auren-research/cyber-sec huggingface dataset:
cveID: CVE-2018-0824
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability
dateAdded: 2024-08-05
shortDescription: Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-08-26
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-0824; https://nvd.nist.gov/vuln/detail/CVE-2018-0824
cwes: CWE-502
cveID: CVE-2024-37085
vendorProject: VMware
product: ESXi
vulnerabilityName: VMware ESXi Authentication Bypass Vulnerability
dateAdded: 2024-07-30
shortDescription: VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-08-20
knownRansomwareCampaignUse: Known
notes: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505; https://nvd.nist.gov/vuln/detail/CVE-2024-37085
cwes: CWE-305
cveID: CVE-2023-45249
vendorProject: Acronis
product: Cyber Infrastructure (ACI)
vulnerabilityName: Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability
dateAdded: 2024-07-29
shortDescription: Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-08-19
knownRansomwareCampaignUse: Unknown
notes: https://security-advisory.acronis.com/advisories/SEC-6452; https://nvd.nist.gov/vuln/detail/CVE-2023-45249
cwes: CWE-1393
cveID: CVE-2024-5217
vendorProject: ServiceNow
product: Utah, Vancouver, and Washington DC Now Platform
vulnerabilityName: ServiceNow Incomplete List of Disallowed Inputs Vulnerability
dateAdded: 2024-07-29
shortDescription: ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the GlideExpression script. An unauthenticated user could exploit this vulnerability to execute code remotely.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-08-19
knownRansomwareCampaignUse: Unknown
notes: https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1648313; https://nvd.nist.gov/vuln/detail/CVE-2024-5217
cwes: CWE-184
cveID: CVE-2024-4879
vendorProject: ServiceNow
product: Utah, Vancouver, and Washington DC Now Platform
vulnerabilityName: ServiceNow Improper Input Validation Vulnerability
dateAdded: 2024-07-29
shortDescription: ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely. 
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-08-19
knownRansomwareCampaignUse: Unknown
notes: https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154; https://nvd.nist.gov/vuln/detail/CVE-2024-4879
cwes: CWE-1287
cveID: CVE-2024-39891
vendorProject: Twilio
product: Authy
vulnerabilityName: Twilio Authy Information Disclosure Vulnerability
dateAdded: 2024-07-23
shortDescription: Twilio Authy contains an information disclosure vulnerability in its API that allows an unauthenticated endpoint to accept a request containing a phone number and respond with information about whether the phone number was registered with Authy.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-08-13
knownRansomwareCampaignUse: Unknown
notes: https://www.twilio.com/en-us/changelog/Security_Alert_Authy_App_Android_iOS; https://nvd.nist.gov/vuln/detail/CVE-2024-39891
cwes: CWE-203
cveID: CVE-2012-4792
vendorProject: Microsoft
product: Internet Explorer
vulnerabilityName: Microsoft Internet Explorer Use-After-Free Vulnerability
dateAdded: 2024-07-23
shortDescription: Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2024-08-13
knownRansomwareCampaignUse: Unknown
notes: https://learn.microsoft.com/en-us/lifecycle/products/internet-explorer-11; https://nvd.nist.gov/vuln/detail/CVE-2012-4792
cwes: CWE-416
cveID: CVE-2022-22948
vendorProject: VMware
product: vCenter Server
vulnerabilityName: VMware vCenter Server Incorrect Default File Permissions Vulnerability 
dateAdded: 2024-07-17
shortDescription: VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-08-07
knownRansomwareCampaignUse: Unknown
notes: https://www.vmware.com/security/advisories/VMSA-2022-0009.html; https://nvd.nist.gov/vuln/detail/CVE-2022-22948
cwes: CWE-276
cveID: CVE-2024-28995
vendorProject: SolarWinds
product: Serv-U
vulnerabilityName: SolarWinds Serv-U Path Traversal Vulnerability 
dateAdded: 2024-07-17
shortDescription: SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-08-07
knownRansomwareCampaignUse: Unknown
notes: https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28995; https://nvd.nist.gov/vuln/detail/CVE-2024-28995
cwes: CWE-22
cveID: CVE-2024-34102
vendorProject: Adobe
product: Commerce and Magento Open Source
vulnerabilityName: Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability
dateAdded: 2024-07-17
shortDescription: Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-08-07
knownRansomwareCampaignUse: Unknown
notes: https://helpx.adobe.com/security/products/magento/apsb24-40.html; https://nvd.nist.gov/vuln/detail/CVE-2024-34102
cwes: CWE-611
cveID: CVE-2024-36401
vendorProject: OSGeo
product: GeoServer
vulnerabilityName: OSGeo GeoServer GeoTools Eval Injection Vulnerability
dateAdded: 2024-07-15
