Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-39912 State: PUBLISHED Published: 2024-07-15T19:38:04.824Z Last Updated: 2024-08-02T04:33:11.552Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: web-auth Products: webauthn-framework Problem Types: CWE-204 Description: web-auth/webauthn-lib is an open source set of PHP libraries and a Symfony bundle to allow developers to integrate that authentication mechanism into their web applications. The ProfileBasedRequestOptionsBuilder method returns allowedCredentials without any credentials if no username was found. When WebAuthn is used as the first or only authentication method, an attacker can enumerate usernames based on the absence of the `al
is used as the first or only authentication method, an attacker can enumerate usernames based on the absence of the `allowedCredentials` property in the assertion options response. This allows enumeration of valid or invalid usernames. By knowing which usernames are valid, attackers can focus their efforts on a smaller set of potential targets, increasing the efficiency and likelihood of successful attacks. This issue has been addressed in version 4.9.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/web-auth/webauthn-framework/security/ad
CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/web-auth/webauthn-framework/security/advisories/GHSA-875x-g8p7-5w27 - https://github.com/web-auth/webauthn-framework/commit/64de11f6cddc71e56c76e0cc4573bf94d02be045
CVE ID: CVE-2024-39914 State: PUBLISHED Published: 2024-07-12T14:46:44.696Z Last Updated: 2024-08-02T04:33:11.177Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: FOGProject Products: fogproject Problem Types: CWE-77 Description: FOG is a cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.34, packages/web/lib/fog/reportmaker.class.php in FOG was affected by a command injection via the filename parameter to /fog/management/export.php. This vulnerability is fixed in 1.5.10.34. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FOGProject/fogproject/security/advisories/GHSA-7h44-
richment: - CVE Program Container: References: - https://github.com/FOGProject/fogproject/security/advisories/GHSA-7h44-6vq6-cq8j - https://github.com/FOGProject/fogproject/commit/2413bc034753c32799785e9bf08164ccd0a2759f
CVE ID: CVE-2024-39915 State: PUBLISHED Published: 2024-07-15T19:33:13.649Z Last Updated: 2024-08-02T04:33:11.070Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: sni Products: Thruk Problem Types: CWE-94 Description: Thruk is a multibackend monitoring webinterface for Naemon, Nagios, Icinga and Shinken using the Livestatus API. This authenticated RCE in Thruk allows authorized users with network access to inject arbitrary commands via the URL parameter during PDF report generation. The Thruk web application does not properly process the url parameter when generating a PDF report. An authorized attacker with access to the reporting functionality could injec
rl parameter when generating a PDF report. An authorized attacker with access to the reporting functionality could inject arbitrary commands that would be executed when the script /script/html2pdf.sh is called. The vulnerability can be exploited by an authorized user with network access. This issue has been addressed in version 3.16. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/sni/Thruk/security/advisories/GHSA-r7gx-h738-4w6f - https://github.com/sni/Thruk/commit/7e7eb251e76718a07639c4781f0d959d817f173b
CVE ID: CVE-2024-39916 State: PUBLISHED Published: 2024-07-12T15:00:10.035Z Last Updated: 2024-08-02T04:33:11.556Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: FOGProject Products: fogproject Problem Types: CWE-453 Description: FOG is a free open-source cloning/imaging/rescue suite/inventory management system. There is a security issue with the NFS configuration in /etc/exports generated by the installer that allows an attacker to modify files outside the export in the default installation. The exports have the no_subtree_check option. The no_subtree_check option means that if a client performs a file operation, the server will only check if the requested
he no_subtree_check option means that if a client performs a file operation, the server will only check if the requested file is on the correct filesystem, not if it is in the correct directory. This enables modifying files in /images, accessing other files on the same filesystem, and accessing files on other filesystems. This vulnerability is fixed in 1.5.10.30. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FOGProject/fogproject/security/advisories/GHSA-3xjr-xf9v-hwjh - https://github.com/FOGProject/fogproject/commit/2de209bc57a177a052b4a877f000c591740b2f88
