deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-8299
Published: 2024-11-28
Description: Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric GENESIS32 all versions, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions Hyper Historian versions 10.97.3 and prior, and Mitsubishi Electric Iconics Digital Solutions GENESIS32 all versions allows a local authenticated attacker to execute a malicious code by storing a specially crafted DLL in a specific folder. This could lead to disclose, tamper with, destroy, or delete information in the affected products, or to cause a denial of service (DoS) condition on the products.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://jvn.jp/vu/JVNVU93891820; https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-04; https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-010_en.pdf
CVE: CVE-2024-8300
Published: 2024-11-28
Description: Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric Iconics Digital Solutions GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric ICONICS Suite Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, and Mitsubishi Electric Iconics Digital Solutions ICONICS Suite Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3 allows a local authenticated attacker to execute a malicious code by tampering with a specially crafted DLL. This could lead to disclose, tamper with, destroy, or delete information in the affected products, or cause a denial of service (DoS) condition on the products.
CVSS Score: 7.0 (HIGH)
CWE: CWE-561
References: https://jvn.jp/vu/JVNVU93891820; https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-04; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-010_en.pdf
CVE: CVE-2024-9852
Published: 2024-11-28
Description: Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric GENESIS32 all versions, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions Hyper Historian versions 10.97.3 and prior, and Mitsubishi Electric Iconics Digital Solutions GENESIS32 all versions allows a local authenticated attacker to execute a malicious code by storing a specially crafted DLL in a specific folder. This could lead to disclose, tamper with, destroy, or delete information in the affected products, or cause a denial of service (DoS) condition on the products.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://jvn.jp/vu/JVNVU93891820; https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-04; https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-010_en.pdf
CVE: CVE-2024-11978
Published: 2024-11-29
Description: DreamMaker from Interinfo has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-36
References: https://www.twcert.org.tw/en/cp-139-8270-a56e6-2.html; https://www.twcert.org.tw/tw/cp-132-8269-22a8f-1.html
CVE: CVE-2024-11979
Published: 2024-11-29
Description: DreamMaker from Interinfo has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.twcert.org.tw/en/cp-139-8272-13a13-2.html; https://www.twcert.org.tw/tw/cp-132-8271-29871-1.html
CVE: CVE-2024-54123
Published: 2024-11-29
Description: Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG tag is allowed for a text format.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://backdropcms.org/security/backdrop-sa-core-2024-002
CVE: CVE-2024-54124
Published: 2024-11-29
Description: In Click Studios Passwordstate before build 9920, there is a potential permission escalation on the edit folder screen.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://www.clickstudios.com.au/passwordstate-changelog.aspx; https://www.clickstudios.com.au/security/advisories/
CVE: CVE-2024-35451
Published: 2024-11-29
Description: LinkStack 2.7.9 through 4.7.7 allows resources\views\components\favicon.blade.php link SSRF.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-918
References: https://datafarm.co.th/blog/CVE-2024-35451:-From-%28Authenticated%29-SSRF-to-Remote-Code-Execution
CVE: CVE-2024-45495
Published: 2024-11-29
Description: MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-346
References: https://us.msasafety.com/fieldserver; https://us.msasafety.com/security-notices
CVE: CVE-2024-48651
Published: 2024-11-29
Description: In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from mod_sql.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://github.com/proftpd/proftpd/commit/cec01cc0a2523453e5da5a486bc6d977c3768db1; https://github.com/proftpd/proftpd/issues/1830; https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html
CVE: CVE-2024-10704
Published: 2024-11-29
Description: The Photo Gallery by 10Web  WordPress plugin before 1.8.31 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/6c115117-11c0-4c9e-9988-8547c9364c01/
CVE: CVE-2024-10980
Published: 2024-11-29
Description: The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) WordPress plugin before 5.10.3 does not validate and escape some of its Cookie Consent block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/915daad8-d14c-4457-a3a0-aa21744f4ae0/
CVE: CVE-2024-11980
Published: 2024-11-29
Description: Certain modes of routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access the specific functionality to obtain partial device information, modify the WiFi SSID, and restart the device.
