Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-5803 State: PUBLISHED Published: 2024-10-03T14:20:01.775Z Last Updated: 2024-10-03T15:38:40.784Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: AVG/Avast Products: Antivirus Problem Types: CWE-367 Description: The AVGUI.exe of AVG/Avast Antivirus before versions before 24.1 can allow a local attacker to escalate privileges via an COM hijack in a time-of-check to time-of-use (TOCTOU) when self protection is disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.norton.com/sp/static/external/tools/security-advisories.html
CVE ID: CVE-2024-5804 State: PUBLISHED Published: 2024-07-20T02:02:15.719Z Last Updated: 2024-08-01T21:25:02.621Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: jules-colle Products: Conditional Fields for Contact Form 7 Problem Types: CWE-352 Description: The Conditional Fields for Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.13. This is due to missing or incorrect nonce validation on the wpcf7cf_admin_init function. This makes it possible for unauthenticated attackers to reset the plugin's settings via a forged request granted they can trick a site administrator into performing an ac
rs to reset the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/827c5dc2-3195-47d9-9e44-ca2043748eed?source=cve - https://plugins.trac.wordpress.org/browser/cf7-conditional-fields/trunk/wpcf7cf-options.php#L285 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3121497%40cf7-conditional-fields&new=3121497%40cf7-conditional-fields&sfp_email=&sfph_mail=
CVE ID: CVE-2024-5805 State: PUBLISHED Published: 2024-06-25T15:03:03.608Z Last Updated: 2024-08-01T21:25:02.672Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Progress Products: MOVEit Gateway Problem Types: CWE-287 Description: Improper Authentication vulnerability in Progress MOVEit Gateway (SFTP modules) allows Authentication Bypass.This issue affects MOVEit Gateway: 2024.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.progress.com/moveit - https://community.progress.com/s/article/MOVEit-Gateway-Critical-Security-Alert-Bulletin-June-2024-CVE-2024-5805
CVE ID: CVE-2024-5806 State: PUBLISHED Published: 2024-06-25T15:04:37.342Z Last Updated: 2024-08-01T21:25:02.659Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Progress Products: MOVEit Transfer Problem Types: CWE-287 Description: Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 2024.0.0 before 2024.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.progress.com/moveit - https://community.progress.com/s/article/MOVEit-Transfer-Produc
ntainer: References: - https://www.progress.com/moveit - https://community.progress.com/s/article/MOVEit-Transfer-Product-Security-Alert-Bulletin-June-2024-CVE-2024-5806
CVE ID: CVE-2024-5807 State: PUBLISHED Published: 2024-07-30T06:00:08.495Z Last Updated: 2024-08-01T21:25:02.833Z Vendors: Unknown Products: Business Card Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from uploading malicious PHP files, which could allow them to run arbitrary code on servers hosting their site, even in MultiSite configurations. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/badb16b5-8c06-4170-b605-ea7af8982c1f/
CVE ID: CVE-2024-5808 State: PUBLISHED Published: 2024-07-30T06:00:08.895Z Last Updated: 2024-08-01T21:25:02.970Z Vendors: Unknown Products: WP Ajax Contact Form Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The WP Ajax Contact Form WordPress plugin through 2.2.2 does not have CSRF check in place when deleting emails from the email list, which could allow attackers to make a logged in admin perform such action via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/1783bbce-3cc3-4a7e-a491-b713cee8278b/
CVE ID: CVE-2024-5809 State: PUBLISHED Published: 2024-07-30T06:00:09.175Z Last Updated: 2024-08-01T21:25:02.945Z Vendors: Unknown Products: WP Ajax Contact Form Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Ajax Contact Form WordPress plugin through 2.2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against admin users Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/0af9fbcf-5f0e-4f7f-ae60-b46e704cf0a5/
CVE ID: CVE-2024-5810 State: PUBLISHED Published: 2024-07-09T08:33:03.671Z Last Updated: 2024-08-01T21:25:02.726Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: wp2speed Products: WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 Problem Types: CWE-798 Use of Hard-coded Credentials Description: The WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.1. This is due to the use of hardcoded credentials to authenticate all the incoming API requests. This makes it possible for unauthenticated attackers to overwrite CSS, update the trial settings, p
