deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-35342
Published: 2024-05-28
Description: Certain Anpviz products allow unauthenticated users to modify or disable camera related settings such as microphone volume, speaker volume, LED lighting, NTP, motion detection, etc. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L, YM800N_N2, YMF50B, YM800SV2, YM500L8, and YM200E10 firmware v3.2.2.2 and lower and possibly more vendors/models of IP camera.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-306
References: https://willgu.es/pages/anpviz-ip-camera-vuln.html; https://willgu.es/pages/anpviz-ip-camera-vuln.html
CVE: CVE-2024-35343
Published: 2024-05-28
Description: Certain Anpviz products allow unauthenticated users to download arbitrary files from the device's filesystem via a HTTP GET request to the /playback/ URI. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L, YM800N_N2, YMF50B, YM800SV2, YM500L8, and YM200E10 (IP Cameras) firmware v3.2.2.2 and lower and possibly more vendors/models of IP camera.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://willgu.es/pages/anpviz-ip-camera-vuln.html; https://willgu.es/pages/anpviz-ip-camera-vuln.html
CVE: CVE-2024-35344
Published: 2024-05-28
Description: Certain Anpviz products contain a hardcoded cryptographic key stored in the firmware of the device. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L, YM800N_N2, YMF50B, YM800SV2, YM500L8, and YM200E10 firmware v3.2.2.2 and lower and possibly more vendors/models of IP camera.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-321
References: https://willgu.es/pages/anpviz-ip-camera-vuln.html; https://willgu.es/pages/anpviz-ip-camera-vuln.html
CVE: CVE-2024-35401
Published: 2024-05-28
Description: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-77
References: http://totolink.com; https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/UploadFirmwareFile/README.md; http://totolink.com
CVE: CVE-2024-35403
Published: 2024-05-28
Description: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setIpPortFilterRules
CVSS Score: 2.7 (LOW)
CWE: CWE-121
References: https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/setIpPortFilterRules/README.md; https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/setIpPortFilterRules/README.md
CVE: CVE-2024-35563
Published: 2024-05-28
Description: CDG-Server-V5.6.2.126.139 and earlier was discovered to contain a SQL injection vulnerability via the permissionId parameter in CDGTempPermissions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://cdg.com; https://github.com/helloBegin/blog/tree/main; https://www.esafenet.com/dzwdaqglxt
CVE: CVE-2024-33402
Published: 2024-05-28
Description: A SQL injection vulnerability in /model/approve_petty_cash.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%204.pdf; https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%204.pdf
CVE: CVE-2023-30305
Published: 2024-05-28
Description: An issue discovered in Linksys E5600 routers allows attackers to hijack TCP sessions which could lead to a denial of service.
CVSS Score: 7.5 (HIGH)
References: https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/; https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/
CVE: CVE-2023-30311
Published: 2024-05-28
Description: An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which could lead to a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/; https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/
CVE: CVE-2023-43842
Published: 2024-05-28
Description: Incorrect access control in the account management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to alter user and administrator accounts credentials via HTTP POST request.
CVSS Score: 7.3 (HIGH)
CWE: CWE-416
References: https://github.com/setersora/pe6208; https://github.com/setersora/pe6208
CVE: CVE-2023-43843
Published: 2024-05-28
Description: Incorrect access control in the account management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to read user and administrator accounts passwords via HTTP GET request.
CVSS Score: 7.3 (HIGH)
CWE: CWE-125
References: https://github.com/setersora/pe6208; https://github.com/setersora/pe6208
CVE: CVE-2023-43844
Published: 2024-05-28
Description: Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged web interface account. The user is not asked to change the credentials after first login. If not changed, attackers can log in to the web interface and gain administrator privileges.
CVSS Score: 8.0 (HIGH)
CWE: CWE-1392
References: https://github.com/setersora/pe6208; https://github.com/setersora/pe6208
CVE: CVE-2023-43845
Published: 2024-05-28
Description: Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged telnet account. The user is not asked to change the credentials after first login. If not changed, attackers can log in to the telnet console and gain administrator privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://github.com/setersora/pe6208; https://github.com/setersora/pe6208
CVE: CVE-2023-43846
Published: 2024-05-28
Description: Incorrect access control in logs management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote attackers to get the device logs via HTTP GET request. The logs contain such information as user names and IP addresses used in the infrastructure. This information may help the attackers to conduct further attacks in the infrastructure.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://github.com/setersora/pe6208; https://github.com/setersora/pe6208
CVE: CVE-2023-43847
Published: 2024-05-28
Description: Incorrect access control in the outlet control function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to control all the outlets as if they were the administrator via HTTP POST requests.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://github.com/setersora/pe6208; https://github.com/setersora/pe6208
CVE: CVE-2023-43848
Published: 2024-05-28
Description: Incorrect access control in the firewall management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to alter local firewall settings of the device as if they were the administrator via HTTP POST request.
