deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-32307
Published: 2023-05-26
Description: Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification.
Referring to [GHSA-8599-x7rq-fr54](https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-8599-x7rq-fr54), several other potential heap-over-flow and integer-overflow in stun_parse_attr_error_code and stun_parse_attr_uint32 were found because the lack of attributes length check when Sofia-SIP handles STUN packets. The previous patch of [GHSA-8599-x7rq-fr54](https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-8599-x7rq-fr54) fixed the vulnerability when attr_type did not match the enum value, but there are also vulnerabilities in the handling of other valid cases. The OOB read and integer-overflow made by attacker may lead to crash, high consumption of memory or even other more serious consequences. These issue have been addressed in version 1.13.15. Users are advised to upgrade.
CVSS Score: 7.5 (HIGH)
CWE: CWE-122, CWE-190, CWE-190, CWE-787
References: https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-rm4c-ccvf-ff9c; https://lists.debian.org/debian-lts-announce/2023/06/msg00002.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OY66DOQ3B7GULJTI66X5HNX5FU3P65CX/
CVE: CVE-2023-32311
Published: 2023-05-26
Description: CloudExplorer Lite is an open source cloud management platform. In CloudExplorer Lite prior to version 1.1.0 users organization/workspace permissions are not properly checked. This allows users to add themselves to any organization. This vulnerability has been fixed in v1.1.0. Users are advised to upgrade. There are no known workarounds for this issue.

CVSS Score: 7.1 (HIGH)
CWE: CWE-862, CWE-862
References: https://github.com/CloudExplorer-Dev/CloudExplorer-Lite/security/advisories/GHSA-hxjq-g9qv-pwq5; https://github.com/CloudExplorer-Dev/CloudExplorer-Lite/security/advisories/GHSA-hxjq-g9qv-pwq5; https://github.com/CloudExplorer-Dev/CloudExplorer-Lite/security/advisories/GHSA-hxjq-g9qv-pwq5
CVE: CVE-2023-32315
Published: 2023-05-26
Description: Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup Environment in an already configured Openfire environment to access restricted pages in the Openfire Admin Console reserved for administrative users. This vulnerability affects all versions of Openfire that have been released since April 2015, starting with version 3.10.0. The problem has been patched in Openfire release 4.7.5 and 4.6.8, and further improvements will be included in the yet-to-be released first version on the 4.8 branch (which is expected to be version 4.8.0). Users are advised to upgrade. If an Openfire upgrade isn’t available for a specific release, or isn’t quickly actionable, users may see the linked github advisory (GHSA-gw42-f939-fhvm) for mitigation advice.
CVSS Score: 8.6 (HIGH)
CWE: CWE-22, CWE-22
References: http://packetstormsecurity.com/files/173607/Openfire-Authentication-Bypass-Remote-Code-Execution.html; https://github.com/igniterealtime/Openfire/security/advisories/GHSA-gw42-f939-fhvm; http://packetstormsecurity.com/files/173607/Openfire-Authentication-Bypass-Remote-Code-Execution.html
CVE: CVE-2023-32316
Published: 2023-05-26
Description: CloudExplorer Lite is an open source cloud management tool. In affected versions users can add themselves to any organization in CloudExplorer Lite. This is due to a missing permission check on the user profile. It is recommended to upgrade the version to v1.1.0. There are no known workarounds for this vulnerability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-862, CWE-862
References: https://github.com/CloudExplorer-Dev/CloudExplorer-Lite/security/advisories/GHSA-cp3j-437h-4vwj; https://github.com/CloudExplorer-Dev/CloudExplorer-Lite/security/advisories/GHSA-cp3j-437h-4vwj; https://github.com/CloudExplorer-Dev/CloudExplorer-Lite/security/advisories/GHSA-cp3j-437h-4vwj
CVE: CVE-2023-32317
Published: 2023-05-26
