Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s may cause a denial of service in some instances. Users are advised to update to find-my-way v8.2.2 or v9.0.1. or subsequent versions. There are no known workarounds for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/delvedor/find-my-way/security/advisories/GHSA-rrr8-f88r-h8q6 - https://github.com/delvedor/find-my-way/commit/5e9e0eb5d8d438e06a185d5e536a896572dd0440 - https://blakeembrey.com/posts/2024-09-web-redos
CVE ID: CVE-2024-45815 State: PUBLISHED Published: 2024-09-17T20:14:31.104Z Last Updated: 2024-09-18T14:49:10.507Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: backstage Products: backstage Problem Types: CWE-1321 Description: Backstage is an open framework for building developer portals. A malicious actor with authenticated access to a Backstage instance with the catalog backend plugin installed is able to interrupt the service using a specially crafted query to the catalog API. This has been fixed in the `1.26.0` release of the `@backstage/plugin-catalog-backend`. All users are advised to upgrade. There are no known workarounds for this vulnerability. A
tage/plugin-catalog-backend`. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/backstage/backstage/security/advisories/GHSA-3x3f-jcp3-g22j
CVE ID: CVE-2024-45816 State: PUBLISHED Published: 2024-09-17T20:13:29.331Z Last Updated: 2024-09-18T14:50:20.582Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: backstage Products: backstage Problem Types: CWE-23 Description: Backstage is an open framework for building developer portals. When using the AWS S3 or GCS storage provider for TechDocs it is possible to access content in the entire storage bucket. This can leak contents of the bucket that are not intended to be accessible, as well as bypass permission checks in Backstage. This has been fixed in the 1.10.13 release of the `@backstage/plugin-techdocs-backend` package. All users are advised to upgra
as been fixed in the 1.10.13 release of the `@backstage/plugin-techdocs-backend` package. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/backstage/backstage/security/advisories/GHSA-39v3-f278-vj3g
CVE ID: CVE-2024-45817 State: PUBLISHED Published: 2024-09-25T10:31:57.371Z Last Updated: 2024-11-20T21:33:14.401Z Vendors: Xen Products: Xen Description: In x86's APIC (Advanced Programmable Interrupt Controller) architecture, error conditions are reported in a status register. Furthermore, the OS can opt to receive an interrupt when a new error occurs. It is possible to configure the error interrupt with an illegal vector, which generates an error when an error interrupt is raised. This case causes Xen to recurse through vlapic_error(). The recursion itself is bounded; errors accumulate in the the status register and only generate an interrupt when a new status bit becomes set. However, th
rors accumulate in the the status register and only generate an interrupt when a new status bit becomes set. However, the lock protecting this state in Xen will try to be taken recursively, and deadlock. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://xenbits.xenproject.org/xsa/advisory-462.html
CVE ID: CVE-2024-45818 State: PUBLISHED Published: 2024-12-19T12:00:41.413Z Last Updated: 2024-12-31T19:01:43.510Z Vendors: Xen Products: Xen Description: The hypervisor contains code to accelerate VGA memory accesses for HVM guests, when the (virtual) VGA is in "standard" mode. Locking involved there has an unusual discipline, leaving a lock acquired past the return from the function that acquired it. This behavior results in a problem when emulating an instruction with two memory accesses, both of which touch VGA memory (plus some further constraints which aren't relevant here). When emulating the 2nd access, the lock that is already being held would be attempted to be re-acquired, resulti
here). When emulating the 2nd access, the lock that is already being held would be attempted to be re-acquired, resulting in a deadlock. This deadlock was already found when the code was first introduced, but was analysed incorrectly and the fix was incomplete. Analysis in light of the new finding cannot find a way to make the existing locking discipline work. In staging, this logic has all been removed because it was discovered to be accidentally disabled since Xen 4.7. Therefore, we are fixing the locking problem by backporting the removal of most of the feature. Note that even with the feature disabled, the lock would still be acquired for any accesses to the VGA MMIO region. Additional
at even with the feature disabled, the lock would still be acquired for any accesses to the VGA MMIO region. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://xenbits.xenproject.org/xsa/advisory-463.html