CVSS Score: 8.0 (HIGH)
CWE: CWE-284
References: https://github.com/setersora/pe6208; https://github.com/setersora/pe6208
CVE: CVE-2023-43849
Published: 2024-05-28
Description: Incorrect access control in firmware upgrade function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to submit a firmware image via HTTP POST requests. This may result in DoS or remote code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://github.com/setersora/pe6208; https://github.com/setersora/pe6208
CVE: CVE-2023-43850
Published: 2024-05-28
Description: Improper input validation in the user management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to cause a partial DoS of web interface via HTTP POST request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1286
References: https://github.com/setersora/pe6208; https://github.com/setersora/pe6208
CVE: CVE-2024-24919
Published: 2024-05-28
Description: Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
CVSS Score: 8.6 (HIGH)
CWE: CWE-200
References: https://support.checkpoint.com/results/sk/sk182336; https://support.checkpoint.com/results/sk/sk182336; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-24919
CVE: CVE-2024-33450
Published: 2024-05-28
Description: SQL Injection in Finereport v.8.0 allows a remote attacker to obtain sensitive information
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://gist.github.com/DKGIXL/1c8bddeb6c5f083ccc3a7bcecfe40398; https://gist.github.com/DKGIXL/1c8bddeb6c5f083ccc3a7bcecfe40398
CVE: CVE-2024-36107
Published: 2024-05-28
Description: MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. `If-Modified-Since` and `If-Unmodified-Since` headers when used with anonymous requests by sending a random object name requests can be used to determine if an object exists or not on the server on a specific bucket and also gain access to some amount of
information such as  `Last-Modified (of the latest version)`, `Etag (of the latest version)`, `x-amz-version-id (of the latest version)`, `Expires (metadata value of the latest version)`, `Cache-Control (metadata value of the latest version)`. This conditional check was being honored before validating if the anonymous access is indeed allowed on the metadata of an object. This issue has been addressed in commit `e0fe7cc3917`. Users must upgrade to RELEASE.2024-05-27T19-17-46Z for the fix. There are no known workarounds for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/If-Modified-Since; https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/If-Unmodified-Since; https://github.com/minio/minio/commit/e0fe7cc391724fc5baa85b45508f425020fe4272
CVE: CVE-2024-36109
Published: 2024-05-28
Description: CoCalc is web-based software that enables collaboration in research, teaching, and scientific publishing. In affected versions the markdown parser allows `<script>` tags to be included which execute when published. This issue has been addressed in commit `419862a9c9879c`. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79
References: https://github.com/sagemathinc/cocalc/commit/419862a9c9879c; https://github.com/sagemathinc/cocalc/security/advisories/GHSA-8w44-hggw-p5rf; https://github.com/sagemathinc/cocalc/commit/419862a9c9879c
CVE: CVE-2024-36110
Published: 2024-05-28
Description: ansibleguy-webui is an open source WebUI for using Ansible. Multiple forms in versions < 0.0.21 allowed injection of HTML elements. These are returned to the user after executing job actions and thus evaluated by the browser. These issues have been addressed in version 0.0.21 (0.0.21.post2 on pypi). Users are advised to upgrade. There are no known workarounds for these issues.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79
References: https://github.com/ansibleguy/webui/commit/7737b47e7f7ddbfec7b1418c[PII_REDACTED]18d522; https://github.com/ansibleguy/webui/files/15358522/Report.pdf; https://github.com/ansibleguy/webui/issues/44
CVE: CVE-2024-5433
Published: 2024-05-28
Description: The Campbell Scientific CSI Web Server supports a command that will return the most recent file that matches a given expression. A specially crafted expression can lead to a path traversal vulnerability. This command combined with a specially crafted expression allows anonymous, unauthenticated access (allowed by default) by an attacker to files and directories outside of the webserver root directory they should be restricted to.