coming API requests. This makes it possible for unauthenticated attackers to overwrite CSS, update the trial settings, purge the cache, and find attachments. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1fe97ac1-cab9-4b6f-bddd-bdcdc9faee40?source=cve - https://plugins.trac.wordpress.org/browser/wp2speed/trunk/lib/includes/optimize.php#L71 - https://plugins.trac.wordpress.org/browser/wp2speed/trunk/lib/includes/optimize.php#L263 - https://plugins.trac.wordpress.org/browser/wp2speed/trunk/lib/includes/optimize.php#L372 - https://plugins.trac.wordpress.org/browser/wp2speed/trunk/lib/includes/o
wp2speed/trunk/lib/includes/optimize.php#L372 - https://plugins.trac.wordpress.org/browser/wp2speed/trunk/lib/includes/optimize.php#L152 - https://plugins.trac.wordpress.org/browser/wp2speed/trunk/lib/includes/optimize.php#L165
CVE ID: CVE-2024-5811 State: PUBLISHED Published: 2024-07-12T06:00:06.332Z Last Updated: 2024-08-01T21:25:02.669Z Vendors: Unknown Products: Simple Video Directory Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Simple Video Directory WordPress plugin before 1.4.4 does not sanitise and escape some of its settings, which could allow contributors and higher to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/bf6c2e28-51ef-443b-b1c2-d555c7e12f7f/
CVE ID: CVE-2024-5812 State: PUBLISHED Published: 2024-06-11T15:41:13.496Z Last Updated: 2024-08-01T21:25:02.748Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: BeyondTrust Products: BeyondInsight PasswordSafe Problem Types: CWE-290 Description: A low severity vulnerability in BIPS has been identified where an attacker with high privileges or a compromised high privilege account can overwrite Read-Only smart rules via a specially crafted API request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.beyondtrust.com/trust-center/security-advisories/bt24-07
CVE ID: CVE-2024-5813 State: PUBLISHED Published: 2024-06-11T15:34:57.818Z Last Updated: 2024-08-01T21:25:02.822Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: BeyondTrust Products: BeyondInsight PasswordSafe Problem Types: CWE-200 Description: A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.beyondtrust.com/trust-center/security-advisories/bt24-08
CVE ID: CVE-2024-5814 State: PUBLISHED Published: 2024-08-27T18:38:08.974Z Last Updated: 2024-08-27T19:21:04.561Z Vendors: wolfSSL Products: wolfSSL Description: A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello. https://doi.org/10.46586/tches.v2024.i1.457-500 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wolfSSL/wolfssl/blob/master/ChangeLog.md#add_later
CVE ID: CVE-2024-5815 State: PUBLISHED Published: 2024-07-16T21:26:57.404Z Last Updated: 2024-08-01T21:25:02.739Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-352 Description: A Cross-Site Request Forgery vulnerability in GitHub Enterprise Server allowed write operations on a victim-owned repository by exploiting incorrect request types. A mitigating factor is that the attacker would have to be a trusted GitHub Enterprise Server user, and the victim would have to visit a tag in the attacker's fork of their own repository. vulnerability affected all versions of GitHub Enterprise Server prior 3.14 and was fixed in version 3.13.1, 3.12.6, 3.11.12, 3.10.14, and 3.9.17. T
versions of GitHub Enterprise Server prior 3.14 and was fixed in version 3.13.1, 3.12.6, 3.11.12, 3.10.14, and 3.9.17. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.9.17 - https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.10.14 - https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.11.12 - https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.12.6 - https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.1
CVE ID: CVE-2024-5816 State: PUBLISHED Published: 2024-07-16T21:27:00.491Z Last Updated: 2024-08-01T21:25:02.923Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-863 Description: An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed a suspended GitHub App to retain access to the repository via a scoped user access token. This was only exploitable in public repositories while private repositories were not impacted. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in versions 3.9.17, 3.10.14, 3.11.12, 3.12.6, 3.13.1. This vulnerability was reported via the GitHub Bug Bounty program.