shortDescription: OSGeo GeoServer GeoTools contains an improper neutralization of directives in dynamically evaluated code vulnerability due to unsafely evaluating property names as XPath expressions. This allows unauthenticated attackers to conduct remote code execution via specially crafted input.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-08-05
knownRansomwareCampaignUse: Unknown
notes: This vulnerability affects an open-source component, third-party library, or a protocol used by different products. For more information, please see: https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv, https://github.com/geotools/geotools/pull/4797 ; https://nvd.nist.gov/vuln/detail/CVE-2024-36401
cwes: CWE-95
cveID: CVE-2024-23692
vendorProject: Rejetto
product: HTTP File Server
vulnerabilityName: Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
dateAdded: 2024-07-09
shortDescription: Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-07-30
knownRansomwareCampaignUse: Unknown
notes: The patched Rejetto HTTP File Server (HFS) is version 3: https://github.com/rejetto/hfs?tab=readme-ov-file#installation, https://www.rejetto.com/hfs/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-23692
cwes: CWE-1336
cveID: CVE-2024-38080
vendorProject: Microsoft
product: Windows 
vulnerabilityName: Microsoft Windows Hyper-V Privilege Escalation Vulnerability
dateAdded: 2024-07-09
shortDescription: Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-07-30
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38080; https://nvd.nist.gov/vuln/detail/CVE-2024-38080
cwes: CWE-190
cveID: CVE-2024-38112
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows MSHTML Platform Spoofing Vulnerability
dateAdded: 2024-07-09
shortDescription: Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-07-30
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38112; https://nvd.nist.gov/vuln/detail/CVE-2024-38112
cwes: CWE-451
cveID: CVE-2024-20399
vendorProject: Cisco
product: NX-OS
vulnerabilityName: Cisco NX-OS Command Injection Vulnerability
dateAdded: 2024-07-02
shortDescription: Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an authenticated, local attacker to execute commands as root on the underlying operating system of an affected device.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-07-23
knownRansomwareCampaignUse: Unknown
notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmd-injection-xD9OhyOP; https://nvd.nist.gov/vuln/detail/CVE-2024-20399
cwes: CWE-78
cveID: CVE-2020-13965
vendorProject: Roundcube
product: Webmail
vulnerabilityName: Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
dateAdded: 2024-06-26
shortDescription: Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-07-17
knownRansomwareCampaignUse: Unknown
notes: https://roundcube.net/news/2020/06/02/security-updates-1.4.5-and-1.3.12; https://nvd.nist.gov/vuln/detail/CVE-2020-13965
cwes: CWE-80
cveID: CVE-2022-2586
vendorProject: Linux
product: Kernel
vulnerabilityName: Linux Kernel Use-After-Free Vulnerability
dateAdded: 2024-06-26
shortDescription: Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges. 
requiredAction: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
dueDate: 2024-07-17
knownRansomwareCampaignUse: Unknown
notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://seclists.org/oss-sec/2022/q3/131; https://nvd.nist.gov/vuln/detail/CVE-2022-2586
cwes: CWE-416
cveID: CVE-2022-24816
vendorProject: OSGeo
product: JAI-EXT
vulnerabilityName: OSGeo GeoServer JAI-EXT Code Injection Vulnerability
dateAdded: 2024-06-26
shortDescription: OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when programs use jt-jiffle and allow Jiffle script to be provided via network request, could allow remote code execution.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-07-17
knownRansomwareCampaignUse: Unknown
notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. The patched JAI-EXT is version 1.1.22: https://github.com/geosolutions-it/jai-ext/releases/tag/1.1.22, https://github.com/geosolutions-it/jai-ext/security/advisories/GHSA-v92f-jx6p-73rx; https://nvd.nist.gov/vuln/detail/CVE-2022-24816
cwes: CWE-94
cveID: CVE-2024-4358
vendorProject: Progress
product: Telerik Report Server
vulnerabilityName: Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability
dateAdded: 2024-06-13
shortDescription: Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized access.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-07-04
knownRansomwareCampaignUse: Unknown
notes: https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358; https://nvd.nist.gov/vuln/detail/CVE-2024-4358
cwes: CWE-290
cveID: CVE-2024-26169
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability
dateAdded: 2024-06-13
shortDescription: Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.
