deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-52412
Published: 2024-11-16
Description: Deserialization of Untrusted Data vulnerability in Stephen Cui Xin allows Object Injection.This issue affects Xin: from n/a through 1.0.8.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://patchstack.com/database/vulnerability/xin/wordpress-xin-theme-1-0-8-1-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2024-52413
Published: 2024-11-16
Description: Deserialization of Untrusted Data vulnerability in dmcwebzone Airin Blog airin-blog allows Object Injection.This issue affects Airin Blog: from n/a through <= 1.6.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://patchstack.com/database/Wordpress/Theme/airin-blog/vulnerability/wordpress-airin-blog-theme-1-6-1-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2024-52414
Published: 2024-11-16
Description: Deserialization of Untrusted Data vulnerability in Anthony Carbon WDES Responsive Mobile Menu wdes-responsive-mobile-menu allows Object Injection.This issue affects WDES Responsive Mobile Menu: from n/a through <= 5.3.18.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://patchstack.com/database/Wordpress/Plugin/wdes-responsive-mobile-menu/vulnerability/wordpress-wdes-responsive-mobile-menu-plugin-5-3-18-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2024-52415
Published: 2024-11-16
Description: Cross-Site Request Forgery (CSRF) vulnerability in skipstorm SK WP Settings Backup sk-wp-settings-backup allows Object Injection.This issue affects SK WP Settings Backup: from n/a through <= 1.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/sk-wp-settings-backup/vulnerability/wordpress-sk-wp-settings-backup-plugin-1-0-csrf-to-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2024-52416
Published: 2024-11-16
Description: Missing Authorization vulnerability in Eugen Bobrowski Debug Tool debug-tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through <= 2.2.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/debug-tool/vulnerability/wordpress-debug-tool-plugin-2-2-remote-code-execution-vulnerability?_s_id=cve
CVE: CVE-2024-52397
Published: 2024-11-16
Description: Unrestricted Upload of File with Dangerous Type vulnerability in Davor Zeljkovic Convert Docx2post convert-docx2post allows Upload a Web Shell to a Web Server.This issue affects Convert Docx2post: from n/a through <= 1.4.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-434
References: https://patchstack.com/database/Wordpress/Plugin/convert-docx2post/vulnerability/wordpress-convert-docx2post-plugin-1-4-arbitrary-file-upload-vulnerability?_s_id=cve
CVE: CVE-2024-52867
Published: 2024-11-17
Description: guix-daemon in GNU Guix before 5ab3c4c allows privilege escalation because build outputs are accessible by local users before file metadata concerns (e.g., for setuid and setgid programs) are properly addressed. The vulnerability can be remediated within the product via certain pull, reconfigure, and restart actions. Both 5ab3c4c and 5582241 are needed to resolve the vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-276
References: https://git.savannah.gnu.org/cgit/guix.git/commit/?id=558224140dab669cabdaebabff18504a066c48d4; https://git.savannah.gnu.org/cgit/guix.git/commit/?id=5ab3c4c1e43ebb[PII_REDACTED]91db0ea3519986e1; https://guix.gnu.org/en/blog/2024/build-user-takeover-vulnerability/
CVE: CVE-2024-52871
Published: 2024-11-17
Description: In Flagsmith before 2.134.1, it is possible to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting.
CVSS Score: 7.5 (HIGH)
References: https://github.com/Flagsmith/flagsmith/compare/v2.134.0...v2.134.1; https://github.com/Flagsmith/flagsmith/pull/4454
CVE: CVE-2024-52872
Published: 2024-11-17
Description: In Flagsmith before 2.134.1, the get_document endpoint is not correctly protected by permissions.
CVSS Score: 7.5 (HIGH)
References: https://github.com/Flagsmith/flagsmith/compare/v2.134.0...v2.134.1; https://github.com/Flagsmith/flagsmith/pull/4459
CVE: CVE-2024-52876
Published: 2024-11-17
Description: Holy Stone Remote ID Module HSRID01, firmware distributed with the Drone Go2 mobile application before 1.1.8, allows unauthenticated "remote power off" actions (in broadcast mode) via multiple read operations on the ASTM Remote ID (0xFFFA) GATT.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://coalfire.com/the-coalfire-blog/holy-stone-remote-id-vulnerability-disclosure
CVE: CVE-2020-25720
Published: 2024-11-17
Description: A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all attributes of the newly created object, including security-sensitive attributes, even after the object's creation. This issue occurs because the administrator owns the object due to the lack of an Access Control List (ACL) at the time of creation and later being recognized as the 'creator owner.' The retained significant rights of the delegated administrator may not be well understood, potentially leading to unintended privilege escalation or security risks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-266
References: https://access.redhat.com/security/cve/CVE-2020-25720; https://bugzilla.redhat.com/show_bug.cgi?id=2305954
CVE: CVE-2023-0657
Published: 2024-11-17
Description: A flaw was found in Keycloak. This issue occurs due to improperly enforcing token types when validating signatures locally. This could allow an authenticated attacker to exchange a logout token for an access token and possibly gain access to data outside of enforced permissions.
