deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-33696
Published: 2024-04-26
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Broadstreet XPRESS WordPress Ad Widget allows Stored XSS.This issue affects WordPress Ad Widget: from n/a through 2.20.0.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/ad-widget/wordpress-wordpress-ad-widget-plugin-2-20-0-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/ad-widget/wordpress-wordpress-ad-widget-plugin-2-20-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-33697
Published: 2024-04-26
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rimes Gold CF7 File Download – File Download for CF7 allows Stored XSS.This issue affects CF7 File Download – File Download for CF7: from n/a through 2.0.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/cf7-file-download/wordpress-cf7-file-download-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/cf7-file-download/wordpress-cf7-file-download-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-4234
Published: 2024-04-26
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sayful Islam Filterable Portfolio allows Stored XSS.This issue affects Filterable Portfolio: from n/a through 1.6.4.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/filterable-portfolio/wordpress-filterable-portfolio-plugin-1-6-4-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/filterable-portfolio/wordpress-filterable-portfolio-plugin-1-6-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2022-40975
Published: 2024-04-26
Description: Missing Authorization vulnerability in Aazztech Post Slider.This issue affects Post Slider: from n/a through 1.6.7.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/adl-post-slider/wordpress-post-slider-plugin-1-6-7-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/adl-post-slider/wordpress-post-slider-plugin-1-6-7-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-3076
Published: 2024-04-26
Description: The MM-email2image WordPress plugin through 0.2.5 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
CVSS Score: 3.8 (LOW)
CWE: CWE-352
References: https://wpscan.com/vulnerability/617ec2e9-9058-4a93-8ad4-7ecb85107141/; https://wpscan.com/vulnerability/617ec2e9-9058-4a93-8ad4-7ecb85107141/
CVE: CVE-2023-41290
Published: 2024-04-26
Description: A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network.

We have already fixed the vulnerability in the following version:
QuFirewall 2.4.1 ( 2024/02/01 ) and later

CVSS Score: 4.1 (MEDIUM)
CWE: CWE-22
References: https://www.qnap.com/en/security-advisory/qsa-24-17; https://www.qnap.com/en/security-advisory/qsa-24-17
CVE: CVE-2023-41291
Published: 2024-04-26
Description: A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network.

We have already fixed the vulnerability in the following version:
QuFirewall 2.4.1 ( 2024/02/01 ) and later

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://www.qnap.com/en/security-advisory/qsa-24-17; https://www.qnap.com/en/security-advisory/qsa-24-17
CVE: CVE-2023-47222
Published: 2024-04-26
Description: An exposure of sensitive information vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow users to compromise the security of the system via a network.

We have already fixed the vulnerability in the following version:
Media Streaming add-on  500.1.1.5 ( 2024/01/22 ) and later

CVSS Score: 9.6 (CRITICAL)
CWE: CWE-22, CWE-200, CWE-287
References: https://www.qnap.com/en/security-advisory/qsa-24-15; https://www.qnap.com/en/security-advisory/qsa-24-15
CVE: CVE-2023-50361
Published: 2024-04-26
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.6.2722 build 20240402 and later
QuTS hero h5.1.6.2734 build 20240414 and later

CVSS Score: 5.0 (MEDIUM)
CWE: CWE-120, CWE-121
References: https://www.qnap.com/en/security-advisory/qsa-24-20; https://www.qnap.com/en/security-advisory/qsa-24-20
CVE: CVE-2023-50362
Published: 2024-04-26
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.6.2722 build 20240402 and later
QuTS hero h5.1.6.2734 build 20240414 and later

CVSS Score: 5.0 (MEDIUM)
CWE: CWE-120, CWE-121
References: https://www.qnap.com/en/security-advisory/qsa-24-20; https://www.qnap.com/en/security-advisory/qsa-24-20
CVE: CVE-2023-50363
Published: 2024-04-26
Description: An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to bypass intended access restrictions via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.6.2722 build 20240402 and later
QuTS hero h5.1.6.2734 build 20240414 and later

CVSS Score: 7.4 (HIGH)
CWE: CWE-285, CWE-863
References: https://www.qnap.com/en/security-advisory/qsa-24-20; https://www.qnap.com/en/security-advisory/qsa-24-20
CVE: CVE-2023-50364
Published: 2024-04-26
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.6.2722 build 20240402 and later
QuTS hero h5.1.6.2734 build 20240414 and later