CVE ID: CVE-2024-45819 State: PUBLISHED Published: 2024-12-19T12:00:50.271Z Last Updated: 2024-12-31T18:57:41.513Z Vendors: Xen Products: Xen Description: PVH guests have their ACPI tables constructed by the toolstack. The construction involves building the tables in local memory, which are then copied into guest memory. While actually used parts of the local memory are filled in correctly, excess space that is being allocated is left with its prior contents. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://xenbits.xenproject.org/xsa/advisory-464.html
CVE ID: CVE-2024-45823 State: PUBLISHED Published: 2024-09-12T14:20:49.164Z Last Updated: 2024-09-12T15:09:32.171Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Rockwell Automation Products: FactoryTalk® Batch View™ Problem Types: CWE-287 Description: CVE-2024-45823 IMPACT An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across accounts and could allow a threat actor to impersonate a user if the threat actor is able to enumerate additional information required during authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/tru
ntication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD%201698.html
CVE ID: CVE-2024-45824 State: PUBLISHED Published: 2024-09-12T14:05:22.202Z Last Updated: 2024-09-12T15:07:31.980Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Rockwell Automation Products: FactoryTalk View Site Edition Problem Types: CWE-77 Description: CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Command Injection, and XSS Vulnerabilities and allows for full unauthenticated remote code execution. The link in the mitigations section below contains patches to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwel
contains patches to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1696.html
CVE ID: CVE-2024-45825 State: PUBLISHED Published: 2024-09-12T14:28:15.825Z Last Updated: 2024-09-12T15:03:21.086Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Rockwell Automation Products: 5015-U8IHFT Problem Types: CWE-20 Description: CVE-2024-45825 IMPACT A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the network to the device and results in a major nonrecoverable fault causing a denial-of-service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1699.html
CVE ID: CVE-2024-45826 State: PUBLISHED Published: 2024-09-12T14:33:44.373Z Last Updated: 2024-09-12T14:58:34.096Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Rockwell Automation Products: ThinManager Problem Types: CWE-610 Description: CVE-2024-45826 IMPACT Due to improper input validation, a path traversal and remote code execution vulnerability exists when the ThinManager® processes a crafted POST request. If exploited, a user can install an executable file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1700.html
CVE ID: CVE-2024-45827 State: PUBLISHED Published: 2024-11-12T05:30:29.574Z Last Updated: 2024-11-12T14:40:50.726Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SoftBank Corp. Products: Mesh Wi-Fi router RP562B Problem Types: CWE-78 Description: Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-adjacent authenticated attacker may execute an arbitrary OS command. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/vu/JVNVU90676195/
CVE ID: CVE-2024-45828 State: PUBLISHED Published: 2025-01-11T12:25:11.560Z Last Updated: 2025-11-03T20:39:13.584Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request Bus cleanup path in DMA mode may trigger a RING_OP_STAT interrupt when the ring is being stopped. Depending on timing between ring stop request completion, interrupt handler removal and code execution this may lead to a NULL pointer dereference in hci_dma_irq_handler() if it gets to run after the io_data pointer is set to NULL in hci_dma_cleanup(). Prevent this my masking the ring interrupts before ring s
after the io_data pointer is set to NULL in hci_dma_cleanup(). Prevent this my masking the ring interrupts before ring stop request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/a6cddf68b3405b272b5a3cad9657be0b02b34bf4 - https://git.kernel.org/stable/c/9d745a56aea45e47f4755bc12e6429d6314dbb54 - https://git.kernel.org/stable/c/a6dc4b4fda2e147e557050eaae51ff15edeb680b - https://git.kernel.org/stable/c/19cc5767334bfe980f52421627d0826c0da86721 - https://git.kernel.org/stable/c/6ca2738174e4ee44edb2ab2d86ce74f015a0cc32
CVE ID: CVE-2024-45829 State: PUBLISHED Published: 2024-10-25T06:18:17.317Z Last Updated: 2024-10-25T18:34:50.895Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Sharp Corporation, Toshiba Tec Corporation Products: Sharp Digital Full-color MFPs and Monochrome MFPs, e-STUDIO 908, e-STUDIO 1058, e-STUDIO 1208 Problem Types: CWE-125 Description: Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resulting in an Out-of-bounds Read vulnerability. Crafted HTTP requests may cause affected products crashed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jvn
quests may cause affected products crashed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/vu/JVNVU95063136/ - https://global.sharp/products/copier/info/info_security_2024-10.html - https://www.toshibatec.com/information/20241025_01.html