CVE ID: CVE-2024-39917 State: PUBLISHED Published: 2024-07-12T15:24:01.307Z Last Updated: 2025-11-03T19:30:23.757Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L) Vendors: neutrinolabs Products: xrdp Problem Types: CWE-307 Description: xrdp is an open source RDP server. xrdp versions prior to 0.10.0 have a vulnerability that allows attackers to make an infinite number of login attempts. The number of max login attempts is supposed to be limited by a configuration parameter `MaxLoginRetry` in `/etc/xrdp/sesman.ini`. However, this mechanism was not effectively working. As a result, xrdp allows an infinite number of login attempts. Additional Analyst Notes: - CISA ADP Vul
ctively working. As a result, xrdp allows an infinite number of login attempts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-7w22-h4w7-8j5j - https://github.com/neutrinolabs/xrdp/commit/19c111c74c913ecc6e4ba9a738ed929a79d2ae8f
CVE ID: CVE-2024-39918 State: PUBLISHED Published: 2024-07-15T19:53:20.491Z Last Updated: 2024-08-02T04:33:11.660Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: jasonraimondi Products: url-to-png Problem Types: CWE-22 Description: @jmondi/url-to-png is an open source URL to PNG utility featuring parallel rendering using Playwright for screenshots and with storage caching via Local, S3, or CouchDB. Input of the `ImageId` in the code is not sanitized and may lead to path traversal. This allows an attacker to store an image in an arbitrary location that the server has permission to access. This issue has been addressed in version 2.1.2 and all users are advis
ocation that the server has permission to access. This issue has been addressed in version 2.1.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jasonraimondi/url-to-png/security/advisories/GHSA-vvmv-wrvp-9gjr - https://github.com/jasonraimondi/url-to-png/commit/e4eaeca6493b21cd515b582fd6c0af09ede54507 - https://github.com/jasonraimondi/url-to-png/blob/e43098e0af3a380ebc044e7f303a83933b94b434/src/middlewares/extract_query_params.ts#L75
CVE ID: CVE-2024-39919 State: PUBLISHED Published: 2024-07-15T19:53:23.192Z Last Updated: 2024-08-02T04:33:11.149Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: jasonraimondi Products: url-to-png Problem Types: CWE-200 Description: @jmondi/url-to-png is an open source URL to PNG utility featuring parallel rendering using Playwright for screenshots and with storage caching via Local, S3, or CouchDB. The package includes an `ALLOW_LIST` where the host can specify which services the user is permitted to capture screenshots of. By default, capturing screenshots of web services running on localhost, 127.0.0.1, or the [::] is allowed. If someone hosts this project
ring screenshots of web services running on localhost, 127.0.0.1, or the [::] is allowed. If someone hosts this project on a server, users could then capture screenshots of other web services running locally. This issue has been addressed in version 2.1.1 with the addition of a blocklist. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jasonraimondi/url-to-png/security/advisories/GHSA-342q-2mc2-5gmp - https://github.com/jasonraimondi/url-to-png/commit/f62ff40403ffa1781459d6be8d97b8035888c00c
CVE ID: CVE-2024-39920 State: PUBLISHED Published: 2024-07-03T00:00:00 Last Updated: 2024-08-05T18:37:40.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers to infer the content of one TCP connection from a client system (to any server), when that client system is concurrently obtaining TCP data at a slow rate from an attacker-controlled server, aka the "SnailLoad" issue. For example, the attack can begin by measuring RTTs via the TCP segments whose role is to provide an ACK control bit and an Acknowledgment Number. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
e an ACK control bit and an Acknowledgment Number. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.snailload.com - https://www.snailload.com/snailload.pdf - https://github.com/IAIK/SnailLoad - https://www.rfc-editor.org/rfc/rfc9293.txt - https://www.tugraz.at/en/tu-graz/services/news-stories/tu-graz-news/singleview/article/neue-sicherheitsluecke-erlaubt-ueberwachung-besuchter-websites-und-angesehener-videos - https://twitter.com/tugraz/status/1805272833322299412 - https://news.ycombinator.com/item?id=40809629 - https://www.instagram.com/p/C8wpO1UtExw/
CVE ID: CVE-2024-39921 State: PUBLISHED Published: 2024-09-04T01:51:14.241Z Last Updated: 2025-03-13T13:26:40.037Z Vendors: Fsas Technologies Inc. Products: IPCOM EX2 Series, IPCOM VE2 Series Problem Types: Observable timing discrepancy Description: Observable timing discrepancy issue exists in IPCOM EX2 Series V01L02NF0001 to V01L06NF0401, V01L20NF0001 to V01L20NF0401, V02L20NF0001 to V02L21NF0301, and IPCOM VE2 Series V01L04NF0001 to V01L06NF0112. If this vulnerability is exploited, some of the encrypted communication may be decrypted by an attacker who can obtain the contents of the communication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.fujitsu.com/jp/
tents of the communication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.fujitsu.com/jp/products/network/support/2024/ipcom-04/ - https://jvn.jp/en/jp/JVN29238389/