Description: Autolab is a course management service that enables auto-graded programming assignments. A Tar slip vulnerability was found in the MOSS cheat checker functionality of Autolab. To exploit this vulnerability an authenticated attacker with instructor permissions needs to upload a specially crafted Tar file. Both "Base File Tar" and "Additional file archive" can be fed with Tar files that contain paths outside their target directories (e.g.,  `../../../../tmp/tarslipped2.sh`). When the MOSS cheat checker is started the files inside of the archives are expanded to the attacker-chosen locations. This issue may lead to arbitrary file write within the scope of the running process.  This issue has been addressed in version 2.11.0. Users are advised to upgrade.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/autolab/Autolab/commit/410a9228ee265f80692334d75eb2c3b4dac6f9e5; https://github.com/autolab/Autolab/security/advisories/GHSA-h8g5-vhm4-wx6g; https://securitylab.github.com/advisories/GHSL-2023-081_GHSL-2023-082_Autolab/
CVE: CVE-2023-32319
Published: 2023-05-26
Description: Nextcloud server is an open source personal cloud implementation. Missing brute-force protection on the WebDAV endpoints via the basic auth header allowed to brute-force user credentials when the provided user name was not an email address. Users from version 24.0.0 onward are affected. This issue has been addressed in releases 24.0.11, 25.0.5 and 26.0.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-307, CWE-307
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-mr7q-xf62-fw54; https://github.com/nextcloud/server/pull/37227; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-mr7q-xf62-fw54
CVE: CVE-2023-32321
Published: 2023-05-26
Description: CKAN is an open-source data management system for powering data hubs and data portals. Multiple vulnerabilities have been discovered in Ckan which may lead to remote code execution. An arbitrary file write in `resource_create` and `package_update` actions, using the `ResourceUploader` object.  Also reachable via `package_create`, `package_revise`, and `package_patch` via calls to `package_update`. Remote code execution via unsafe pickle loading, via Beaker's session store when configured to use the file session store backend. Potential DOS due to lack of a length check on the resource id. Information disclosure: A user with permission to create a resource can access any other resource on the system if they know the id, even if they don't have access to it. Resource overwrite: A user with permission to create a resource can overwrite any resource if they know the id, even if they don't have access to it. A user with permissions to create or edit a dataset can upload a resource with a specially crafted id to write the uploaded file in an arbitrary location. This can be leveraged to Remote Code Execution via Beaker's insecure pickle loading. All the above listed vulnerabilities have been fixed in CKAN 2.9.9 and CKAN 2.10.1. Users are advised to upgrade. There are no known workarounds for these issues.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/ckan/ckan/blob/2a6080e61d5601fa0e2a0317afd6a8e9b7abf6dd/CHANGELOG.rst; https://github.com/ckan/ckan/security/advisories/GHSA-446m-hmmm-hm8m; https://github.com/ckan/ckan/blob/2a6080e61d5601fa0e2a0317afd6a8e9b7abf6dd/CHANGELOG.rst
CVE: CVE-2023-32676
Published: 2023-05-26
Description: Autolab is a course management service that enables auto-graded programming assignments. A Tar slip vulnerability was found in the Install assessment functionality of Autolab. To exploit this vulnerability an authenticated attacker with instructor permissions needs to upload a specially crafted Tar file. Using the install assessment functionality an attacker can feed a Tar file that contain files with paths pointing outside of the target directory (e.g.,  `../../../../tmp/tarslipped1.sh`). When the Install assessment form is submitted the files inside of the archives are expanded to the attacker-chosen locations. This issue has been addressed in version 2.11.0. Users are advised to upgrade.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/autolab/Autolab/commit/14f508484a8323eceb0cf3a128573b43eabbc80d; https://github.com/autolab/Autolab/security/advisories/GHSA-x9hj-r9q4-832c; https://securitylab.github.com/advisories/GHSL-2023-081_GHSL-2023-082_Autolab/
CVE: CVE-2023-33199
Published: 2023-05-26
Description: Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. A malformed proposed entry of the `intoto/v0.0.2` type can cause a panic on a thread within the Rekor process. The thread is recovered so the client receives a 500 error message and service still continues, so the availability impact of this is minimal. This has been fixed in v1.2.0 of Rekor. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-617, CWE-617