CWE: CWE-22
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-149-01; https://www.cisa.gov/news-events/ics-advisories/icsa-24-149-01
CVE: CVE-2024-5434
Published: 2024-05-28
Description: The Campbell Scientific CSI Web Server stores web authentication credentials in a file with a specific file name. Passwords within that file are stored in a weakly encoded format. There is no known way to remotely access the file unless it has been manually renamed. However, if an attacker were to gain access to the file, passwords could be decoded and reused to gain access.
CWE: CWE-261
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-149-01; https://www.cisa.gov/news-events/ics-advisories/icsa-24-149-01
CVE: CVE-2022-45171
Published: 2024-05-28
Description: An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Unrestricted Upload of a File with a Dangerous Type can occur under the vShare web site section. A remote user, authenticated to the product, can arbitrarily upload potentially dangerous files without restrictions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2023-30306
Published: 2024-05-28
Description: An issue discovered in Mercury x30g, Mercury YR1800XG routers allows attackers to hijack TCP sessions which could lead to a denial of service.
CVSS Score: 4.3 (MEDIUM)
References: https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/; https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/
CVE: CVE-2023-30307
Published: 2024-05-28
Description: An issue discovered in TP-LINK TL-R473GP-AC, TP-LINK XDR6020, TP-LINK TL-R479GP-AC, TP-LINK TL-R4239G, TP-LINK TL-WAR1200L, and TP-LINK TL-R476G routers allows attackers to hijack TCP sessions which could lead to a denial of service.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-384
References: https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/; https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/
CVE: CVE-2023-30308
Published: 2024-05-28
Description: An issue discovered in Ruijie EG210G-P, Ruijie EG105G-V2, Ruijie NBR, and Ruijie EG105G routers allows attackers to hijack TCP sessions which could lead to a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-203
References: https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/; https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/
CVE: CVE-2023-30309
Published: 2024-05-28
Description: An issue discovered in D-Link DI-7003GV2 routers allows attackers to hijack TCP sessions which could lead to a denial of service.
CVSS Score: 5.7 (MEDIUM)
References: https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/; https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/
CVE: CVE-2023-30310
Published: 2024-05-28
Description: An issue discovered in Comfast Comfast CF-616AC routers allows attackers to hijack TCP sessions which could lead to a denial of service.
CVSS Score: 7.5 (HIGH)
References: https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/; https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/
CVE: CVE-2023-30313
Published: 2024-05-28
Description: An issue discovered in Wavlink QUANTUM D2G routers allows attackers to hijack TCP sessions which could lead to a denial of service.
CVSS Score: 7.5 (HIGH)
References: https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/; https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/
CVE: CVE-2023-46694
Published: 2024-05-28
Description: Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, potentially enabling them to execute remote commands. This flaw exists due to the application's failure to enforce proper authentication controls when accessing the Ckeditor file manager functionality.
CVSS Score: 8.1 (HIGH)
CWE: CWE-434
References: https://github.com/invisiblebyte/CVE-2023-46694; https://github.com/invisiblebyte/CVE-2023-46694
CVE: CVE-2024-28060
Published: 2024-05-28
Description: An issue was discovered in Apiris Kafeo 6.4.4. It permits DLL hijacking, allowing a user to trigger the execution of arbitrary code every time the product is executed.
CVSS Score: 7.3 (HIGH)
CWE: CWE-426
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2024-28060; https://excellium-services.com/cert-xlm-advisory/cve-2024-28060/; https://excellium-services.com/cert-xlm-advisory/cve-2024-28060/
CVE: CVE-2024-28061
Published: 2024-05-28
Description: An issue was discovered in Apiris Kafeo 6.4.4. It permits a bypass, of the protection in place, to access to the data stored in the embedded database file.