CVSS Score: 6.4 (MEDIUM)
CWE: CWE-120, CWE-122
References: https://www.qnap.com/en/security-advisory/qsa-24-20; https://www.qnap.com/en/security-advisory/qsa-24-20
CVE: CVE-2023-51364
Published: 2024-04-26
Description: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.4.2596 build 20231128 and later
QTS 4.5.4.2627 build 20231225 and later
QuTS hero h5.1.3.2578 build 20231110 and later
QuTS hero h4.5.4.2626 build 20231225 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 8.7 (HIGH)
CWE: CWE-22
References: https://www.qnap.com/en/security-advisory/qsa-24-14; https://www.qnap.com/en/security-advisory/qsa-24-14
CVE: CVE-2023-51365
Published: 2024-04-26
Description: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.4.2596 build 20231128 and later
QTS 4.5.4.2627 build 20231225 and later
QuTS hero h5.1.3.2578 build 20231110 and later
QuTS hero h4.5.4.2626 build 20231225 and later
QuTScloud c5.1.5.2651 and later


CVSS Score: 8.7 (HIGH)
CWE: CWE-22
References: https://www.qnap.com/en/security-advisory/qsa-24-14; https://www.qnap.com/en/security-advisory/qsa-24-14
CVE: CVE-2023-51794
Published: 2024-04-26
Description: Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/af_stereowiden.c:120:69.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://trac.ffmpeg.org/ticket/10746; https://trac.ffmpeg.org/ticket/10746
CVE: CVE-2024-21905
Published: 2024-04-26
Description: An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to compromise the security of the system via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.3.2578 build 20231110 and later
QuTS hero h5.1.3.2578 build 20231110 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: https://www.qnap.com/en/security-advisory/qsa-24-16; https://www.qnap.com/en/security-advisory/qsa-24-16
CVE: CVE-2024-27124
Published: 2024-04-26
Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.3.2578 build 20231110 and later
QTS 4.5.4.2627 build 20231225 and later
QuTS hero h5.1.3.2578 build 20231110 and later
QuTS hero h4.5.4.2626 build 20231225 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 7.5 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.qnap.com/en/security-advisory/qsa-24-09; https://www.qnap.com/en/security-advisory/qsa-24-09
CVE: CVE-2024-28328
Published: 2024-04-26
Description: CSV Injection vulnerability in the Asus RT-N12+ router allows administrator users to inject arbitrary commands or formulas in the client name parameter which can be triggered and executed in a different user session upon exporting to CSV format.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-77
References: http://asus.com; https://github.com/ShravanSinghRathore/ASUS-RT-N300-B1/wiki/CSV-Injection-CVE%E2%80%902024%E2%80%9028328; http://asus.com
CVE: CVE-2024-32764
Published: 2024-04-26
Description: A missing authentication for critical function vulnerability has been reported to affect myQNAPcloud Link. If exploited, the vulnerability could allow users with the privilege level of some functionality via a network.

We have already fixed the vulnerability in the following version:
myQNAPcloud Link 2.4.51 and later