CVSS Score: 8.6 (HIGH)
CWE: CWE-306
References: https://www.twcert.org.tw/en/cp-139-8274-01e55-2.html; https://www.twcert.org.tw/tw/cp-132-8273-95a07-1.html
CVE: CVE-2024-39162
Published: 2024-11-29
Description: pyspider through 0.3.10 allows /update XSS. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.pyspider.org/en/latest/; https://github.com/binux/pyspider; https://www.sonarsource.com/blog/basic-http-authentication-risk-uncovering-pyspider-vulnerabilities/
CVE: CVE-2024-53701
Published: 2024-11-29
Description: Multiple FCNT Android devices provide the original security features such as "privacy mode" where arbitrary applications can be set not to be displayed, etc.
Under certain conditions, and when an attacker can directly operate the device which its screen is unlocked by a user, the provided security features' setting pages may be exposed and/or the settings may be altered, without authentication. For example, specific applications in the device configured to be hidden may be displayed and/or activated.
CVSS Score: 3.1 (LOW)
CWE: CWE-306
References: https://jvn.jp/en/jp/JVN43845108/; https://www.fcnt.com/consumernotice/20741
CVE: CVE-2024-11981
Published: 2024-11-29
Description: Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated attackers to retrive contents of arbitrary web pages.
CVSS Score: 7.5 (HIGH)
CWE: CWE-288
References: https://www.twcert.org.tw/en/cp-139-8276-1defb-2.html; https://www.twcert.org.tw/tw/cp-132-8275-50f42-1.html
CVE: CVE-2024-11013
Published: 2024-11-29
Description: Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27, for Ver10.9 up to Ver10.9.14 and UNIVERGE IX-R/IX-V Ver1.2.15 and earlier allows a attacker to inject an arbitrary CLI commands to be executed on the device via the management interface.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://jpn.nec.com/security-info/secinfo/nv24-009_en.html
CVE: CVE-2024-11014
Published: 2024-11-29
Description: Cross-site request forgery (CSRF) vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27 and for Ver10.9 up to Ver10.9.14 allows a attacker to hijack the authentication of screens on the device via the management interface.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://jpn.nec.com/security-info/secinfo/nv24-009_en.html
CVE: CVE-2024-11481
Published: 2024-11-29
Description: A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper handling of path traversal, insecure forwarding to an AJP backend without adequate validation, and lack of authentication for accessing internal API endpoints.
CVSS Score: 8.2 (HIGH)
CWE: CWE-22
References: https://thrive.trellix.com/s/article/000014058
CVE: CVE-2024-11482
Published: 2024-11-29
Description: A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through command injection, executed as the root user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://thrive.trellix.com/s/article/000014058#h2_0; https://hackerone.com/reports/2817658
CVE: CVE-2024-11982
Published: 2024-11-29
Description: Certain models of routers from Billion Electric has a Plaintext Storage of a Password vulnerability. Remote attackers with administrator privileges can access the user settings page to retrieve plaintext passwords.
CVSS Score: 7.2 (HIGH)
CWE: CWE-256
References: https://www.twcert.org.tw/en/cp-139-8278-cb581-2.html; https://www.twcert.org.tw/tw/cp-132-8277-88b20-1.html
CVE: CVE-2024-11983
Published: 2024-11-29
Description: Certain models of routers from Billion Electric has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject arbitrary system commands into a specific SSH function and execute them on the device.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.twcert.org.tw/en/cp-139-8280-ae6e1-2.html; https://www.twcert.org.tw/tw/cp-132-8279-bf67e-1.html
CVE: CVE-2024-9044
Published: 2024-11-29
Description: A XML External Entity (XXE) vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across multiple platforms, including Windows, Linux, and macOS.