CVE ID: CVE-2024-45832 State: PUBLISHED Published: 2025-01-17T16:49:56.088Z Last Updated: 2025-01-17T17:59:26.276Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Ossur Products: Mobile Logic Application Problem Types: CWE-798 Description: Hard-coded credentials were included as part of the application binary. These credentials served as part of the application authentication flow and communication with the mobile application. An attacker could access unauthorized information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-354-01
CVE ID: CVE-2024-45833 State: PUBLISHED Published: 2024-09-16T06:41:47.347Z Last Updated: 2024-09-16T13:04:55.732Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-693 Description: Mattermost Mobile Apps versions <=2.18.0 fail to disable autocomplete during login while typing the password and visible password is selected, which allows the password to get saved in the dictionary when the user has Swiftkey as the default keyboard, the masking is off and the password contains a special character.. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-45835 State: PUBLISHED Published: 2024-09-16T14:27:47.636Z Last Updated: 2024-09-16T14:42:39.152Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-693 Description: Mattermost Desktop App versions <=5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-45836 State: PUBLISHED Published: 2024-09-26T04:07:37.035Z Last Updated: 2025-03-25T16:28:16.689Z Vendors: PLANEX COMMUNICATIONS INC. Products: CS-QR10, CS-QR20, CS-QR22, CS-QR220, CS-QR300 Problem Types: CWE-79 Description: Cross-site scripting vulnerability exists in the web management page of PLANEX COMMUNICATIONS network cameras. If a logged-in user accesses a specific file, an arbitrary script may be executed on the web browser of the user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/jp/JVN81966868/
CVE ID: CVE-2024-45837 State: PUBLISHED Published: 2024-11-22T00:13:01.908Z Last Updated: 2024-11-22T11:34:09.427Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: AIPHONE CO., LTD. Products: IX-MV, IX-MV7-HB, IX-MV7-HBT, IX-MV7-HW, IX-MV7-HWT, IX-MV7-HW-JP, IX-MV7-B, IX-MV7-BT, IX-MV7-W, IX-MV7-WT, IX-DA, IX-DAU, IX-DB, IX-DBT, IX-EA, IX-EAT, IX-EAU, IX-DV, IX-DVT, IX-DVF, IX-DVF-P, IX-DVF-L, IX-DVM, IX-DU, IX-DVF-RA, IX-DVF-2RA, IX-BA, IX-BAU, IX-BB, IX-BBT, IX-FA, IX-SSA, IX-SS-2G, IX-SS-2GT, IX-SS-2G-N, IX-BU, IX-SSA-RA, IX-SSA-2RA, IX-RS-B, IX-RS-BT, IX-RS-W, IX-RS-WT, IXW-MA, IX-SPMIC, IXG-2C7, IXG-2C7-L, IXG-DM7, IXG-DM7-HID, IXG-DM7-HIDA, IXG-DM7-10K,
S-B, IX-RS-BT, IX-RS-W, IX-RS-WT, IXW-MA, IX-SPMIC, IXG-2C7, IXG-2C7-L, IXG-DM7, IXG-DM7-HID, IXG-DM7-HIDA, IXG-DM7-10K, IXG-MK, IXGW-GW, IXGW-TGW, IXGW-LC, IX-SupportTool, IXG-SupportTool Problem Types: CWE-321 Description: Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.aiphone.net/important/20241016_1/ - https://www.aiphone.net/important/20241016_2/ - https://www.aiphone.net/support/software-documents/ix/ - https://www.aiphone.net/s
w.aiphone.net/important/20241016_2/ - https://www.aiphone.net/support/software-documents/ix/ - https://www.aiphone.net/support/software-documents/ixg/ - https://jvn.jp/en/jp/JVN41397971/
CVE ID: CVE-2024-45838 State: PUBLISHED Published: 2024-09-26T17:31:45.575Z Last Updated: 2024-10-17T16:54:51.865Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: goTenna Products: Pro ATAK Plugin Problem Types: CWE-319 Description: The goTenna Pro ATAK Plugin does not encrypt callsigns in messages. It is advised to not use sensitive information in callsigns when using this and previous versions of the plugin. Update to current plugin version which uses AES-256 encryption for callsigns in encrypted operation Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05
CVE ID: CVE-2024-45841 State: PUBLISHED Published: 2024-12-05T09:39:36.181Z Last Updated: 2024-12-18T06:32:37.504Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: I-O DATA DEVICE, INC. Products: UD-LT1, UD-LT1/EX Problem Types: CWE-732 Description: Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier. If an attacker with the guest account of the affected products accesses a specific file, the information containing credentials may be obtained. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.iodata.jp/support/information/2024/11_ud-
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.iodata.jp/support/information/2024/11_ud-lt1/ - https://jvn.jp/en/jp/JVN46615026/
CVE ID: CVE-2024-45842 State: PUBLISHED Published: 2024-10-25T06:18:23.519Z Last Updated: 2024-12-03T17:11:31.613Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Sharp Corporation, Toshiba Tec Corporation Products: Sharp Digital Full-color MFPs and Monochrome MFPs, e-STUDIO 908, e-STUDIO 1058, e-STUDIO 1208 Problem Types: CWE-22 Description: Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability. Unintended internal files may be retrieved when processing crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/vu/JVNVU95063136/ - https://global.
