deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-8975
Published: 2024-09-25
Description: Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM
This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-rc.1.
CVSS Score: 7.3 (HIGH)
CWE: CWE-428, CWE-428
References: https://github.com/grafana/alloy/releases/tag/v1.3.4; https://github.com/grafana/alloy/releases/tag/v1.4.1; https://grafana.com/blog/2024/09/25/grafana-alloy-and-grafana-agent-flow-security-release-high-severity-fix-for-cve-2024-8975-and-cve-2024-8996/
CVE: CVE-2024-8996
Published: 2024-09-25
Description: Unquoted Search Path or Element vulnerability in Grafana Agent (Flow mode) on Windows allows Privilege Escalation from Local User to SYSTEM
This issue affects Agent Flow: before 0.43.2
CVSS Score: 7.3 (HIGH)
CWE: CWE-428, CWE-428
References: https://github.com/grafana/agent/releases/tag/v0.43.3; https://grafana.com/blog/2024/09/25/grafana-alloy-and-grafana-agent-flow-security-release-high-severity-fix-for-cve-2024-8975-and-cve-2024-8996/; https://grafana.com/security/security-advisories/cve-2024-8996/
CVE: CVE-2024-45750
Published: 2024-09-25
Description: An issue in TheGreenBow Windows Standard VPN Client 6.87.108 (and older), Windows Enterprise VPN Client 6.87.109 (and older), Windows Enterprise VPN Client 7.5.007 (and older), Android VPN Client 6.4.5 (and older) VPN Client Linux 3.4 (and older), VPN Client MacOS 2.4.10 (and older) allows a remote attacker to execute arbitrary code via the IKEv2 Authentication phase, it accepts malformed ECDSA signatures and establishes the tunnel.
CVSS Score: 7.3 (HIGH)
CWE: CWE-287
References: https://thegreenbow.com; https://www.thegreenbow.com/en/support/security-alerts/#deeplink-17024
CVE: CVE-2024-46488
Published: 2024-09-25
Description: sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npy_token_next function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-122
References: https://github.com/VulnSphere/LLMVulnSphere/blob/main/VectorDB/sqlite-vec/OOBR_2.md
CVE: CVE-2024-46489
Published: 2024-09-25
Description: A remote command execution (RCE) vulnerability in promptr v6.0.7 allows attackers to execute arbitrary commands via a crafted URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://github.com/VulnSphere/LLMVulnSphere/blob/main/Prompt/promptr/RCE_FC_6.0.7.md
CVE: CVE-2024-46655
Published: 2024-09-25
Description: A reflected cross-site scripting (XSS) vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload or URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://csflabs.github.io/cve/2024/09/24/cve-2024-46655-Cross-Site-Scripting-%28XSS%29-%28Reflected%29-in-Ellevo-application.html; https://ellevo.com/
CVE: CVE-2024-47082
Published: 2024-09-25
Description: Strawberry GraphQL is a library for creating GraphQL APIs. Prior to version 0.243.0, multipart file upload support as defined in the GraphQL multipart request specification was enabled by default in all Strawberry HTTP view integrations. This made all Strawberry HTTP view integrations vulnerable to cross-site request forgery (CSRF) attacks if users did not explicitly enable CSRF preventing security mechanism for their servers. Additionally, the Django HTTP view integration, in particular, had an exemption for Django's built-in CSRF protection (i.e., the `CsrfViewMiddleware` middleware) by default. In affect, all Strawberry integrations were vulnerable to CSRF attacks by default. Version `v0.243.0` is the first `strawberry-graphql` including a patch.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-352
References: https://github.com/strawberry-graphql/strawberry/commit/37265b230e511480a9ceace492f9f6a484be1387; https://github.com/strawberry-graphql/strawberry/security/advisories/GHSA-79gp-q4wv-33fr; https://strawberry.rocks/docs/breaking-changes/0.243.0
CVE: CVE-2024-47305
Published: 2024-09-25
Description: Cross-Site Request Forgery (CSRF) vulnerability in Dnesscarkey Use Any Font use-any-font allows Cross Site Request Forgery.This issue affects Use Any Font: from n/a through <= 6.3.08.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/use-any-font/vulnerability/wordpress-use-any-font-plugin-6-3-08-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2024-47315
Published: 2024-09-25
Description: Cross-Site Request Forgery (CSRF) vulnerability in StellarWP GiveWP give.This issue affects GiveWP: from n/a through <= 3.15.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/give/vulnerability/wordpress-givewp-donation-plugin-and-fundraising-platform-plugin-3-15-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-51157
Published: 2024-09-25
Description: Cross Site Scripting vulnerability in ZKTeco WDMS v.5.1.3 Pro allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the Emp Name parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://infosecwriteups.com/xss-store-in-zkteco-welcome-to-wdms-3d5c8e1113f0
CVE: CVE-2024-47083
Published: 2024-09-25
Description: Power Platform Terraform Provider allows managing environments and other resources within Power Platform. Versions prior to 3.0.0 have an issue in the Power Platform Terraform Provider where sensitive information, specifically the `client_secret` used in the service principal authentication, may be exposed in logs. This exposure occurs due to an error in the logging code that causes the `client_secret` to not be properly masked when logs are persisted or viewed. Users should upgrade to version 3.0.0 to receive a patched version of the provider that removes all logging of sensitive content. Users who have used this provider with the affected versions should take the following additional steps to mitigate the risk: Immediately rotate the `client_secret` for any service principal that has been configured using this Terraform provider. This will invalidate any potentially exposed secrets. Those who have set the `TF_LOG_PATH` environment variable or configured Terraform to persist logs to a file or an external system, consider disabling this until they have updated to a fixed version of the provider. Those who have existing logs that may contain the `client_secret` should remove or sanitize these logs to prevent unauthorized access. This includes logs on disk, in monitoring systems, or in logging services.
CVSS Score: 7.5 (HIGH)
CWE: CWE-117, CWE-532, CWE-532
References: https://github.com/microsoft/terraform-provider-power-platform/releases/tag/v3.0.0; https://github.com/microsoft/terraform-provider-power-platform/security/advisories/GHSA-7w3w-pjm5-m36c; https://registry.terraform.io/providers/microsoft/power-platform/latest/docs#authenticating-to-power-platform-using-a-service-principal-with-oidc
CVE: CVE-2024-8404
Published: 2024-09-26
Description: An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must first obtain local login access to the Windows Server hosting PaperCut NG/MF and be capable of executing low-privilege code directly on the server via the web-print-hot-folder. 