CWE: CWE-611, CWE-827
References: https://www.ag.ch/de/verwaltung/dfr/steuern/natuerliche-personen/steuererklaerung-easytax
CVE: CVE-2024-47094
Published: 2024-11-29
Description: Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p22, <2.2.0p37, <2.1.0p50 (EOL) causes remote site secrets to be written to web log files accessible to local site users.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://checkmk.com/werk/17342
CVE: CVE-2024-50357
Published: 2024-11-29
Description: FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled. The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. As a result, an attacker may obtain and/or alter the affected product's settings via REST-APIs.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-684
References: https://jvn.jp/en/vu/JVNVU95001899/; https://www.centurysys.co.jp/backnumber/nxr_common/20241031-01.html
CVE: CVE-2024-11990
Published: 2024-11-29
Description: A Cross-Site Scripting (XSS) vulnerability in SurgeMail v78c2 could allow an attacker to execute arbitrary JavaScript code via an elaborate payload injected into vulnerable parameters.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-netwin-surgemail
CVE: CVE-2024-11992
Published: 2024-11-29
Description: Absolute path traversal vulnerability in Quick.CMS, version 6.7, the exploitation of which could allow remote users to bypass the intended restrictions and download any file if it has the appropriate permissions outside of documentroot configured on the server via the aDirFiles%5B0%5D parameter in the admin.php page. This vulnerability allows an attacker to delete files stored on the server due to a lack of proper verification of user-supplied input.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://www.incibe.es/en/incibe-cert/notices/aviso/path-traversal-vulnerability-quickcms
CVE: CVE-2024-36671
Published: 2024-11-29
Description: nodemcu before v3.0.0-release_20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://github.com/nodemcu/nodemcu-firmware/commit/193fe3593eb[PII_REDACTED]89535cdb[PII_REDACTED]#diff-5c3fa597431eda03ac3339ae6bf7f05e1a50d6fc7333679ec38e21b337cb6721; https://github.com/nodemcu/nodemcu-firmware/issues/3626; https://github.com/nodemcu/nodemcu-firmware/pull/3633
CVE: CVE-2024-48406
Published: 2024-11-29
Description: Buffer Overflow vulnerability in SunBK201 umicat through v.0.3.2 and fixed in v.0.3.3 allows an attacker to execute arbitrary code via the power(uct_int_t x, uct_int_t n) in src/uct_upstream.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/SunBK201/umicat/issues/2; https://github.com/SunBK201/umicat/pull/3
CVE: CVE-2024-52777
Published: 2024-11-29
Description: DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L, <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/basic/license_update.php.
CVSS Score: 9.8 (CRITICAL)
References: https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/
CVE: CVE-2024-52778
Published: 2024-11-29
Description: DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist.php.
CVSS Score: 9.8 (CRITICAL)
References: https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/
CVE: CVE-2024-52779
Published: 2024-11-29
Description: DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_top10.php.
CVSS Score: 9.8 (CRITICAL)
References: https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/
CVE: CVE-2024-52780
Published: 2024-11-29
Description: DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/basic/mgmt_edit.php.
CVSS Score: 9.8 (CRITICAL)
References: https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/
CVE: CVE-2024-52781
Published: 2024-11-29
Description: DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/tool/traceroute.php.
CVSS Score: 9.8 (CRITICAL)
References: https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/
CVE: CVE-2024-52782
Published: 2024-11-29
Description: DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist_new.php.
CVSS Score: 9.8 (CRITICAL)
References: https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/
CVE: CVE-2024-35369
Published: 2024-11-29
Description: In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://gist.github.com/[PII_REDACTED]/[PII_REDACTED]66f2e351d674750c8cd0b8; https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavcodec/speexdec.c#L1423; https://github.com/ffmpeg/ffmpeg/commit/0895ef0d6d6406ee6cd158fc4d47d80f201b8e9c
CVE: CVE-2024-36619
Published: 2024-11-29
Description: FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block types, leading to a denial-of-service (DoS) condition.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-190
References: https://gist.github.com/[PII_REDACTED]/fad68e8251f4e34a1bb838de697d5119; https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavcodec/wavarc.c#L651; https://github.com/ffmpeg/ffmpeg/commit/28c7094b25b689185155a6833caf2747b94774a4
CVE: CVE-2024-36625
Published: 2024-11-29
Description: Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the replace_emoji_with_text function in ui_util.ts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/[PII_REDACTED]/f7ada389ed2686481efef9e1f8307c51; https://github.com/zulip/zulip/blob/8.3/web/src/ui_util.ts#L24; https://github.com/zulip/zulip/commit/191345f9d61f5b15762fe3ce19bf635bf885176a
CVE: CVE-2024-36626
Published: 2024-11-29
Description: In prestashop 8.1.4, a NULL pointer dereference was identified in the math_round function within Tools.php.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476
References: https://gist.github.com/[PII_REDACTED]/25c45b61a6374e0fdaf720c9863c6bcd; https://github.com/PrestaShop/PrestaShop/blob/8.1.4/classes/Tools.php#L1774; https://github.com/prestashop/prestashop/commit/20fa542294da2cfa034a48041e292acaed0c2a7f
CVE: CVE-2024-47193
Published: 2024-11-29
Description: WithSecure Elements Agent for Mac before 24.3, MDR before 24.3, and Elements Client Security for Mac before 16.10 allow a remote Denial of Service.