CVE ID: CVE-2024-39922 State: PUBLISHED Published: 2024-08-13T07:54:17.388Z Last Updated: 2024-08-14T17:38:02.012Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: LOGO! 12/24RCE, LOGO! 12/24RCEo, LOGO! 230RCE, LOGO! 230RCEo, LOGO! 24CE, LOGO! 24CEo, LOGO! 24RCE, LOGO! 24RCEo, SIPLUS LOGO! 12/24RCE, SIPLUS LOGO! 12/24RCEo, SIPLUS LOGO! 230RCE, SIPLUS LOGO! 230RCEo, SIPLUS LOGO! 24CE, SIPLUS LOGO! 24CEo, SIPLUS LOGO! 24RCE, SIPLUS LOGO! 24RCEo Problem Types: CWE-256 Description: A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 23
ied in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions), SI
ns), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions). Affected devices store user passwords in plaintext without proper protection. This could allow a physical attacker to retrieve them from the embedded storage ICs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-921449.html
CVE ID: CVE-2024-39923 State: PUBLISHED Published: 2025-08-25T00:00:00.000Z Last Updated: 2025-08-25T20:38:16.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mahara 24.04 before 24.04.2 and 23.04 before 23.04.7. The About, Contact, and Help footer links can be set up to be vulnerable to Cross Site Scripting (XSS) due to not sanitising the values. These links can only be set up by an admin but are clickable by any logged-in person. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mahara.org/interaction/forum/view.php?id=43 - https://mahara.org/interaction/forum/topic.php?id=9546
CVE ID: CVE-2024-39924 State: PUBLISHED Published: 2024-09-13T00:00:00.000Z Last Updated: 2025-03-18T19:56:32.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been identified in the authentication and authorization process of the endpoint responsible for altering the metadata of an emergency access. It permits an attacker with granted emergency access to escalate their privileges by changing the access level and modifying the wait time. Consequently, the attacker can gain full control over the vault (when only intended to have read access) while bypassing the necessary wait period. Addit
in full control over the vault (when only intended to have read access) while bypassing the necessary wait period. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dani-garcia/vaultwarden/blob/1.30.3/src/api/core/emergency_access.rs#L115-L148 - https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.0 - https://www.mgm-sp.com/cve/missing-authentication-check-for-emergency-access
CVE ID: CVE-2024-39925 State: PUBLISHED Published: 2024-09-13T00:00:00.000Z Last Updated: 2025-03-22T13:36:30.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. It lacks an offboarding process for members who leave an organization. As a result, the shared organization key is not rotated when a member departs. Consequently, the departing member, whose access should be revoked, retains a copy of the organization key. Additionally, the application fails to adequately protect some encrypted data stored on the server. Consequently, an authenticated user could gain unauthorized access to encrypted data of any organ
stored on the server. Consequently, an authenticated user could gain unauthorized access to encrypted data of any organization, even if the user is not a member of the targeted organization. However, the user would need to know the corresponding organizationId. Hence, if a user (whose access to an organization has been revoked) already possesses the organization key, that user could use the key to decrypt the leaked data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dani-garcia/vaultwarden/releases - https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.0 - https://www.mgm-sp.com/cve/missing-rotation-of-the-organization-key
CVE ID: CVE-2024-39926 State: PUBLISHED Published: 2024-09-13T00:00:00.000Z Last Updated: 2025-03-18T18:51:04.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A stored cross-site scripting (XSS) or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard, which is then executed or rendered in the context of an administrator's browser when viewing the injected content. However, it is important to note that the default Content Security Policy (CSP) of the application blocks mo
ed content. However, it is important to note that the default Content Security Policy (CSP) of the application blocks most exploitation paths, significantly mitigating the potential impact. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dani-garcia/vaultwarden/blob/1.30.3/src/static/scripts/admin_users.js#L201 - https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.0 - https://www.mgm-sp.com/cve/html-injection-in-vaultwarden
CVE ID: CVE-2024-39927 State: PUBLISHED Published: 2024-07-10T06:55:19.636Z Last Updated: 2024-08-02T04:33:11.023Z Vendors: Ricoh Company, Ltd. Products: IM C3510/C3010, IM C6010/C5510/C4510, IM C2510/C2010, IM C7010, IM 460F/460FTL/370/370F, IM C8500/C8510M/C8500/C8500M Problem Types: Out-of-bounds write Description: Out-of-bounds write vulnerability exists in Ricoh MFPs and printers. If a remote attacker sends a specially crafted request to the affected products, the products may be able to cause a denial-of-service (DoS) condition and/or user's data may be destroyed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ricoh.com/products/se