Important: In most installations, this risk is mitigated by the default Windows Server configuration, which restricts local login access to Administrators only. However, this vulnerability could pose a risk to customers who allow non-administrative users to log into the local console of the Windows environment hosting the PaperCut NG/MF application server.

Update:

This CVE has been updated in May 2025 to update the fixed version and fix process. Please refer to the May 2025 Security Bulletin.

Note: 

This CVE has been split from CVE-2024-3037.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59, CWE-59
References: https://www.papercut.com/kb/Main/Security-Bulletin-May-2024/; https://www.papercut.com/kb/Main/Security-Bulletin-May-2025/
CVE: CVE-2024-8405
Published: 2024-09-26
Description: An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the web-print.exe process, which can incorrectly create files that don’t exist when a maliciously formed payload is provided. This can be used to flood disk space and result in a Denial of Service (DoS) attack.

Note: 

This CVE has been split from CVE-2024-4712.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-77, CWE-77
References: https://www.papercut.com/kb/Main/Security-Bulletin-May-2024/
CVE: CVE-2024-47330
Published: 2024-09-26
Description: Missing Authorization vulnerability in Supsystic Slider by Supsystic, Supsystic Social Share Buttons by Supsystic.This issue affects Slider by Supsystic: from n/a through 1.8.6; Social Share Buttons by Supsystic: from n/a through 2.2.9.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/slider-by-supsystic/wordpress-slider-by-supsystic-plugin-1-8-6-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/social-share-buttons-by-supsystic/wordpress-social-share-buttons-by-supsystic-plugin-2-2-9-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-8552
Published: 2024-09-26
Description: The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enable_shop() function in all versions up to, and including, 5.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to enable shop functionality.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/download-monitor/tags/5.0.8/src/AjaxHandler.php#L317; https://plugins.trac.wordpress.org/changeset/3157424/#file17; https://www.wordfence.com/threat-intel/vulnerabilities/id/3acaedff-f616-4b66-9208-f7e6a4df920d?source=cve
CVE: CVE-2024-8723
Published: 2024-09-26
Description: The 012 Ps Multi Languages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via translated titles in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.svn.wordpress.org/012-ps-multi-languages/trunk/includes/ps-multilingual-edit-post.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/30a1517e-5ea5-47a1-afe8-9543e1ffd199?source=cve
CVE: CVE-2024-8803
Published: 2024-09-26
Description: The Bulk NoIndex & NoFollow Toolkit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.15. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/bulk-noindex-nofollow-toolkit-by-mad-fish/trunk/inc/bulk-noindex-toolkit-class.php?rev=3047303#L452; https://plugins.trac.wordpress.org/changeset/3157176/; https://www.wordfence.com/threat-intel/vulnerabilities/id/d6e1cc0d-2c5f-4e34-bd19-d7c90cd4dff6?source=cve
CVE: CVE-2022-49037
Published: 2024-09-26
Description: Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client before 3.3.0-15082 allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532
References: https://www.synology.com/en-global/security/advisory/Synology_SA_24_10
CVE: CVE-2022-49038
Published: 2024-09-26
Description: Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client before 3.3.0-15082 allows local users to execute arbitrary code via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-829
References: https://www.synology.com/en-global/security/advisory/Synology_SA_24_10
CVE: CVE-2022-49039
Published: 2024-09-26
Description: Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to execute arbitrary commands via unspecified vectors.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.synology.com/en-global/security/advisory/Synology_SA_24_10
CVE: CVE-2022-49040
Published: 2024-09-26
Description: Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to crash the client via unspecified vectors.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-120
References: https://www.synology.com/en-global/security/advisory/Synology_SA_24_10