References: https://github.com/sigstore/rekor/commit/140c5add105179e5ffd9e3e114fd1b6b93aebbd4; https://github.com/sigstore/rekor/security/advisories/GHSA-frqx-jfcm-6jjr; https://github.com/sigstore/rekor/commit/140c5add105179e5ffd9e3e114fd1b6b93aebbd4
CVE: CVE-2023-32325
Published: 2023-05-27
Description: PostHog-js is a library to interface with the PostHog analytics tool. Versions prior to 1.57.2 have the potential for cross-site scripting. Problem has been patched in 1.57.2. Users are advised to upgrade. Users unable to upgrade should ensure that their Content Security Policy is in place.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/PostHog/posthog-js/commit/67e07eb8bb271a3a6f4aa251382e4d25abb385a0; https://github.com/PostHog/posthog-js/security/advisories/GHSA-8775-5hwv-wr6v; https://github.com/PostHog/posthog-js/commit/67e07eb8bb271a3a6f4aa251382e4d25abb385a0
CVE: CVE-2023-32686
Published: 2023-05-27
Description: Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to upload attachments to test plans, test cases, etc. Earlier versions of Kiwi TCMS had introduced upload validators in order to prevent potentially dangerous files from being uploaded. The upload validation checks were not robust enough which left the possibility of an attacker to circumvent them and upload a potentially dangerous file. Exploiting this flaw, a combination of files could be uploaded so that they work together to circumvent the existing Content-Security-Policy and allow execution of arbitrary JavaScript in the browser. This issue has been patched in version 12.3.
CVSS Score: 8.1 (HIGH)
CWE: CWE-79, CWE-434, CWE-79
References: https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-x7c2-7wvg-jpx7; https://kiwitcms.org/blog/kiwi-tcms-team/2023/05/22/kiwi-tcms-123/; https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-x7c2-7wvg-jpx7
CVE: CVE-2023-32688
Published: 2023-05-27
Description: parse-server-push-adapter is the official Push Notification adapter for Parse Server. The Parse Server Push Adapter can crash Parse Server due to an invalid push notification payload. This issue has been patched in version 4.1.3.

CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://github.com/parse-community/parse-server-push-adapter/pull/217; https://github.com/parse-community/parse-server-push-adapter/releases/tag/4.1.3; https://github.com/parse-community/parse-server-push-adapter/security/advisories/GHSA-mxhg-rvwx-x993
CVE: CVE-2023-33188
Published: 2023-05-27
Description: Omni-notes is an open source note-taking application for Android. The Omni-notes Android app had an insufficient path validation vulnerability when displaying the details of a note received through an externally-provided intent. The paths of the note's attachments were not properly validated, allowing malicious or compromised applications in the same device to force Omni-notes to copy files from its internal storage to its external storage directory, where they would have become accessible to any component with permission to read the external storage. Updating to the newest version (6.2.7) of Omni-notes Android fixes this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-441, CWE-610, CWE-610
References: https://github.com/federicoiosue/Omni-Notes/security/advisories/GHSA-g38r-4cf6-3v32; https://github.com/federicoiosue/Omni-Notes/security/advisories/GHSA-g38r-4cf6-3v32
CVE: CVE-2023-33192
Published: 2023-05-27
Description: ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects. The server also crashes when it is not configured to handle NTS packets. The issue was caused by improper slice indexing. The indexing operations were replaced by safer alternatives that do not crash the ntpd-rs server process but instead properly handle the error condition. A patch was released in version 0.3.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-130
References: https://github.com/pendulum-project/ntpd-rs/pull/752; https://github.com/pendulum-project/ntpd-rs/security/advisories/GHSA-qwhm-h7v3-mrjx; https://github.com/pendulum-project/ntpd-rs/pull/752
CVE: CVE-2023-33195
Published: 2023-05-27
Description: Craft is a CMS for creating custom digital experiences on the web. A malformed RSS feed can deliver an XSS payload. This issue was patched in version 4.4.6.