itional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000008 - https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2024-000008 - https://jvn.jp/en/jp/JVN14294633/ - https://jvn.jp/jp/JVN14294633/
CVE ID: CVE-2024-39928 State: PUBLISHED Published: 2024-09-24T07:27:55.376Z Last Updated: 2024-09-24T15:02:39.880Z Vendors: Apache Software Foundation Products: Apache Linkis Spark EngineConn Problem Types: CWE-326 Description: In Apache Linkis <= 1.5.0, a Random string security vulnerability in Spark EngineConn, random string generated by the Token when starting Py4j uses the Commons Lang's RandomStringUtils. Users are recommended to upgrade to version 1.6.0, which fixes this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/g664n13nb17rsogcfrn8kjgd8m89p8nw
CVE ID: CVE-2024-39929 State: PUBLISHED Published: 2024-07-04T00:00:00.000Z Last Updated: 2025-03-18T15:37:58.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mime_filename extension-blocking protection mechanism, and potentially deliver executable attachments to the mailboxes of end users. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.exim.org/exim.git/commit/6ce5c70cff8989418e05d01fd2a57703007a6357 - https://git.exim.org/exim.git/commit/1b3209b0577a9327ebb076f3b32b8a159c253f7b - https://github.com/Exim/exim/compar
57 - https://git.exim.org/exim.git/commit/1b3209b0577a9327ebb076f3b32b8a159c253f7b - https://github.com/Exim/exim/compare/exim-4.98-RC2...exim-4.98-RC3 - https://www.rfc-editor.org/rfc/rfc2231.txt - https://bugs.exim.org/show_bug.cgi?id=3099#c4
CVE ID: CVE-2024-39930 State: PUBLISHED Published: 2024-07-04T00:00:00 Last Updated: 2024-08-28T15:22:31.592925 Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code execution. Authenticated attackers can exploit this by opening an SSH connection and sending a malicious --split-string env request if the built-in SSH server is activated. Windows installations are unaffected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gogs/gogs/rele
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gogs/gogs/releases - https://www.sonarsource.com/blog/securing-developer-tools-unpatched-code-vulnerabilities-in-gogs-1/ - https://www.vicarius.io/vsociety/posts/argument-injection-in-gogs-ssh-server-cve-2024-39930
CVE ID: CVE-2024-39931 State: PUBLISHED Published: 2024-07-04T00:00:00 Last Updated: 2024-08-02T04:33:11.178Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Gogs through 0.13.0 allows deletion of internal files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/gogs/gogs/releases - https://www.sonarsource.com/blog/securing-developer-tools-unpatched-code-vulnerabilities-in-gogs-1/
CVE ID: CVE-2024-39932 State: PUBLISHED Published: 2024-07-04T00:00:00 Last Updated: 2024-08-02T04:33:11.786Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Gogs through 0.13.0 allows argument injection during the previewing of changes. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/gogs/gogs/releases - https://www.sonarsource.com/blog/securing-developer-tools-unpatched-code-vulnerabilities-in-gogs-1/
CVE ID: CVE-2024-39933 State: PUBLISHED Published: 2024-07-04T00:00:00 Last Updated: 2024-08-02T04:33:11.513Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Gogs through 0.13.0 allows argument injection during the tagging of a new release. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/gogs/gogs/releases - https://www.sonarsource.com/blog/securing-developer-tools-unpatched-code-vulnerabilities-in-gogs-1/
CVE ID: CVE-2024-39934 State: PUBLISHED Published: 2024-07-04T00:00:00 Last Updated: 2024-08-02T04:33:11.627Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Robotmk before 2.0.1 allows a local user to escalate privileges (e.g., to SYSTEM) if automated Python environment setup is enabled, because the "shared holotree usage" feature allows any user to edit any Python environment. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/elabit/robotmk/releases/tag/v2.0.1 - https://github.com/elabit/robotmk/commit/78c1174ab2df43813050d0c22e1efb8636f8715e - https:
robotmk/releases/tag/v2.0.1 - https://github.com/elabit/robotmk/commit/78c1174ab2df43813050d0c22e1efb8636f8715e - https://checkmk.com/werk/16434 - https://github.com/elabit/robotmk/compare/v2.0.0...v2.0.1
CVE ID: CVE-2024-39935 State: PUBLISHED Published: 2024-07-04T00:00:00 Last Updated: 2024-08-21T14:16:18.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: jc21 NGINX Proxy Manager before 2.11.3 allows backend/internal/certificate.js OS command injection by an authenticated user (with certificate management privileges) via untrusted input to the DNS provider configuration. NOTE: this is not part of any NGINX software shipped by F5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/NginxProxyManager/nginx-proxy-manager/commit/99cce7e2b0da2978411cedd7cac5fffbe15bc46 - https://github.com/NginxProxyManager/nginx-proxy-manage