deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-28593
Published: 2024-03-22
Description: The Chat activity in Moodle 4.3.3 allows students to insert a potentially unwanted HTML A element or IMG element, or HTML content that leads to a performance degradation. NOTE: the vendor's Using_Chat page says "If you know some HTML code, you can use it in your text to do things like insert images, play sounds or create different coloured and sized text." This page also says "Chat is due to be removed from standard Moodle."
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-94
References: https://docs.moodle.org/403/en/Using_Chat; https://gist.githubusercontent.com/minendie/4f23174687bc4d8eb7f727d9959b5399/raw/9ce573cebcce5521d9d6f826ab68f3780036b874/CVE-2024-28593.txt; https://medium.com/%40lamscun/how-do-i-change-htmli-from-low-to-critical-your-email-box-is-safe-e7171efd88fe
CVE: CVE-2024-29865
Published: 2024-03-22
Description: Logpoint before 7.1.0 allows Self-XSS on the LDAP authentication page via the username to the LDAP login form.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://servicedesk.logpoint.com/hc/en-us/articles/[PII_REDACTED]045-Self-XSS-on-LDAP-authentication; https://servicedesk.logpoint.com/hc/en-us/articles/[PII_REDACTED]045-Self-XSS-on-LDAP-authentication
CVE: CVE-2022-32751
Published: 2024-03-22
Description: IBM Security Verify Directory 10.0.0 could disclose sensitive server information that could be used in further attacks against the system.  IBM X-Force ID:  228437.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/228437; https://www.ibm.com/support/pages/node/7145001; https://exchange.xforce.ibmcloud.com/vulnerabilities/228437
CVE: CVE-2022-32753
Published: 2024-03-22
Description: IBM Security Verify Directory 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.  IBM X-Force ID:  228444.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-326
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/228444; https://www.ibm.com/support/pages/node/7145001; https://exchange.xforce.ibmcloud.com/vulnerabilities/228444
CVE: CVE-2022-32754
Published: 2024-03-22
Description: IBM Security Verify Directory 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  228445.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/228445; https://www.ibm.com/support/pages/node/7145001; https://exchange.xforce.ibmcloud.com/vulnerabilities/228445
CVE: CVE-2022-32756
Published: 2024-03-22
Description: IBM Security Verify Directory 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.  This information could be used in further attacks against the system.  IBM X-Force ID:  228507.
CVSS Score: 2.7 (LOW)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/228507; https://www.ibm.com/support/pages/node/7145001; https://exchange.xforce.ibmcloud.com/vulnerabilities/228507
CVE: CVE-2024-2227
Published: 2024-03-22
Description: This vulnerability allows access to arbitrary files in the application server file system due to a path traversal vulnerability in JavaServer Faces (JSF) 2.2.20 documented in CVE-2020-6950. The remediation for this vulnerability contained in this security fix provides additional changes to the remediation announced in May 2021 tracked by ETN IIQSAW-3585 and January 2024 tracked by IIQFW-336. This vulnerability in IdentityIQ is assigned CVE-2024-2227.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-22
References: https://www.sailpoint.com/security-advisories/; https://www.sailpoint.com/security-advisories/
CVE: CVE-2024-2228
Published: 2024-03-22
Description: This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user outside of the defined QuickLink Population.
CVSS Score: 7.1 (HIGH)
CWE: CWE-269
References: https://www.sailpoint.com/security-advisories/; https://www.sailpoint.com/security-advisories/
CVE: CVE-2024-2820
Published: 2024-03-22