CVE: CVE-2022-49041
Published: 2024-09-26
Description: Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to crash the client via unspecified vectors.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-120
References: https://www.synology.com/en-global/security/advisory/Synology_SA_24_10
CVE: CVE-2023-52946
Published: 2024-09-26
Description: Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss service component in Synology Drive Client before 3.5.0-16084 allows remote attackers to overwrite trivial buffers and crash the client via unspecified vectors.
CVSS Score: 8.2 (HIGH)
CWE: CWE-120, CWE-120
References: https://www.synology.com/en-global/security/advisory/Synology_SA_24_10
CVE: CVE-2023-52947
Published: 2024-09-26
Description: Missing authentication for critical function vulnerability in logout functionality in Synology Active Backup for Business Agent before 2.6.3-3101 allows local users to logout the client via unspecified vectors. The backup functionality will continue to operate and will not be affected by the logout.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-306
References: https://www.synology.com/en-global/security/advisory/Synology_SA_24_11
CVE: CVE-2023-52948
Published: 2024-09-26
Description: Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-311, CWE-311
References: https://www.synology.com/en-global/security/advisory/Synology_SA_24_11
CVE: CVE-2023-52949
Published: 2024-09-26
Description: Missing authentication for critical function vulnerability in proxy settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-306
References: https://www.synology.com/en-global/security/advisory/Synology_SA_24_11
CVE: CVE-2023-52950
Published: 2024-09-26
Description: Missing encryption of sensitive data vulnerability in login component in Synology Active Backup for Business Agent before 2.7.0-3221 allows adjacent man-in-the-middle attackers to obtain user credential via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-311, CWE-311
References: https://www.synology.com/en-global/security/advisory/Synology_SA_24_11
CVE: CVE-2024-47045
Published: 2024-09-26
Description: Privilege chaining issue exists in the installer of e-Tax software(common program). If this vulnerability is exploited, a malicious DLL prepared by an attacker may be executed with higher privileges than the application privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-268
References: https://jvn.jp/en/jp/JVN57749899/; https://www.e-tax.nta.go.jp/topics/2024/topics_20240924_versionup.htm
CVE: CVE-2024-45372
Published: 2024-09-26
Description: MZK-DP300N firmware versions 1.04 and earlier contains a cross-site request forger vulnerability. Viewing a malicious page while logging in to the web management page of the affected product may lead the user to perform unintended operations such as changing the login password, etc.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://jvn.jp/en/jp/JVN81966868/; https://www.planex.co.jp/support/download/mzk-dp300n/
CVE: CVE-2024-45836
Published: 2024-09-26
Description: Cross-site scripting vulnerability exists in the web management page of PLANEX COMMUNICATIONS network cameras. If a logged-in user accesses a specific file, an arbitrary script may be executed on the web browser of the user.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://jvn.jp/en/jp/JVN81966868/
CVE: CVE-2024-7772
Published: 2024-09-26
Description: The Jupiter X Core plugin for WordPress is vulnerable to arbitrary file uploads due to a mishandled file type validation in the 'validate' function in all versions up to, and including, 4.6.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://plugins.trac.wordpress.org/browser/jupiterx-core/trunk/includes/extensions/raven/includes/modules/forms/classes/ajax-handler.php; https://plugins.trac.wordpress.org/changeset/3139412/; https://www.wordfence.com/threat-intel/vulnerabilities/id/5b546d24-82c1-4598-8926-6e73a4784b38?source=cve
CVE: CVE-2024-7781
Published: 2024-09-26
Description: The Jupiter X Core plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.7.5. This is due to improper authentication via the Social Login widget. This makes it possible for unauthenticated attackers to log in as the first user to have logged in with a social media account, including administrator accounts. Attackers can exploit the vulnerability even if the Social Login element has been disabled, as long as it was previously enabled and used. The vulnerability was partially patched in version 4.7.5, and fully patched in version 4.7.8.