CVSS Score: 5.5 (MEDIUM)
References: https://www.withsecure.com/en/support/security-advisories/cve-2024-47193
CVE: CVE-2024-49803
Published: 2024-11-29
Description: IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.ibm.com/support/pages/node/7177447
CVE: CVE-2024-49804
Published: 2024-11-29
Description: IBM Security Verify Access Appliance 10.0.0 through 10.0.8 

could allow a locally authenticated non-administrative user to escalate their privileges due to unnecessary permissions used to perform certain tasks.
CVSS Score: 7.8 (HIGH)
CWE: CWE-250
References: https://www.ibm.com/support/pages/node/7177447
CVE: CVE-2024-49805
Published: 2024-11-29
Description: IBM Security Verify Access Appliance 10.0.0 through 10.0.8 

contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-798
References: https://www.ibm.com/support/pages/node/7177447
CVE: CVE-2024-49806
Published: 2024-11-29
Description: IBM Security Verify Access Appliance 10.0.0 through 10.0.8 

contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-798
References: https://www.ibm.com/support/pages/node/7177447
CVE: CVE-2024-36617
Published: 2024-11-29
Description: FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-190
References: https://gist.github.com/[PII_REDACTED]/f20749f8addc8f86de9cfacf17ba29df; https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavformat/cafdec.c#L274; https://github.com/ffmpeg/ffmpeg/commit/d973fcbcc2f944752ff10e6a76b0b2d9329937a7
CVE: CVE-2024-36618
Published: 2024-11-29
Description: FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-190
References: https://gist.github.com/[PII_REDACTED]/a148f3679415a6da53ca112eb2ba1523; https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavformat/avidec.c#L1699; https://github.com/ffmpeg/ffmpeg/commit/7a089ed8e049e3bfcb22de1250b86f[PII_REDACTED]
CVE: CVE-2024-36620
Published: 2024-11-29
Description: moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://gist.github.com/[PII_REDACTED]/f[PII_REDACTED]1ab478a265a811d2c89b2; https://github.com/moby/moby/blob/v26.0.2/daemon/images/image_history.go#L48; https://github.com/moby/moby/commit/ab570ab3d62038b3d26f96a9bb585d0b6095b9b4
CVE: CVE-2024-36621
Published: 2024-11-29
Description: moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-362
References: https://gist.github.com/[PII_REDACTED]/5d44459edab5fafcdf86b43909b81135; https://github.com/moby/moby/blob/v25.0.5/builder/builder-next/adapters/snapshot/layer.go#L24; https://github.com/moby/moby/commit/37545cc644344dcb576cba67eb7b6f51a463d31e
CVE: CVE-2024-36622
Published: 2024-11-29
Description: In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script. The vulnerability is due to improper sanitization of user input passed via the logfile parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://gist.github.com/[PII_REDACTED]/ab997b902ec892e592a0df93f38e6941; https://github.com/RaspAP/raspap-webgui/blob/3.0.9/ajax/logging/clearlog.php; https://github.com/raspap/raspap-webgui/commit/c98d2b0c15942b4829d31dec615b9b40cc6faa14#diff-939ee414d82245c3b3dd7d36b57f10706e06e8f0871b24bdcf9de6e0d181c4c9
CVE: CVE-2024-36623
Published: 2024-11-29
Description: moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://gist.github.com/[PII_REDACTED]/c192c0159a19bf58a4373b696467dc29; https://github.com/moby/moby/blob/v25.0.3/pkg/streamformatter/streamformatter.go#L115; https://github.com/moby/moby/commit/5689dabfb357b673abdb4391eef426f297d7d1bb