Description: A vulnerability classified as problematic was found in DedeCMS 5.7. Affected by this vulnerability is an unknown functionality of the file /src/dede/baidunews.php. The manipulation of the argument filename leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257707. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/E1CHO/demo/blob/main/26.pdf; https://vuldb.com/?ctiid.257707; https://vuldb.com/?id.257707
CVE: CVE-2024-2821
Published: 2024-03-22
Description: A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7. Affected by this issue is some unknown functionality of the file /src/dede/friendlink_edit.php. The manipulation of the argument id leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257708. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/E1CHO/demo/blob/main/27.pdf; https://vuldb.com/?ctiid.257708; https://vuldb.com/?id.257708
CVE: CVE-2023-23349
Published: 2024-03-22
Description: Kaspersky has fixed a security issue in Kaspersky Password Manager (KPM) for Windows that allowed a local user to recover the auto-filled credentials from a memory dump when the KPM extension for Google Chrome is used. To exploit the issue, an attacker must trick a user into visiting a login form of a website with the saved credentials, and the KPM extension must autofill these credentials. The attacker must then launch a malware module to steal those specific credentials.
CVSS Score: 2.2 (LOW)
CWE: CWE-316
References: https://support.kaspersky.com/vulnerability/list-of-advisories/12430#180324; https://support.kaspersky.com/vulnerability/list-of-advisories/12430#180324
CVE: CVE-2024-28861
Published: 2024-03-22
Description: Symfony 1 is a community-driven fork of the 1.x branch of Symfony, a PHP framework for web projects. Starting in version 1.1.0 and prior to version 1.5.19, Symfony 1 has a gadget chain due to dangerous deserialization in `sfNamespacedParameterHolder` class that would enable an attacker to get remote code execution if a developer deserializes user input in their project. Version 1.5.19 contains a patch for the issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/FriendsOfSymfony1/symfony1/commit/0bd9d59c69221f49bfc8be8b871b79e12d7d171a; https://github.com/FriendsOfSymfony1/symfony1/security/advisories/GHSA-pv9j-c53q-h433; https://github.com/FriendsOfSymfony1/symfony1/commit/0bd9d59c69221f49bfc8be8b871b79e12d7d171a
CVE: CVE-2024-29042
Published: 2024-03-22
Description: Translate is a package that allows users to convert text to different languages on Node.js and the browser. Prior to version 3.0.0, an attacker controlling the second variable of the `translate` function is able to perform a cache poisoning attack. They can change the outcome of translation requests made by subsequent users. The `opt.id` parameter allows the overwriting of the cache key. If an attacker sets the `id` variable to the cache key that would be generated by another user, they can choose the response that user gets served. Version 3.0.0 fixes this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://github.com/franciscop/translate/commit/7a2bf8b9f05f7c45c09683973ef4d8e995804aa4; https://github.com/franciscop/translate/commit/cc1ba03078102f83e0503a96f1a081489bb865d3; https://github.com/franciscop/translate/security/advisories/GHSA-882j-4vj5-7vmj
CVE: CVE-2024-29184
Published: 2024-03-22
Description: FreeScout is a self-hosted help desk and shared mailbox. A Stored Cross-Site Scripting (XSS) vulnerability has been identified within the Signature Input Field of the FreeScout Application prior to version 1.8.128. Stored XSS occurs when user input is not properly sanitized and is stored on the server, allowing an attacker to inject malicious scripts that will be executed when other users access the affected page. In this case, the Support Agent User can inject malicious scripts into their signature, which will then be executed when viewed by the Administrator.