in versions 3.9.17, 3.10.14, 3.11.12, 3.12.6, 3.13.1. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.15 - https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.12 - https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.6 - https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.1 - https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.9.17 - https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.17
CVE ID: CVE-2024-5817 State: PUBLISHED Published: 2024-07-16T21:27:03.820Z Last Updated: 2024-08-01T21:25:02.832Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-863 Description: An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed read access to issue content via GitHub Projects. This was only exploitable in internal repositories and required the attacker to have access to the corresponding project board. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in versions 3.13.1, 3.12.6, 3.11.12, 3.10.14, and 3.9.17. This vulnerability was reported via the GitHub Bug Bounty program. Ad
ions 3.13.1, 3.12.6, 3.11.12, 3.10.14, and 3.9.17. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.15 - https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.12 - https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.6 - https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.1 - https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.17
CVE ID: CVE-2024-5818 State: PUBLISHED Published: 2024-07-24T12:43:44.591Z Last Updated: 2024-08-01T21:25:03.247Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wproyal Products: Royal Elementor Addons and Templates Problem Types: CWE-79 Description: The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored DOM-based Cross-Site Scripting via the plugin's Magazine Grid/Slider widget in all versions up to, and including, 1.3.980 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web s
. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/83a0150d-a9fa-4cc2-8fe8-a429747a9964?source=cve - https://plugins.trac.wordpress.org/changeset/3121073/royal-elementor-addons
CVE ID: CVE-2024-5819 State: PUBLISHED Published: 2024-06-29T09:46:42.628Z Last Updated: 2024-08-01T21:25:02.952Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: britner Products: Gutenberg Blocks with AI by Kadence WP – Page Builder Features Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to DOM-based Stored Cross-Site Scripting via HTML data attributes in all versions up to, and including, 3.2.45 due to insufficient input sanitization and output escaping on user supplied attributes. Th
up to, and including, 3.2.45 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c7457ce7-8471-415d-8e34-4505aa34fd61?source=cve - https://plugins.trac.wordpress.org/changeset/3108332/kadence-blocks
CVE ID: CVE-2024-5820 State: PUBLISHED Published: 2024-06-27T18:40:57.321Z Last Updated: 2024-08-01T21:25:02.832Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L) Vendors: stitionai Products: stitionai/devika Problem Types: CWE-862 Description: An unprotected WebSocket connection in the latest version of stitionai/devika (commit ecee79f) allows a malicious website to connect to the backend and issue commands on behalf of the user. The backend serves all listeners on the given socket, enabling any such malicious website to intercept all communication between the user and the backend. This vulnerability can lead to unauthorized command execution and potential server-side
tween the user and the backend. This vulnerability can lead to unauthorized command execution and potential server-side request forgery. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/2ba757bf-8ede-445b-b143-2de7769758a6
CVE ID: CVE-2024-5821 State: PUBLISHED Published: 2024-07-03T17:45:24.566Z Last Updated: 2025-10-15T12:49:44.102Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: stitionai Products: stitionai/devika Problem Types: CWE-22 Description: The vulnerability allows an attacker to access sensitive files on the server by confusing the agent with incorrect file names. When a user requests the content of a file with a misspelled name, the agent attempts to correct the command and inadvertently reveals the content of the intended file, such as /etc/passwd. This can lead to unauthorized access to sensitive information and potential server compromise. Additional Analyst N
swd. This can lead to unauthorized access to sensitive information and potential server compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/6b729046-b9e1-4fa2-a0c5-603745a6db6b
CVE ID: CVE-2024-5822 State: PUBLISHED Published: 2024-06-27T18:44:48.521Z Last Updated: 2024-08-01T21:25:02.741Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: gaizhenbiao Products: gaizhenbiao/chuanhuchatgpt Problem Types: CWE-918 Description: A Server-Side Request Forgery (SSRF) vulnerability exists in the upload processing interface of gaizhenbiao/ChuanhuChatGPT versions <= ChuanhuChatGPT-20240410-git.zip. This vulnerability allows attackers to send crafted requests from the vulnerable server to internal or external resources, potentially bypassing security controls and accessing sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pro