CVSS Score: 5.0 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/craftcms/cms/commit/b77cb3023bed4f4a37c11294c4d319ff9f598e1f; https://github.com/craftcms/cms/releases/tag/4.4.6; https://github.com/craftcms/cms/security/advisories/GHSA-qpgm-gjgf-8c2x
CVE: CVE-2023-26127
Published: 2023-05-27
Description: All versions of the package n158 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports' function.**Note:**To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have the ability to run Node.js code within the target environment. This typically requires some level of access to the system or application hosting the Node.js environment.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78, CWE-77, CWE-77
References: https://github.com/dsilva2401/n158/blob/master/src/cli/initProject.js%23L8; https://security.snyk.io/vuln/SNYK-JS-N[PII_REDACTED]; https://github.com/dsilva2401/n158/blob/master/src/cli/initProject.js%23L8
CVE: CVE-2023-26128
Published: 2023-05-27
Description: All versions of the package keep-module-latest are vulnerable to Command Injection due to missing input sanitization or other checks and sandboxes being employed to the installModule function.**Note:**To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have the ability to run Node.js code within the target environment. This typically requires some level of access to the system or application hosting the Node.js environment.
CVSS Score: 8.4 (HIGH)
CWE: CWE-78, CWE-77, CWE-77
References: https://github.com/liujunyang/keep-module-latest/blob/master/index.js%23L50; https://security.snyk.io/vuln/SNYK-JS-KEEPMODULELATEST-3157165; https://github.com/liujunyang/keep-module-latest/blob/master/index.js%23L50
CVE: CVE-2023-26129
Published: 2023-05-27
Description: All versions of the package bwm-ng are vulnerable to Command Injection due to improper input sanitization in the 'check' function in the bwm-ng.js file. **Note:**To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have the ability to run Node.js code within the target environment. This typically requires some level of access to the system or application hosting the Node.js environment.
CVSS Score: 8.4 (HIGH)
CWE: CWE-78, CWE-77, CWE-77
References: https://security.snyk.io/vuln/SNYK-JS-BWMNG-3175876; https://security.snyk.io/vuln/SNYK-JS-BWMNG-3175876
CVE: CVE-2023-33184
Published: 2023-05-27
Description: Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recommended that the Mail app is update to version 3.02, 2.2.5 or 1.15.3.


CVSS Score: 3.5 (LOW)
CWE: CWE-918, CWE-918
References: https://github.com/nextcloud/mail/pull/8275; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8gph-9895-w564; https://hackerone.com/reports/1913095
CVE: CVE-2023-2922
Published: 2023-05-27
Description: A vulnerability classified as problematic has been found in SourceCodester Comment System 1.0. Affected is an unknown function of the file index.php of the component GET Parameter Handler. The manipulation of the argument msg leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-230076.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/kanyl6/CVERequest/blob/main/XSS.md; https://vuldb.com/?ctiid.230076; https://vuldb.com/?id.230076
CVE: CVE-2023-2923
Published: 2023-05-27
Description: A vulnerability classified as critical was found in Tenda AC6 US_AC6V1.0BR_V15.03.05.19. Affected by this vulnerability is the function fromDhcpListClient. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-230077 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://github.com/GleamingEyes/vul/blob/main/1.md; https://vuldb.com/?ctiid.230077; https://vuldb.com/?id.230077
CVE: CVE-2023-2924
Published: 2023-05-27
Description: A vulnerability, which was classified as critical, has been found in Supcon SimField up to 1.80.00.00. Affected by this issue is some unknown functionality of the file /admin/reportupload.aspx. The manipulation of the argument files[] leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-230078 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-434
References: https://github.com/RCEraser/cve/blob/main/SimField.md; https://vuldb.com/?ctiid.230078; https://vuldb.com/?id.230078