The application protects users against XSS attacks by enforcing a CSP policy, the CSP Policy is:  `script-src 'self' 'nonce-abcd'  `. The CSP policy only allows the inclusion of JS files that are present on the application server and doesn't allow any inline script or script other than nonce-abcd. The CSP policy was bypassed by uploading a JS file to the server by a POST request to /conversation/upload endpoint. After this, a working XSS payload was crafted by including the uploaded JS file link as the src of the script. This bypassed the CSP policy and XSS attacks became possible.

The impact of this vulnerability is severe as it allows an attacker to compromise the FreeScout Application. By exploiting this vulnerability, the attacker can perform various malicious actions such as forcing the Administrator to execute actions without their knowledge or consent. For instance, the attacker can force the Administrator to add a new administrator controlled by the attacker, thereby giving the attacker full control over the application. Alternatively, the attacker can elevate the privileges of a low-privileged user to Administrator, further compromising the security of the application. Attackers can steal sensitive information such as login credentials, session tokens, personal identifiable information (PII), and financial data. The vulnerability can also lead to defacement of the Application.

Version 1.8.128 contains a patch for this issue.
CVSS Score: 8.0 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/freescout-helpdesk/freescout/security/advisories/GHSA-fffc-phh8-5h4v; https://github.com/freescout-helpdesk/freescout/security/advisories/GHSA-fffc-phh8-5h4v
CVE: CVE-2024-29185
Published: 2024-03-22
Description: FreeScout is a self-hosted help desk and shared mailbox. Versions prior to 1.8.128 are vulnerable to OS Command Injection in the /public/tools.php source file. The value of the php_path parameter is being executed as an OS command by the shell_exec function, without validating it. This allows an adversary to execute malicious OS commands on the server. A practical demonstration of the successful command injection attack extracted the /etc/passwd file of the server. This represented the complete compromise of the server hosting the FreeScout application. This attack requires an attacker to know the `App_Key` of the application. This limitation makes the Attack Complexity to be High. If an attacker gets hold of the `App_Key`, the attacker can compromise the Complete server on which the application is deployed. Version 1.8.128 contains a patch for this issue.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/freescout-helpdesk/freescout/security/advisories/GHSA-7p9x-ch4c-vqj9; https://github.com/freescout-helpdesk/freescout/security/advisories/GHSA-7p9x-ch4c-vqj9
CVE: CVE-2024-29186
Published: 2024-03-22
Description: Bref is an open-source project that helps users go serverless on Amazon Web Services with PHP. When Bref prior to version 2.1.17 is used with the Event-Driven Function runtime and the handler is a `RequestHandlerInterface`, then the Lambda event is converted to a PSR7 object. During the conversion process, if the request is a MultiPart, each part is parsed. In the parsing process, the `Content-Type` header of each part is read using the `Riverline/multipart-parser` library.

The library, in the `StreamedPart::parseHeaderContent` function, performs slow multi-byte string operations on the header value.
Precisely, the `mb_convert_encoding` function is used with the first (`$string`) and third (`$from_encoding`) parameters read from the header value.

An attacker could send specifically crafted requests which would force the server into performing long operations with a consequent long billed duration.

The attack has the following requirements and limitations: The Lambda should use the Event-Driven Function runtime and the `RequestHandlerInterface` handler and should implement at least an endpoint accepting POST requests; the attacker can send requests up to 6MB long (this is enough to cause a billed duration between 400ms and 500ms with the default 1024MB RAM Lambda image of Bref); and if the Lambda uses a PHP runtime <= php-82, the impact is higher as the billed duration in the default 1024MB RAM Lambda image of Bref could be brought to more than 900ms for each request. Notice that the vulnerability applies only to headers read from the request body as the request header has a limitation which allows a total maximum size of ~10KB.