CVSS Score: 9.9 (CRITICAL)
CWE: CWE-306, CWE-346, CWE-749
References: https://www.qnap.com/en/security-advisory/qsa-24-09; https://www.qnap.com/en/security-advisory/qsa-24-09
CVE: CVE-2024-32766
Published: 2024-04-26
Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.3.2578 build 20231110 and later
QTS 4.5.4.2627 build 20231225 and later
QuTS hero h5.1.3.2578 build 20231110 and later
QuTS hero h4.5.4.2626 build 20231225 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 10.0 (CRITICAL)
CWE: CWE-77, CWE-78
References: https://www.qnap.com/en/security-advisory/qsa-24-09; https://www.qnap.com/en/security-advisory/qsa-24-09
CVE: CVE-2024-33255
Published: 2024-04-26
Description: Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p) in ecma_free_string_list.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-617
References: https://github.com/jerryscript-project/jerryscript/issues/5135; https://github.com/jerryscript-project/jerryscript/issues/5135
CVE: CVE-2024-33258
Published: 2024-04-26
Description: Jerryscript commit ff9ff8f was discovered to contain a segmentation violation via the component vm_loop at jerry-core/vm/vm.c.
CVSS Score: 7.1 (HIGH)
CWE: CWE-119
References: https://github.com/jerryscript-project/jerryscript/issues/5114; https://github.com/jerryscript-project/jerryscript/issues/5114
CVE: CVE-2024-33259
Published: 2024-04-26
Description: Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component scanner_seek at jerry-core/parser/js/js-scanner-util.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/jerryscript-project/jerryscript/issues/5132; https://github.com/jerryscript-project/jerryscript/issues/5132
CVE: CVE-2024-33260
Published: 2024-04-26
Description: Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component parser_parse_class at jerry-core/parser/js/js-parser-expr.c
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-284
References: https://github.com/jerryscript-project/jerryscript/issues/5133; https://github.com/jerryscript-project/jerryscript/issues/5133
CVE: CVE-2024-32880
Published: 2024-04-26
Description: pyload is an open-source Download Manager written in pure Python. An authenticated user can change the download folder and upload a crafted template to the specified folder lead to remote code execution. There is no fix available at the time of publication.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-434
References: https://github.com/pyload/pyload/security/advisories/GHSA-3f7w-p8vr-4v5f; https://github.com/pyload/pyload/security/advisories/GHSA-3f7w-p8vr-4v5f
CVE: CVE-2024-32884
Published: 2024-04-26
Description: gitoxide is a pure Rust implementation of Git. `gix-transport` does not check the username part of a URL for text that the external `ssh` program would interpret as an option. A specially crafted clone URL can smuggle options to SSH. The possibilities are syntactically limited, but if a malicious clone URL is used by an application whose current working directory contains a malicious file, arbitrary code execution occurs. This is related to the patched vulnerability GHSA-rrjw-j4m2-mf34, but appears less severe due to a greater attack complexity. This issue has been patched in versions 0.35.0, 0.42.0 and 0.62.0.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-77, CWE-88
References: https://github.com/Byron/gitoxide/security/advisories/GHSA-98p4-xjmm-8mfh; https://rustsec.org/advisories/RUSTSEC-2024-0335.html; https://github.com/Byron/gitoxide/security/advisories/GHSA-98p4-xjmm-8mfh
CVE: CVE-2024-33342
Published: 2024-04-26
Description: D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell.
CVSS Score: 7.5 (HIGH)
CWE: CWE-77
References: http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-822%2B; https://github.com/n0wstr/IOTVuln/tree/main/DIR-822%2B/SetPlcNetworkpwd; http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-822%2B
CVE: CVE-2024-33343
Published: 2024-04-26
Description: D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-822%2B; https://github.com/n0wstr/IOTVuln/tree/main/DIR-822%2B/ChgSambaUserSettings; http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-822%2B
CVE: CVE-2024-33344
Published: 2024-04-26
Description: D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of upload_firmware.cgi, which allows remote attackers to execute arbitrary commands via shell.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-822%2B; https://github.com/n0wstr/IOTVuln/tree/main/DIR-822%2B/UploadFirmware; http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-822%2B
CVE: CVE-2024-4235
Published: 2024-04-26
Description: A vulnerability classified as problematic was found in Netgear DG834Gv5 1.6.01.34. This vulnerability affects unknown code of the component Web Management Interface. The manipulation leads to cleartext storage of sensitive information. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-262126 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.7 (LOW)
CWE: CWE-312
References: https://netsecfish.notion.site/Netgear-DG834Gv5-Plain-Text-Credentials-Exposure-22e94fe066014490bebd349775d10b27?pvs=4; https://vuldb.com/?ctiid.262126; https://vuldb.com/?id.262126
CVE: CVE-2024-4236
Published: 2024-04-26
Description: A vulnerability, which was classified as critical, has been found in Tenda AX1803 1.0.0.1. This issue affects the function formSetSysToolDDNS of the file /goform/SetDDNSCfg. The manipulation of the argument serverName/ddnsUser/ddnsPwd/ddnsDomain leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-262127. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AX/AX1803/formSetSysToolDDNS.md; https://vuldb.com/?ctiid.262127; https://vuldb.com/?id.262127