CVE: CVE-2023-2925
Published: 2023-05-27
Description: A vulnerability, which was classified as problematic, was found in Webkul krayin crm 1.2.4. This affects an unknown part of the file /admin/contacts/organizations/edit/2 of the component Edit Person Page. The manipulation of the argument Organization leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230079. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://drive.google.com/file/d/1t7JwP0Qyo6ye-2dt6XhA1ENHDwsnYjD3/view?usp=sharing; https://vuldb.com/?ctiid.230079; https://vuldb.com/?id.230079
CVE: CVE-2023-2926
Published: 2023-05-27
Description: A vulnerability was found in SeaCMS 11.6 and classified as problematic. This issue affects some unknown processing of the file member.php of the component Picture Upload Handler. The manipulation of the argument oldpic leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-230081 was assigned to this vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-404
References: https://github.com/xryj920/CVE/blob/main/DEL.md; https://vuldb.com/?ctiid.230081; https://vuldb.com/?id.230081
CVE: CVE-2023-2927
Published: 2023-05-27
Description: A vulnerability was found in JIZHICMS 2.4.5. It has been classified as critical. Affected is the function index of the file TemplateController.php. The manipulation of the argument webapi leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-230082 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/HuBenLab/HuBenVulList/blob/main/JiZhiCMS%20is%20vulnerable%20to%20Server-side%20request%20forgery%20(SSRF).md; https://vuldb.com/?ctiid.230082; https://vuldb.com/?id.230082
CVE: CVE-2023-2928
Published: 2023-05-27
Description: A vulnerability was found in DedeCMS up to 5.7.106. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file uploads/dede/article_allowurl_edit.php. The manipulation of the argument allurls leads to code injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230083.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-94
References: https://github.com/testwordpress123/cve/blob/main/dedecms.md; https://vuldb.com/?ctiid.230083; https://vuldb.com/?id.230083
CVE: CVE-2023-32695
Published: 2023-05-27
Description: socket.io parser is a socket.io encoder and decoder written in JavaScript complying with version 5 of socket.io-protocol. A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. A patch has been released in version 4.2.3.


CVSS Score: 7.3 (HIGH)
CWE: CWE-20, CWE-754
References: https://github.com/socketio/socket.io-parser/commit/2dc3c92622dad113b8676be06f23b1ed46b02ced; https://github.com/socketio/socket.io-parser/commit/3b78117bf6ba7e99d7a5cfc1ba54d0477554a7f3; https://github.com/socketio/socket.io-parser/releases/tag/4.2.3
CVE: CVE-2015-20108
Published: 2023-05-27
Description: xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/SAML-Toolkits/ruby-saml/commit/9853651b96b99653ea8627d757d46bfe62ab6448; https://github.com/SAML-Toolkits/ruby-saml/compare/v0.9.2...v1.0.0; https://github.com/SAML-Toolkits/ruby-saml/pull/225
CVE: CVE-2023-2942
Published: 2023-05-27
Description: Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: https://github.com/openemr/openemr/commit/c1c0805696ca68577c37bf30e29f90e5f3e0f1a9; https://huntr.dev/bounties/dd56e7a0-9dff-48fc-bc59-9a22d91869eb; https://github.com/openemr/openemr/commit/c1c0805696ca68577c37bf30e29f90e5f3e0f1a9
CVE: CVE-2023-2943
Published: 2023-05-27
Description: Code Injection in GitHub repository openemr/openemr prior to 7.0.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/openemr/openemr/commit/c1c0805696ca68577c37bf30e29f90e5f3e0f1a9; https://huntr.dev/bounties/4190f944-dc2c-4624-9abf-31479456faa9; https://github.com/openemr/openemr/commit/c1c0805696ca68577c37bf30e29f90e5f3e0f1a9
CVE: CVE-2023-2944
Published: 2023-05-27
Description: Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-284
References: https://github.com/openemr/openemr/commit/723ac5d78080d1b8542f47673988cd63e0389d25; https://huntr.dev/bounties/0d67dcb1-acc0-4d5d-bb69-a09d1bc9fa1d; https://github.com/openemr/openemr/commit/723ac5d78080d1b8542f47673988cd63e0389d25