requiredAction: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
dueDate: 2024-07-04
knownRansomwareCampaignUse: Known
notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26169; https://nvd.nist.gov/vuln/detail/CVE-2024-26169
cwes: CWE-269
cveID: CVE-2024-32896
vendorProject: Android
product: Pixel
vulnerabilityName: Android Pixel Privilege Escalation Vulnerability
dateAdded: 2024-06-13
shortDescription: Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-07-04
knownRansomwareCampaignUse: Unknown
notes: https://source.android.com/docs/security/bulletin/pixel/2024-06-01; https://nvd.nist.gov/vuln/detail/CVE-2024-32896
cwes: CWE-783
cveID: CVE-2024-4577
vendorProject: PHP Group
product: PHP
vulnerabilityName: PHP-CGI OS Command Injection Vulnerability
dateAdded: 2024-06-12
shortDescription: PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code execution. This vulnerability is a patch bypass for CVE-2012-1823.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-07-03
knownRansomwareCampaignUse: Known
notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://www.php.net/ChangeLog-8.php#; https://nvd.nist.gov/vuln/detail/CVE-2024-4577
cwes: CWE-78
cveID: CVE-2024-4610
vendorProject: Arm
product: Mali GPU Kernel Driver
vulnerabilityName: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
dateAdded: 2024-06-12
shortDescription: Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-07-03
knownRansomwareCampaignUse: Unknown
notes: https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://nvd.nist.gov/vuln/detail/CVE-2024-4610
cwes: CWE-416
cveID: CVE-2017-3506
vendorProject: Oracle
product: WebLogic Server
vulnerabilityName: Oracle WebLogic Server OS Command Injection Vulnerability
dateAdded: 2024-06-03
shortDescription: Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker to execute arbitrary code via a specially crafted HTTP request that includes a malicious XML document.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-06-24
knownRansomwareCampaignUse: Unknown
notes: https://www.oracle.com/security-alerts/cpuapr2017.html; https://nvd.nist.gov/vuln/detail/CVE-2017-3506
cwes: CWE-78
cveID: CVE-2024-1086
vendorProject: Linux
product: Kernel
vulnerabilityName: Linux Kernel Use-After-Free Vulnerability
dateAdded: 2024-05-30
shortDescription: Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-06-20
knownRansomwareCampaignUse: Known
notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f342de4e2f33e0e39165d8639387aa6c19dff660; https://nvd.nist.gov/vuln/detail/CVE-2024-1086
cwes: CWE-416
cveID: CVE-2024-24919
vendorProject: Check Point
product: Quantum Security Gateways
vulnerabilityName: Check Point Quantum Security Gateways Information Disclosure Vulnerability
dateAdded: 2024-05-30
shortDescription: Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-06-20
knownRansomwareCampaignUse: Known
notes: https://support.checkpoint.com/results/sk/sk182336 ; https://nvd.nist.gov/vuln/detail/CVE-2024-24919
cwes: CWE-200
cveID: CVE-2024-4978
vendorProject: Justice AV Solutions
product: Viewer 
vulnerabilityName: Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability
dateAdded: 2024-05-29
shortDescription: Justice AV Solutions (JAVS) Viewer installer contains a malicious version of ffmpeg.exe, named fffmpeg.exe (SHA256: 421a4ad2615941b177b6ec4ab5e239c14e62af2ab07c6df1741e2a62223223c4). When run, this creates a backdoor connection to a malicious C2 server.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-06-19
knownRansomwareCampaignUse: Unknown
notes: Please follow the vendor’s instructions as outlined in the public statements at https://www.rapid7.com/blog/post/2024/05/23/cve-2024-4978-backdoored-justice-av-solutions-viewer-software-used-in-apparent-supply-chain-attack#remediation and https://www.javs.com/downloads; https://nvd.nist.gov/vuln/detail/CVE-2024-4978
cwes: CWE-506
cveID: CVE-2024-5274
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Type Confusion Vulnerability
dateAdded: 2024-05-28
shortDescription: Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-06-18
knownRansomwareCampaignUse: Unknown
notes: https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_23.html?m=1; https://nvd.nist.gov/vuln/detail/CVE-2024-5274
cwes: CWE-843
cveID: CVE-2020-17519
vendorProject: Apache
product: Flink
vulnerabilityName: Apache Flink Improper Access Control Vulnerability
dateAdded: 2024-05-23
shortDescription: Apache Flink contains an improper access control vulnerability that allows an attacker to read any file on the local filesystem of the JobManager through its REST interface.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-06-13
knownRansomwareCampaignUse: Unknown
notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://lists.apache.org/thread/typ0h03zyfrzjqlnb7plh64df1g2383d; https://nvd.nist.gov/vuln/detail/CVE-2020-17519
cwes: CWE-552
cveID: CVE-2024-4947
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Type Confusion Vulnerability
dateAdded: 2024-05-20
shortDescription: Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-06-10
knownRansomwareCampaignUse: Unknown
notes: https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html; https://nvd.nist.gov/vuln/detail/CVE-2024-4947
cwes: CWE-843
cveID: CVE-2023-43208
vendorProject: NextGen Healthcare
product: Mirth Connect
vulnerabilityName: NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability
dateAdded: 2024-05-20
shortDescription: NextGen Healthcare Mirth Connect contains a deserialization of untrusted data vulnerability that allows for unauthenticated remote code execution via a specially crafted request.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2024-06-10
knownRansomwareCampaignUse: Known
notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://github.com/nextgenhealthcare/connect/wiki/4.4.1---What%27s-New ; https://nvd.nist.gov/vuln/detail/CVE-2023-43208
cwes: CWE-502