Version 2.1.17 contains a fix for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://github.com/brefphp/bref/commit/5f7c0294628dbcec6305f638ff7e2dba8a1c2f45; https://github.com/brefphp/bref/security/advisories/GHSA-j4hq-f63x-f39r; https://github.com/brefphp/bref/commit/5f7c0294628dbcec6305f638ff7e2dba8a1c2f45
CVE: CVE-2024-29338
Published: 2024-03-22
Description: Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via /anchor/admin/categories/delete/2.
CVSS Score: 2.4 (LOW)
CWE: CWE-352
References: https://github.com/PWwwww123/cms/blob/main/1.md; https://github.com/PWwwww123/cms/blob/main/1.md
CVE: CVE-2024-29366
Published: 2024-03-22
Description: A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware <= v1.01KRb03.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://github.com/20Yiju/DLink/blob/master/DIR-845L/CI.md; https://www.dlink.com/en/security-bulletin/; https://github.com/20Yiju/DLink/blob/master/DIR-845L/CI.md
CVE: CVE-2024-29385
Published: 2024-03-22
Description: DIR-845L router <= v1.01KRb03 has an Unauthenticated remote code execution vulnerability in the cgibin binary via soapcgi_main function.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-77
References: https://github.com/songah119/Report/blob/main/CI-1.md; https://www.dlink.com/en/security-bulletin/; https://github.com/songah119/Report/blob/main/CI-1.md
CVE: CVE-2024-29499
Published: 2024-03-22
Description: Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via /anchor/admin/users/delete/2.
CVSS Score: 7.4 (HIGH)
CWE: CWE-352
References: https://github.com/daddywolf/cms/blob/main/1.md; https://github.com/daddywolf/cms/blob/main/1.md
CVE: CVE-2024-2822
Published: 2024-03-22
Description: A vulnerability, which was classified as problematic, was found in DedeCMS 5.7. This affects an unknown part of the file /src/dede/vote_edit.php. The manipulation of the argument aid leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257709 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/E1CHO/demo/blob/main/29.pdf; https://vuldb.com/?ctiid.257709; https://vuldb.com/?id.257709
CVE: CVE-2024-2823
Published: 2024-03-22
Description: A vulnerability has been found in DedeCMS 5.7 and classified as problematic. This vulnerability affects unknown code of the file /src/dede/mda_main.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-257710 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/lcg-22266/cms/blob/main/1.md; https://vuldb.com/?ctiid.257710; https://vuldb.com/?id.257710
CVE: CVE-2023-4063
Published: 2024-03-22
Description: Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET request.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://support.hp.com/us-en/document/ish_10[PII_REDACTED]1488-16/hpsbpi03927; https://support.hp.com/us-en/document/ish_10[PII_REDACTED]1488-16/hpsbpi03927
CVE: CVE-2024-2824
Published: 2024-03-22
Description: A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-122
References: https://github.com/Matthias-Wandel/jhead/files/14613084/poc.zip; https://github.com/Matthias-Wandel/jhead/issues/84; https://vuldb.com/?ctiid.257711
CVE: CVE-2023-5685
Published: 2024-03-22
Description: A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problematically large can lead to uncontrolled resource management and a possible denial of service (DoS).
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://access.redhat.com/errata/RHSA-2023:7637; https://access.redhat.com/errata/RHSA-2023:7638; https://access.redhat.com/errata/RHSA-2023:7639
CVE: CVE-2024-2825
Published: 2024-03-22
Description: A vulnerability classified as critical has been found in lakernote EasyAdmin up to 20240315. This affects an unknown part of the file /ureport/designer/saveReportFile. The manipulation of the argument file leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257715.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-24
References: https://gitee.com/lakernote/easy-admin/issues/I98ZTA; https://vuldb.com/?ctiid.257715; https://vuldb.com/?id.257715
CVE: CVE-2024-2826
Published: 2024-03-22
Description: A vulnerability classified as problematic was found in lakernote EasyAdmin up to 20240315. This vulnerability affects unknown code of the file /ureport/designer/saveReportFile. The manipulation leads to xml external entity reference. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257716.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-611
References: https://gitee.com/lakernote/easy-admin/issues/I98ZTA; https://vuldb.com/?ctiid.257716; https://vuldb.com/?id.257716
CVE: CVE-2024-2827
Published: 2024-03-22
Description: A vulnerability, which was classified as critical, has been found in lakernote EasyAdmin up to 20240315. This issue affects some unknown processing of the file /ureport/designer/saveReportFile. The manipulation leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257717 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://gitee.com/lakernote/easy-admin/issues/I98ZTA; https://vuldb.com/?ctiid.257717; https://vuldb.com/?id.257717
CVE: CVE-2024-2828
Published: 2024-03-22
Description: A vulnerability, which was classified as critical, was found in lakernote EasyAdmin up to 20240315. Affected is the function thumbnail of the file src/main/java/com/laker/admin/module/sys/controller/IndexController.java. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 23165d8cb569048c531150f194fea39f8800b8d5. It is recommended to apply a patch to fix this issue. VDB-257718 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://gitee.com/lakernote/easy-admin/commit/23165d8cb569048c531150f194fea39f8800b8d5; https://gitee.com/lakernote/easy-admin/issues/I98YSR; https://vuldb.com/?ctiid.257718
CVE: CVE-2024-26247
Published: 2024-03-22
Description: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26247; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26247
CVE: CVE-2024-29057
Published: 2024-03-22
Description: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-357
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29057; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29057
CVE: CVE-2024-29190
Published: 2024-03-22
Description: Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. In version 3.9.5 Beta and prior, MobSF does not perform any input validation when extracting the hostnames in `android:host`, so requests can also be sent to local hostnames. This can lead to server-side request forgery. An attacker can cause the server to make a connection to internal-only services within the organization's infrastructure. Commit 5a8eeee73c5f504a6c3abdf2a139a13804efdb77 has a hotfix for this issue.

CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://drive.google.com/file/d/1nbKMd2sKosbJef5Mh4DxjcHcQ8Hw0BNR/view?usp=share_link; https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/5a8eeee73c5f504a6c3abdf2a139a13804efdb77; https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-wfgj-wrgh-h3r3
CVE: CVE-2024-29059
Published: 2024-03-23
Description: .NET Framework Information Disclosure Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-209, CWE-209
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29059; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29059; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-29059
CVE: CVE-2024-1697
Published: 2024-03-23
Description: The Custom WooCommerce Checkout Fields Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the save_wcfe_options function in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/add-fields-to-checkout-page-woocommerce/tags/1.2.9/classes/class-wc-checkout-field-editor.php#L1775; https://plugins.trac.wordpress.org/browser/add-fields-to-checkout-page-woocommerce/tags/1.3.2/classes/class-wc-checkout-field-editor.php#L1788; https://www.wordfence.com/threat-intel/vulnerabilities/id/9a92f44b-6f2b-439c-8245-ace189740425?source=cve