CVSS Score: 8.1 (HIGH)
CWE: CWE-288, CWE-306
References: https://plugins.trac.wordpress.org/browser/jupiterx-core/trunk/includes/extensions/raven/includes/modules/forms/classes/social-login-handler/facebook.php; https://plugins.trac.wordpress.org/browser/jupiterx-core/trunk/includes/extensions/raven/includes/modules/forms/classes/social-login-handler/google.php; https://plugins.trac.wordpress.org/changeset/3153667/
CVE: CVE-2024-0132
Published: 2024-09-26
Description: NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-367, CWE-367
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5582
CVE: CVE-2024-0133
Published: 2024-09-26
Description: NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to data tampering.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5582
CVE: CVE-2024-6517
Published: 2024-09-26
Description: The Contact Form 7 Math Captcha WordPress plugin through 2.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d04bab9c-7cb4-4d21-b70b-a4a7fabc3c20/
CVE: CVE-2024-4278
Published: 2024-09-26
Description: An information disclosure issue has been discovered in GitLab EE affecting all versions starting from 16.5 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. A maintainer could obtain a Dependency Proxy password by editing a certain Dependency Proxy setting.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-821
References: https://gitlab.com/gitlab-org/gitlab/-/issues/458484; https://hackerone.com/reports/2466205
CVE: CVE-2024-42406
Published: 2024-09-26
Description: Mattermost versions 9.11.x <= 9.11.0, 9.10.x <= 9.10.1, 9.9.x <= 9.9.2 and 9.5.x <= 9.5.8 fail to properly authorize requests when viewing archived channels is disabled, which allows an attacker to retrieve post and file information about archived channels. Examples are flagged or unread posts as well as files.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-284
References: https://mattermost.com/security-updates
CVE: CVE-2024-45843
Published: 2024-09-26
Description: Mattermost versions 9.5.x <= 9.5.8 fail to include the metadata endpoints of Oracle Cloud and Alibaba in the SSRF denylist, which allows an attacker to possibly cause an SSRF if Mattermost was deployed in Oracle Cloud or Alibaba.
CVSS Score: 3.1 (LOW)
CWE: CWE-918, CWE-918
References: https://mattermost.com/security-updates
CVE: CVE-2024-47003
Published: 2024-09-26
Description: Mattermost versions 9.11.x <= 9.11.0 and 9.5.x <= 9.5.8 fail to validate that the message of the permalink post is a string, which allows an attacker to send a non-string value as the message of a permalink post and crash the frontend.
CVSS Score: 3.1 (LOW)
CWE: CWE-400
References: https://mattermost.com/security-updates
CVE: CVE-2024-47145
Published: 2024-09-26
Description: Mattermost versions 9.5.x <= 9.5.8 fail to properly authorize access to archived channels when viewing archived channels is disabled, which allows an attacker to view posts and files of archived channels via file links.
CVSS Score: 3.1 (LOW)
CWE: CWE-284
References: https://mattermost.com/security-updates
CVE: CVE-2024-47197
Published: 2024-09-26
Description: Exposure of Sensitive Information to an Unauthorized Actor, Insecure Storage of Sensitive Information vulnerability in Maven Archetype Plugin.

This issue affects Maven Archetype Plugin: from 3.2.1 before 3.3.0.

Users are recommended to upgrade to version 3.3.0, which fixes the issue.

Archetype integration testing creates a file
called ./target/classes/archetype-it/archetype-settings.xml
This file contains all the content from the users ~/.m2/settings.xml file,
which often contains information they do not want to publish. We expect that on many developer machines, this also contains
credentials.

When the user runs mvn verify again (without a mvn clean), this file becomes part of
the final artifact.

If a developer were to publish this into Maven Central or any other remote repository (whether as a release
or a snapshot) their credentials would be published without them knowing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-922, CWE-922
References: https://lists.apache.org/thread/ftg81np183wnyk0kg4ks95dvgxdrof96; http://www.openwall.com/lists/oss-security/2024/09/26/2