Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-5959 State: PUBLISHED Published: 2024-09-18T14:44:44.294Z Last Updated: 2024-09-18T16:02:41.597Z Vendors: Eliz Software Products: Panel Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Stored XSS.This issue affects Panel: before v2.3.24. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-24-1497
CVE ID: CVE-2024-5960 State: PUBLISHED Published: 2024-09-18T14:49:32.180Z Last Updated: 2025-09-24T14:08:24.164Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Eliz Software Products: Panel Problem Types: CWE-256 Description: Plaintext Storage of a Password vulnerability in Eliz Software Panel allows : Use of Known Domain Credentials.This issue affects Panel: before v2.3.24. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-24-1497
CVE ID: CVE-2024-5961 State: PUBLISHED Published: 2024-06-14T07:48:25.475Z Last Updated: 2024-08-01T21:25:03.175Z Vendors: Trol InterMedia Sp. z o.o. Sp. k. Products: 2ClickPortal Problem Types: CWE-79 Description: Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cross-site scripting (XSS). An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. This issue affects 2ClickPortal software versions from 7.2.31 through 7.6.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.pl/en/posts/2024/06/CVE-2024-5961/ - https://ce
SA ADP Vulnrichment: - CVE Program Container: References: - https://cert.pl/en/posts/2024/06/CVE-2024-5961/ - https://cert.pl/posts/2024/06/CVE-2024-5961/ - https://2clickportal.pl/
CVE ID: CVE-2024-5962 State: PUBLISHED Published: 2025-05-22T19:34:05.818Z Last Updated: 2025-05-22T19:43:48.259Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: WSO2 Products: WSO2 API Manager, WSO2 Identity Server Problem Types: CWE-79 Description: A reflected cross-site scripting (XSS) vulnerability exists in the authentication endpoint of multiple WSO2 products due to missing output encoding of user-supplied input. A malicious actor can exploit this vulnerability to inject arbitrary JavaScript into the authentication flow, potentially leading to UI modifications, redirections to malicious websites, or data exfiltration from the browser. While this issue
eading to UI modifications, redirections to malicious websites, or data exfiltration from the browser. While this issue could allow an attacker to manipulate the user’s browser, session-related sensitive cookies remain protected with the httpOnly flag, preventing session hijacking. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3443/
CVE ID: CVE-2024-5963 State: PUBLISHED Published: 2024-08-06T02:19:41.244Z Last Updated: 2024-08-08T15:31:12.012Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hitachi Products: Hitachi Device Manager Problem Types: CWE-428 Description: Unquoted Executable Path vulnerability in Hitachi Device Manager on Windows (Device Manager Server component).This issue affects Hitachi Device Manager: before 8.8.7-00. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-135/index.html
CVE ID: CVE-2024-5964 State: PUBLISHED Published: 2024-07-18T02:03:57.058Z Last Updated: 2024-08-01T21:25:03.165Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: tislam100 Products: Zenon Lite Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Zenon Lite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Button shortcode in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrar
scaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7e9b004a-2050-47e8-ac4d-491b715c87d2?source=cve - https://themes.trac.wordpress.org/browser/zenon-lite/1.9/lib/includes/shortcodes.php#L138
CVE ID: CVE-2024-5965 State: PUBLISHED Published: 2024-06-22T03:30:30.895Z Last Updated: 2024-08-01T21:25:03.199Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wildweblab Products: Mosaic Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Mosaic theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter within the theme's Button shortcode in all versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary we
ing. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6921da1b-e63d-479a-9786-9b1bd8201d69?source=cve - https://themes.trac.wordpress.org/browser/mosaic/1.7.1/shortcodes.php#L165