CVSS Score: 3.4 (LOW)
CWE: CWE-273
References: https://access.redhat.com/errata/RHSA-2024:1867; https://access.redhat.com/errata/RHSA-2024:1868; https://access.redhat.com/security/cve/CVE-2023-0657
CVE: CVE-2023-1419
Published: 2024-11-17
Description: A script injection vulnerability was found in the Debezium database connector, where it does not properly sanitize some parameters. This flaw allows an attacker to send a malicious request to inject a parameter that may allow the viewing of unauthorized data.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-233
References: https://access.redhat.com/security/cve/CVE-2023-1419; https://bugzilla.redhat.com/show_bug.cgi?id=2178722
CVE: CVE-2023-4639
Published: 2024-11-17
Description: A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized data access or modification. The main threat from this flaw impacts data confidentiality and integrity.
CVSS Score: 7.4 (HIGH)
CWE: CWE-444
References: https://access.redhat.com/errata/RHSA-2024:1674; https://access.redhat.com/errata/RHSA-2024:1675; https://access.redhat.com/errata/RHSA-2024:1676
CVE: CVE-2023-6110
Published: 2024-11-17
Description: A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-237
References: https://access.redhat.com/errata/RHSA-2024:2737; https://access.redhat.com/errata/RHSA-2024:2769; https://access.redhat.com/security/cve/CVE-2023-6110
CVE: CVE-2024-0793
Published: 2024-11-17
Description: A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn.
CVSS Score: 7.7 (HIGH)
CWE: CWE-20
References: https://access.redhat.com/errata/RHSA-2024:0741; https://access.redhat.com/errata/RHSA-2024:1267; https://access.redhat.com/security/cve/CVE-2024-0793
CVE: CVE-2023-43091
Published: 2024-11-17
Description: A flaw was found in GNOME Maps, which is vulnerable to a code injection attack via its service.json configuration file. If the configuration file is malicious, it may execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-79, CWE-94
References: https://bugzilla.redhat.com/show_bug.cgi?id=2239091; https://gitlab.gnome.org/GNOME/gnome-maps/-/commit/d26cd774d524404ef7784e6808f551de83de4bea; https://gitlab.gnome.org/GNOME/gnome-maps/-/issues/588
CVE: CVE-2024-11305
Published: 2024-11-18
Description: A vulnerability classified as critical was found in Altenergy Power Control Software up to 20241108. This vulnerability affects the function get_status_zigbee of the file /index.php/display/status_zigbee. The manipulation of the argument date leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/h0e4a0r1t/h0e4a0r1t.github.io/blob/master/2024/HYO%3BY)v%3B4%5C)jLCjp/Altenergy%20has%20a%20SQL%20injection%20vulnerability_status_zigbee.pdf; https://vuldb.com/?ctiid.284914; https://vuldb.com/?id.284914
CVE: CVE-2024-11306
Published: 2024-11-18
Description: A vulnerability, which was classified as critical, has been found in Altenergy Power Control Software up to 20241108. This issue affects some unknown processing of the file /index.php/display/database/. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other endpoints might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://github.com/h0e4a0r1t/h0e4a0r1t.github.io/blob/master/2024/HYO%3BY)v%3B4%5C)jLCjp/Altenergy%20Power%20Control%20Software%20Information%20Disclosure%20Vulnerability_database.pdf; https://vuldb.com/?ctiid.284915; https://vuldb.com/?id.284915
CVE: CVE-2015-20111
Published: 2024-11-18
Description: miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values, leading to a buffer overflow and significant data leak, a different vulnerability than CVE-2019-12107. In Bitcoin Core before 0.12, remote code execution was possible in conjunction with CVE-2015-6031 exploitation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://bitcoincore.org/en/2024/07/03/disclose_upnp_rce/; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures; https://github.com/miniupnp/miniupnp/commit/4c90b87ce3d[PII_REDACTED]279e8c3daa7731100e6
CVE: CVE-2019-25220
Published: 2024-11-18
Description: Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a "Chain Width Expansion" attack) because a node does not first verify that a presented chain has enough work before committing to store it.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://bitcoincore.org/en/2024/09/18/disclose-headers-oom; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures; https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2019-October/017354.html
CVE: CVE-2024-38828
Published: 2024-11-18
Description: Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://spring.io/security/cve-2024-38828; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-52912
Published: 2024-11-18
Description: Bitcoin Core before 0.21.0 allows a network split that is resultant from an integer overflow (calculating the time offset for newly connecting peers) and an abs64 logic bug.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://bitcoincore.org/en/2024/07/03/disclose-timestamp-overflow/; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