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/vu/JVNVU95063136/ - https://global.sharp/products/copier/info/info_security_2024-10.html - https://www.toshibatec.com/information/20241025_01.html
CVE ID: CVE-2024-45843 State: PUBLISHED Published: 2024-09-26T08:03:41.827Z Last Updated: 2024-09-26T13:11:54.474Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-918 Description: Mattermost versions 9.5.x <= 9.5.8 fail to include the metadata endpoints of Oracle Cloud and Alibaba in the SSRF denylist, which allows an attacker to possibly cause an SSRF if Mattermost was deployed in Oracle Cloud or Alibaba. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-45844 State: PUBLISHED Published: 2024-10-16T14:12:47.209Z Last Updated: 2024-10-21T13:14:15.515Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-306 Description: BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000140061
CVE ID: CVE-2024-45845 State: REJECTED Published: 2024-09-10T00:00:00 Last Updated: 2024-09-12T20:07:13.149489 Description: No description available.
CVE ID: CVE-2024-45846 State: PUBLISHED Published: 2024-09-12T12:56:48.362Z Last Updated: 2024-09-12T14:39:09.882Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: mindsdb Products: mindsdb Problem Types: CWE-95 Description: An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT WHERE’ clause containing Python code is run against a database created with the Weaviate engine, the code will be passed to an eval function and executed on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hi
an eval function and executed on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hiddenlayer.com/sai-security-advisory/2024-09-mindsdb/
CVE ID: CVE-2024-45847 State: PUBLISHED Published: 2024-09-12T12:57:42.357Z Last Updated: 2024-09-12T14:37:32.950Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: mindsdb Products: mindsdb Problem Types: CWE-95 Description: An arbitrary code execution vulnerability exists in versions 23.11.4.2 up to 24.7.4.1 of the MindsDB platform, when one of several integrations is installed on the server. If a specially crafted ‘UPDATE’ query containing Python code is run against a database created with the specified integration engine, the code will be passed to an eval function and executed on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
assed to an eval function and executed on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hiddenlayer.com/sai-security-advisory/2024-09-mindsdb/
CVE ID: CVE-2024-45848 State: PUBLISHED Published: 2024-09-12T12:58:32.914Z Last Updated: 2024-09-12T14:35:30.927Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: mindsdb Products: mindsdb Problem Types: CWE-95 Description: An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on the server. If a specially crafted ‘INSERT’ query containing Python code is run against a database created with the ChromaDB engine, the code will be passed to an eval function and executed on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hiddenlay
function and executed on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hiddenlayer.com/sai-security-advisory/2024-09-mindsdb/
CVE ID: CVE-2024-45849 State: PUBLISHED Published: 2024-09-12T12:59:25.993Z Last Updated: 2024-09-12T14:02:51.572Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: mindsdb Products: mindsdb Problem Types: CWE-95 Description: An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, an ‘INSERT’ query can be used for list creation. If such a query is specially crafted to contain Python code and is run against the database, the code will be passed to an eval function and executed on the server.
ain Python code and is run against the database, the code will be passed to an eval function and executed on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hiddenlayer.com/sai-security-advisory/2024-09-mindsdb/
CVE ID: CVE-2024-45850 State: PUBLISHED Published: 2024-09-12T13:00:18.531Z Last Updated: 2024-09-12T17:16:47.219Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: mindsdb Products: mindsdb Problem Types: CWE-95 Description: An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, an ‘INSERT’ query can be used for site column creation. If such a query is specially crafted to contain Python code and is run against the database, the code will be passed to an eval function and executed on the
to contain Python code and is run against the database, the code will be passed to an eval function and executed on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hiddenlayer.com/sai-security-advisory/2024-09-mindsdb/