Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Progress Software Corporation Products: Sitefinity Problem Types: CWE-284 Description: Low-privileged users with access to the Sitefinity backend may obtain sensitive information from the site's administrative area. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.progress.com/sitefinity-cms - https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2024-1632-and-CVE-2024-1636-February-2024
CVE ID: CVE-2024-1633 State: PUBLISHED Published: 2024-02-19T16:42:29.949Z Last Updated: 2024-08-01T18:48:20.650Z Severity: LOW (CVSS 2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Renesas Products: rcar_gen3_v2.5 Problem Types: CWE-190 Description: During the secure boot, bl2 (the second stage of the bootloader) loops over images defined in the table “bl2_mem_params_descs”. For each image, the bl2 reads the image length and destination from the image’s certificate. Because of the way of reading from the image, which base on 32-bit unsigned integer value, it can result to an integer overflow. An attacker can bypass memory range restriction and write data out of buffer bounds, which
esult to an integer overflow. An attacker can bypass memory range restriction and write data out of buffer bounds, which could result in bypass of secure boot. Affected git version from c2f286820471ed276c57e603762bd831873e5a17 until (not Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://asrg.io/security-advisories/CVE-2024-1633/
CVE ID: CVE-2024-1634 State: PUBLISHED Published: 2024-06-18T02:37:12.621Z Last Updated: 2024-08-01T18:48:20.634Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: startbooking Products: Scheduling Plugin – Online Booking for WordPress Problem Types: CWE-862 Missing Authorization Description: The Scheduling Plugin – Online Booking for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'cbsb_disconnect_settings' function in all versions up to, and including, 3.5.10. This makes it possible for unauthenticated attackers to disconnect the plugin from the startbooking service and remove connection data
possible for unauthenticated attackers to disconnect the plugin from the startbooking service and remove connection data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/60e642f9-74ff-47f1-a49d-99c8fdb26f4a?source=cve - https://wordpress.org/plugins/calendar-booking/