CVE ID: CVE-2024-5966 State: PUBLISHED Published: 2024-06-22T03:30:29.955Z Last Updated: 2024-08-01T21:25:03.170Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: ppfeufer Products: Grey Opaque Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Grey Opaque theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Download-Button shortcode in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inj
and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2f4888e1-98b3-48d9-a2d8-416eae447a32?source=cve - https://themes.trac.wordpress.org/browser/grey-opaque/2.0.1/functions-shortcodes.php#L34
CVE ID: CVE-2024-5967 State: PUBLISHED Published: 2024-06-18T12:05:39.289Z Last Updated: 2025-11-21T07:06:12.284Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Red Hat Products: Red Hat Build of Keycloak, Red Hat build of Keycloak 22, Red Hat Single Sign-On 7, Red Hat Single Sign-On 7.6 for RHEL 7, Red Hat Single Sign-On 7.6 for RHEL 8, Red Hat Single Sign-On 7.6 for RHEL 9, RHEL-8 based Middleware Containers Problem Types: CWE-276 Description: A vulnerability was found in Keycloak. The LDAP testing endpoint allows changing the Connection URL independently without re-entering the currently configured LDAP bind credentials. This flaw allows an attacker with ad
L independently without re-entering the currently configured LDAP bind credentials. This flaw allows an attacker with admin access (permission manage-realm) to change the LDAP host URL ("Connection URL") to a machine they control. The Keycloak server will connect to the attacker's host and try to authenticate with the configured credentials, thus leaking them to the attacker. As a consequence, an attacker who has compromised the admin console or compromised a user with sufficient privileges can leak domain credentials and attack the domain. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:6493 - https://acces
ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:6493 - https://access.redhat.com/errata/RHSA-2024:6494 - https://access.redhat.com/errata/RHSA-2024:6495 - https://access.redhat.com/errata/RHSA-2024:6497 - https://access.redhat.com/errata/RHSA-2024:6499 - https://access.redhat.com/errata/RHSA-2024:6500 - https://access.redhat.com/errata/RHSA-2024:6501 - https://access.redhat.com/security/cve/CVE-2024-5967 - https://bugzilla.redhat.com/show_bug.cgi?id=2292200
CVE ID: CVE-2024-5968 State: PUBLISHED Published: 2024-10-09T06:00:05.106Z Last Updated: 2024-11-05T18:24:39.752Z Vendors: Unknown Products: Photo Gallery by 10Web Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Photo Gallery by 10Web WordPress plugin before 1.8.28 does not properly sanitise and escape some of its Gallery settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/db73e8d8-feb1-4daa-937e-a73969a93bcc/
CVE ID: CVE-2024-5969 State: PUBLISHED Published: 2024-07-27T07:33:46.658Z Last Updated: 2024-08-01T21:25:03.180Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: CodeRevolution Products: Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit Problem Types: CWE-20 Description: The AIomatic - Automatic AI Content Writer for WordPress is vulnerable to arbitrary email sending vulnerability in versions up to, and including, 2.0.5. This is due to insufficient limitations on the email recipient and the content in the 'aiomatic_send_email' function which are reachable via AJAX. This makes it possible for unauthenticated attacker
in the 'aiomatic_send_email' function which are reachable via AJAX. This makes it possible for unauthenticated attackers to send emails with any content to any recipient. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/be5be40f-89da-4b97-9a85-527602d84c4d?source=cve - https://codecanyon.net/item/aiomatic-automatic-ai-content-writer/38877369?srsltid=AfmBOornCSKshlaSyZi2nonTcpSskMpBNJpdAS_No91A5V5lTIAD1h8S
CVE ID: CVE-2024-5970 State: PUBLISHED Published: 2024-06-18T21:36:53.454Z Last Updated: 2024-08-01T21:25:03.180Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: maxfoundry Products: MaxGalleria Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The MaxGalleria plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's maxgallery_thumb shortcode in all versions up to, and including, 6.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above,
user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a0bb1036-3e45-4ac9-b920-3b9629a3a724?source=cve - https://plugins.trac.wordpress.org/browser/maxgalleria/tags/6.4.4/maxgalleria-shortcode-thumb.php#L45