CVSS Score: 6.3 (MEDIUM)
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2024-28061; https://excellium-services.com/cert-xlm-advisory/cve-2024-28061/; https://excellium-services.com/cert-xlm-advisory/cve-2024-28061/
CVE: CVE-2024-35510
Published: 2024-05-28
Description: An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.114 allows attackers to execute arbitrary code via uploading a crafted file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/QianGeG/CVE/issues/14; https://github.com/QianGeG/CVE/issues/14
CVE: CVE-2024-35581
Published: 2024-05-28
Description: A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Borrower Name input field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-94
References: https://github.com/r04i7/CVE/blob/main/CVE-2024-35581.md; https://owasp.org/www-community/attacks/xss/; https://portswigger.net/web-security/cross-site-scripting/stored
CVE: CVE-2024-35582
Published: 2024-05-28
Description: A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Department input field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/r04i7/CVE/blob/main/CVE-2024-35582.md; https://owasp.org/www-community/attacks/xss/; https://portswigger.net/web-security/cross-site-scripting/stored
CVE: CVE-2024-35583
Published: 2024-05-28
Description: A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Remarks input field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/r04i7/CVE/blob/main/CVE-2024-35583.md; https://owasp.org/www-community/attacks/xss/; https://portswigger.net/web-security/cross-site-scripting/stored
CVE: CVE-2024-22641
Published: 2024-05-28
Description: TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted SVG file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://github.com/zunak/CVE-2024-22641; https://github.com/zunak/CVE-2024-22641; https://lists.debian.org/debian-lts-announce/2025/06/msg00004.html
CVE: CVE-2024-35226
Published: 2024-05-28
Description: Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. In affected versions template authors could inject php code by choosing a malicious file name for an extends-tag. Sites that cannot fully trust template authors should update asap. All users are advised to update. There is no patch for users on the v3 branch. There are no known workarounds for this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://github.com/smarty-php/smarty/commit/0be92bc8a6fb83e6e0d883946f7e7c09ba4e857a; https://github.com/smarty-php/smarty/security/advisories/GHSA-4rmg-292m-wg3w; https://github.com/smarty-php/smarty/commit/0be92bc8a6fb83e6e0d883946f7e7c09ba4e857a
CVE: CVE-2024-35239
Published: 2024-05-28
Description: Umbraco Commerce is an open source dotnet web forms solution. In affected versions an authenticated user that has access to edit Forms may inject unsafe code into Forms components. This issue can be mitigated by configuring TitleAndDescription:AllowUnsafeHtmlRendering after upgrading to one of the patched versions (13.0.1, 12.2.2, 10.5.3, 8.13.13).
CVSS Score: 2.7 (LOW)
CWE: CWE-79
References: https://docs.umbraco.com/umbraco-forms/developer/configuration#editing-configuration-values; https://docs.umbraco.com/umbraco-forms/release-notes#id-13.0.1-january-16th-2024; https://docs.umbraco.com/umbraco-forms/v/10.forms.latest/release-notes
CVE: CVE-2024-35240
Published: 2024-05-28
Description: Umbraco Commerce is an open source dotnet ecommerce solution. In affected versions there exists a stored Cross-site scripting (XSS) issue which would enable attackers to inject malicious code into Print Functionality. This issue has been addressed in versions 12.1.4, and 10.0.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://docs.umbraco.com/umbraco-commerce/release-notes#id-13.0.0-december-13th-2023; https://github.com/umbraco/Umbraco.Commerce.Issues/security/advisories/GHSA-rpj9-xjwm-wr6w; https://docs.umbraco.com/umbraco-commerce/release-notes#id-13.0.0-december-13th-2023
CVE: CVE-2024-35511
Published: 2024-05-28
Description: phpgurukul Men Salon Management System v2.0 is vulnerable to SQL Injection via the "username" parameter of /msms/admin/index.php.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89
References: https://github.com/efekaanakkar/CVE-2024-35511/blob/main/Men%20Salon%20Management%20System%20Using%20PHP%20and%20MySQL.md; https://github.com/efekaanakkar/CVE-2024-35511/blob/main/Men%20Salon%20Management%20System%20Using%20PHP%20and%20MySQL.md
CVE: CVE-2024-35548
Published: 2024-05-28
Description: A SQL injection vulnerability in Mybatis plus versions below 3.5.6 allows remote attackers to obtain database information via a Boolean blind injection. NOTE: the vendor's position is that this can only occur in a misconfigured application; the documentation discusses how to develop applications that avoid SQL injection.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://baomidou.com/reference/about-cve/; https://github.com/baomidou/mybatis-plus/issues/6167; https://baomidou.com/reference/about-cve/
CVE: CVE-2023-30312
Published: 2024-05-28
Description: An issue discovered in OpenWrt 18.06, 19.07, 21.02, 22.03, and beyond allows off-path attackers to hijack TCP sessions, which could lead to a denial of service, impersonating the client to the server (e.g., for access to files over FTP), and impersonating the server to the client (e.g., to deliver false information from a finance website). This occurs because nf_conntrack_tcp_no_window_check is true by default.
CVSS Score: 7.3 (HIGH)
CWE: CWE-203
References: https://blog.apnic.net/2024/06/18/off-path-tcp-hijacking-in-nat-enabled-wi-fi-networks/; https://news.ycombinator.com/item?id=40723150; https://openwrt.org/docs/guide-developer/security