CVE: CVE-2024-28325
Published: 2024-04-26
Description: Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to obtain unauthorized access and modify router settings.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-256, CWE-522
References: http://asus.com; https://github.com/ShravanSinghRathore/ASUS-RT-N300-B1/wiki/Credentials-Stored-in-Cleartext-CVE%E2%80%902024%E2%80%9028325; http://asus.com
CVE: CVE-2024-28327
Published: 2024-04-26
Description: Asus RT-N12+ B1 router stores user passwords in plaintext, which could allow local attackers to obtain unauthorized access and modify router settings.
CVSS Score: 8.4 (HIGH)
CWE: CWE-312
References: http://asus.com; https://github.com/ShravanSinghRathore/ASUS-RT-N300-B1/wiki/Insecure-Credential-Storage-CVE%E2%80%902024%E2%80%9028327; http://asus.com
CVE: CVE-2024-4237
Published: 2024-04-26
Description: A vulnerability, which was classified as critical, was found in Tenda AX1806 1.0.0.1. Affected is the function R7WebsSecurityHandler of the file /goform/execCommand. The manipulation of the argument password leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-262128. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AX/AX1806/R7WebsSecurityHandler.md; https://vuldb.com/?ctiid.262128; https://vuldb.com/?id.262128
CVE: CVE-2022-48611
Published: 2024-04-26
Description: A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://support.claris.com/s/answerview?anum=000041674&language=en_US; https://support.apple.com/en-us/103001; https://support.claris.com/s/answerview?anum=000041674&language=en_US
CVE: CVE-2023-26603
Published: 2024-04-26
Description: JumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions. This allows privilege escalation to SYSTEM via a repair action in the installer.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-378
References: https://community.jumpcloud.com/t5/jumpcloud-product-news/bd-p/releases; https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2024/MNDT-2024-0003.md; https://community.jumpcloud.com/t5/jumpcloud-product-news/bd-p/releases
CVE: CVE-2024-25343
Published: 2024-04-26
Description: Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-269
References: http://tenda.com; https://github.com/ShravanSinghRathore/Tenda-N300-F3-Router/wiki/Password-Policy-Bypass-Vulnerability-CVE%E2%80%902024%E2%80%9025343; http://tenda.com
CVE: CVE-2024-28326
Published: 2024-04-26
Description: Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-1263
References: http://asus.com; https://github.com/ShravanSinghRathore/ASUS-RT-N300-B1/wiki/Privilege-Escalation-CVE%E2%80%902024%E2%80%9028326; http://asus.com
CVE: CVE-2024-4238
Published: 2024-04-26
Description: A vulnerability has been found in Tenda AX1806 1.0.0.1 and classified as critical. Affected by this vulnerability is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-262129 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AX/AX1806/formSetDeviceName_devName.md; https://vuldb.com/?ctiid.262129; https://vuldb.com/?id.262129
CVE: CVE-2024-31502
Published: 2024-04-26
Description: An issue in Insurance Management System v.1.0.0 and before allows a remote attacker to escalate privileges via a crafted POST request to /admin/core/new_staff.
CVSS Score: 8.1 (HIGH)
CWE: CWE-269
References: https://github.com/sahildari/cve/blob/master/CVE-2024-31502.md; https://github.com/sahildari/cve/blob/master/CVE-2024-31502.md
CVE: CVE-2024-31601
Published: 2024-04-26
Description: An issue in Beijing Panabit Network Software Co., Ltd Panalog big data analysis platform v. 20240323 and before allows attackers to execute arbitrary code via the exportpdf.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-616
References: https://github.com/tianqing191/book.io; https://github.com/tianqing191/book.io
CVE: CVE-2024-32878
Published: 2024-04-26
Description: Llama.cpp is LLM inference in C/C++. There is a use of uninitialized heap variable vulnerability in gguf_init_from_file, the code will free this uninitialized variable later. In a simple POC, it will directly cause a crash. If the file is carefully constructed, it may be possible to control this uninitialized value and cause arbitrary address free problems. This may further lead to be exploited. Causes llama.cpp to crash (DoS) and may even lead to arbitrary code execution (RCE). This vulnerability has been patched in commit b2740.

CVSS Score: 7.1 (HIGH)
CWE: CWE-456
References: https://github.com/ggerganov/llama.cpp/releases/tag/b2749; https://github.com/ggerganov/llama.cpp/security/advisories/GHSA-p5mv-gjc5-mwqv; https://github.com/ggerganov/llama.cpp/releases/tag/b2749
CVE: CVE-2024-32881
Published: 2024-04-26
Description: Danswer is the AI Assistant connected to company's docs, apps, and people. Danswer is vulnerable to unauthorized access to GET/SET of Slack Bot Tokens. Anyone with network access can steal slack bot tokens and set them. This implies full compromise of the customer's slack bot, leading to internal Slack access. This issue was patched in version 3.63.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-285
References: https://github.com/danswer-ai/danswer/commit/89ff07a96b41be9e05256bd252105be233f4d28a; https://github.com/danswer-ai/danswer/commit/bd7e21a6388775e850d6f716675a893c72881e56; https://github.com/danswer-ai/danswer/security/advisories/GHSA-xr9w-3ggr-hr6j