CVE ID: CVE-2024-5971 State: PUBLISHED Published: 2024-07-08T20:51:29.223Z Last Updated: 2025-11-07T20:40:28.397Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat build of Apache Camel 3.20.7 for Spring Boot, Red Hat build of Apache Camel 4.4.1 for Spring Boot 3.2, Red Hat build of Apache Camel 4.4.2 for Spring Boot, Red Hat JBoss Enterprise Application Platform 7, Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8, Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9, Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7, Red Hat JBoss Enterprise Application Platform 8, Red Hat build of Apache Camel for Spring
ation Platform 7.4 on RHEL 7, Red Hat JBoss Enterprise Application Platform 8, Red Hat build of Apache Camel for Spring Boot 3, Red Hat build of Apache Camel - HawtIO 4, Red Hat Build of Keycloak, Red Hat build of Quarkus, Red Hat Data Grid 8, Red Hat Fuse 7, Red Hat Integration Camel K 1, Red Hat JBoss Data Grid 7, Red Hat JBoss Enterprise Application Platform Expansion Pack, Red Hat Process Automation 7, Red Hat Single Sign-On 7 Problem Types: CWE-674 Description: A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termin
nse headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource consumption, leaving the server side to a denial of service attack. This happens only with Java 17 TLSv1.3 scenarios. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:4392 - https://access.redhat.com/errata/RHSA-2024:4884 - https://access.redhat.com/errata/RHSA-2024:5143 - https://access.redhat.com/errata/RHSA-2024:5144 - https://access.redhat.com/errata/RHSA-2024:5145 - https://access.redhat.com/errata/RHSA-2024:5147 - htt
RHSA-2024:5144 - https://access.redhat.com/errata/RHSA-2024:5145 - https://access.redhat.com/errata/RHSA-2024:5147 - https://access.redhat.com/errata/RHSA-2024:6508 - https://access.redhat.com/errata/RHSA-2024:6883 - https://access.redhat.com/security/cve/CVE-2024-5971 - https://bugzilla.redhat.com/show_bug.cgi?id=2292211
CVE ID: CVE-2024-5972 State: REJECTED Published: N/A Last Updated: 2024-06-28T18:18:59.644Z Description: No description available.
CVE ID: CVE-2024-5973 State: PUBLISHED Published: 2024-07-22T06:00:05.733Z Last Updated: 2025-08-27T12:00:32.296Z Vendors: Unknown Products: MasterStudy LMS WordPress Plugin Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating instructor accounts, which could be used to get access to functionalities they shouldn't have. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/59abfb7c-d5ea-45f2-ab9a-4391978e3805/
CVE ID: CVE-2024-5974 State: PUBLISHED Published: 2024-07-09T02:24:47.924Z Last Updated: 2025-01-13T17:56:13.317Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: WatchGuard Products: Fireware OS Problem Types: CWE-120 Description: A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on the firewall. This issue affects Fireware OS: from 11.9.6 through 12.10.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00011
CVE ID: CVE-2024-5975 State: PUBLISHED Published: 2024-07-30T06:00:09.447Z Last Updated: 2024-08-01T21:25:03.152Z Vendors: Unknown Products: CZ Loan Management Problem Types: CWE-89 SQL Injection Description: The CZ Loan Management WordPress plugin through 1.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/68f81943-b007-49c8-be9c-d0405b2ba4cf/
CVE ID: CVE-2024-5976 State: PUBLISHED Published: 2024-06-13T21:00:04.725Z Last Updated: 2024-08-01T21:25:03.087Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Employee and Visitor Gate Pass Logging System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been classified as critical. Affected is the function log_employee of the file /classes/Master.php?f=log_employee. The manipulation of the argument employee_code leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-268422 is the ident
ble to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-268422 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.268422 - https://vuldb.com/?ctiid.268422 - https://vuldb.com/?submit.355692 - https://github.com/Xu-Mingming/cve/blob/main/sql.md
CVE ID: CVE-2024-5977 State: PUBLISHED Published: 2024-07-19T11:01:41.290Z Last Updated: 2024-08-01T21:25:03.226Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: webdevmattcrom Products: GiveWP – Donation Plugin and Fundraising Platform Problem Types: CWE-639 Description: The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.13.0 via the 'handleRequest' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with GiveWP Worker-level access and above, to delete and update arbitrary posts. Addit