y bypassing security controls and accessing sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/b24f1b5f-a529-435b-ac4d-5ca71d5d1fb5
CVE ID: CVE-2024-5823 State: PUBLISHED Published: 2024-10-29T12:48:49.071Z Last Updated: 2024-10-29T13:27:21.197Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: gaizhenbiao Products: gaizhenbiao/chuanhuchatgpt Problem Types: CWE-73 Description: A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions <= 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. Exploiting this vulnerability can lead to unauthorized changes in system behavior or security settings. Additionally, tampering with these configuration files can result in a denial of service (DoS) cond
r security settings. Additionally, tampering with these configuration files can result in a denial of service (DoS) condition, disrupting normal system operation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/ca361701-7d68-4df6-8da0-caad4b85b9ae - https://github.com/gaizhenbiao/chuanhuchatgpt/commit/720c23d755a4a955dcb0a54e8c200a2247a27f8b
CVE ID: CVE-2024-5824 State: PUBLISHED Published: 2024-06-27T18:45:26.668Z Last Updated: 2024-08-01T21:25:03.266Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: parisneo Products: parisneo/lollms Problem Types: CWE-22 Description: A path traversal vulnerability in the `/set_personality_config` endpoint of parisneo/lollms version 9.4.0 allows an attacker to overwrite the `configs/config.yaml` file. This can lead to remote code execution by changing server configuration properties such as `force_accept_remote_access` and `turn_on_code_validation`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bountie
on`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/9ceb7cf9-a7cd-4699-b3f8-d0999d2b49fd - https://github.com/parisneo/lollms/commit/eda3af5f5c4ea9b2f3569f72f8d05989e29367fc
CVE ID: CVE-2024-5825 State: REJECTED Published: N/A Last Updated: 2024-06-11T09:42:56.149Z Description: No description available.
CVE ID: CVE-2024-5826 State: PUBLISHED Published: 2024-06-27T18:40:37.441Z Last Updated: 2025-10-15T12:50:29.876Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: vanna-ai Products: vanna-ai/vanna Problem Types: CWE-94 Description: In the latest version of vanna-ai/vanna, the `vanna.ask` function is vulnerable to remote code execution due to prompt injection. The root cause is the lack of a sandbox when executing LLM-generated code, allowing an attacker to manipulate the code executed by the `exec` function in `src/vanna/base/base.py`. This vulnerability can be exploited by an attacker to achieve remote code execution on the app backend server, potentially
s vulnerability can be exploited by an attacker to achieve remote code execution on the app backend server, potentially gaining full control of the server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/90620087-44ac-4e43-b659-3c5d30889369
CVE ID: CVE-2024-5827 State: PUBLISHED Published: 2024-06-28T19:27:33.049Z Last Updated: 2025-10-15T12:50:30.543Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: vanna-ai Products: vanna-ai/vanna Problem Types: CWE-89 Description: Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs. Attackers can inject malicious SQL training data and generate corresponding queries to write arbitrary files on the victim's file system, such as backdoor.php with contents `<?php system($_GET[0]); ?>`. This can lead to command execution or the creation of backdoors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program
lead to command execution or the creation of backdoors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/e4e64a51-618b-41d0-8f56-1d2146d8825e
CVE ID: CVE-2024-5828 State: PUBLISHED Published: 2024-08-06T02:21:38.553Z Last Updated: 2024-08-06T15:40:42.761Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Hitachi Products: Hitachi Tuning Manager Problem Types: CWE-917 Description: Expression Language Injection vulnerability in Hitachi Tuning Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitachi Tuning Manager: before 8.8.7-00. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-140/index.html
CVE ID: CVE-2024-5829 State: PUBLISHED Published: 2024-06-11T10:31:13.374Z Last Updated: 2024-08-01T21:25:03.150Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: smallweigit Products: Avue Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in smallweigit Avue up to 3.4.4. Affected by this vulnerability is an unknown functionality of the component avueUeditor. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-267895. NOTE: The code maintainer explains, that "rich text is no longer maintained". Add