ible for authenticated attackers, with GiveWP Worker-level access and above, to delete and update arbitrary posts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2dca6c29-9f05-4d82-90e3-834f1dd8005a?source=cve - https://plugins.trac.wordpress.org/browser/give/trunk/src/DonationForms/V2/Endpoints/FormActions.php#L96 - https://plugins.trac.wordpress.org/changeset/3120745/
CVE ID: CVE-2024-5979 State: PUBLISHED Published: 2024-06-27T18:40:07.230Z Last Updated: 2025-10-15T12:49:44.742Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: h2oai Products: h2oai/h2o-3 Problem Types: CWE-94 Description: In h2oai/h2o-3 version 3.46.0, the `run_tool` command in the `rapids` component allows the `main` function of any class under the `water.tools` namespace to be called. One such class, `MojoConvertTool`, crashes the server when invoked with an invalid argument, causing a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/d80a2139-fc03-44b7-b739-de41e323b458
ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/d80a2139-fc03-44b7-b739-de41e323b458 - https://github.com/h2oai/h2o-3/commit/d0899f8e0f7a584b60405a65b1d7b439aaaa55a5
CVE ID: CVE-2024-5980 State: PUBLISHED Published: 2024-06-27T18:46:39.213Z Last Updated: 2025-10-21T14:13:14.205Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: lightning-ai Products: lightning-ai/pytorch-lightning Problem Types: CWE-22 Description: A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local
path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/55a6ac6f-89c7-42ea-86f3-c6e93a2679f3 - https://github.com/lightning-ai/pytorch-lightning/commit/330af381de88cff17515418a341cbc1f9f127f9a
CVE ID: CVE-2024-5981 State: PUBLISHED Published: 2024-06-14T01:00:04.079Z Last Updated: 2024-08-01T21:25:03.202Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Online House Rental System Problem Types: CWE-89 Description: A vulnerability was found in itsourcecode Online House Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-268458 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vul
c and may be used. VDB-268458 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.268458 - https://vuldb.com/?ctiid.268458 - https://vuldb.com/?submit.356163 - https://github.com/LiuYongXiang-git/cve/issues/1
CVE ID: CVE-2024-5982 State: PUBLISHED Published: 2024-10-29T12:46:24.726Z Last Updated: 2024-10-29T13:47:03.458Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: gaizhenbiao Products: gaizhenbiao/chuanhuchatgpt Problem Types: CWE-22 Description: A path traversal vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability arises from unsanitized input handling in multiple features, including user upload, directory creation, and template loading. Specifically, the load_chat_history function in modules/models/base_model.py allows arbitrary file uploads, potentially leading to remote code execution (RCE). The get_history_names f
base_model.py allows arbitrary file uploads, potentially leading to remote code execution (RCE). The get_history_names function in utils.py permits arbitrary directory creation. Additionally, the load_template function in utils.py can be exploited to leak the first column of CSV files. These issues stem from improper sanitization of user inputs concatenated with directory paths using os.path.join. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/5d5c5356-e893-44d1-b5ca-642aa05d96bb - https://github.com/gaizhenbiao/chuanhuchatgpt/commit/952fc8c3cbacead858311747cddd4bedcb4721d7
CVE ID: CVE-2024-5983 State: PUBLISHED Published: 2024-06-14T01:31:04.083Z Last Updated: 2024-08-01T21:25:03.039Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Online Bookstore Problem Types: CWE-89 Description: A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file bookPerPub.php. The manipulation of the argument pubid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268459. Additional Analyst Notes: - CISA ADP Vul
and may be used. The associated identifier of this vulnerability is VDB-268459. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.268459 - https://vuldb.com/?ctiid.268459 - https://vuldb.com/?submit.356164 - https://github.com/LiuYongXiang-git/cve/issues/2