CVE: CVE-2024-52913
Published: 2024-11-18
Description: In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because transaction re-requests are mishandled.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-770
References: https://bitcoincore.org/en/2024/07/03/disclose_already_asked_for/; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
CVE: CVE-2024-52914
Published: 2024-11-18
Description: In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://bitcoincore.org/en/2024/07/03/disclose-orphan-dos/; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
CVE: CVE-2024-52915
Published: 2024-11-18
Description: Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption) via a crafted INV message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://bitcoincore.org/en/2024/07/03/disclose-inv-buffer-blowup/; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
CVE: CVE-2024-52916
Published: 2024-11-18
Description: Bitcoin Core before 0.15.0 allows a denial of service (OOM kill of a daemon process) via a flood of minimum difficulty headers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://bitcoincore.org/en/2024/07/03/disclose-header-spam/; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
CVE: CVE-2024-52917
Published: 2024-11-18
Description: Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.g., large M-SEARCH replies from a fake UPnP device.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://bitcoincore.org/en/2024/07/31/disclose-upnp-oom/; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
CVE: CVE-2024-52918
Published: 2024-11-18
Description: Bitcoin-Qt in Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption and application crash) via a BIP21 r parameter for a URL that has a large file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://bitcoincore.org/en/2024/07/03/disclose-bip70-crash/; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
CVE: CVE-2024-52919
Published: 2024-11-18
Description: Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure (and daemon exit) via a flood of addr messages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: https://bitcoincore.org/en/2024/07/31/disclose-addrman-int-overflow/; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
CVE: CVE-2024-52920
Published: 2024-11-18
Description: Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed GETDATA message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://bitcoincore.org/en/2024/07/03/disclose-getdata-cpu/; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
CVE: CVE-2024-52921
Published: 2024-11-18
Description: In Bitcoin Core before 25.0, a peer can affect the download state of other peers by sending a mutated block.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://bitcoincore.org/en/2024/10/08/disclose-mutated-blocks-hindering-propagation/; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
CVE: CVE-2024-52922
Published: 2024-11-18
Description: In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes of delay when an announcing peer stalls instead of complying with the peer-to-peer protocol specification.
CVSS Score: 6.5 (MEDIUM)
References: https://bitcoincore.org/en/2024/11/05/cb-stall-hindering-propagation/; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
CVE: CVE-2024-52926
Published: 2024-11-18
Description: Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269, CWE-276
References: https://docs.delinea.com/online-help/privilege-manager/release-notes/12.0.2-combined.htm; https://trust.delinea.com/?tcuUid=3be1a12c-97c9-431e-a51a-0c25da19ec86
CVE: CVE-2024-43704
Published: 2024-11-18
Description: Software installed and run as a non-privileged user may conduct improper GPU system calls to gain access to the graphics buffers of a parent process.
CVSS Score: 8.4 (HIGH)
CWE: CWE-668
References: https://www.imaginationtech.com/gpu-driver-vulnerabilities/
CVE: CVE-2024-52940
Published: 2024-11-18
Description: AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address within network traffic. The attacker must know the victim's AnyDesk ID.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: https://download.anydesk.com/changelog.txt; https://github.com/ebrasha/abdal-anydesk-remote-ip-detector; https://x.com/ProfShafiei/status/[PII_REDACTED]17009830
CVE: CVE-2024-11308
Published: 2024-11-18
Description: The DVC from TRCore encrypts files using a hardcoded key. Attackers can use this key to decrypt the files and restore the original content.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-321
References: https://www.twcert.org.tw/en/cp-139-8241-1af92-2.html; https://www.twcert.org.tw/tw/cp-132-8240-562c3-1.html
CVE: CVE-2024-11309
Published: 2024-11-18
Description: The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-23, CWE-22
References: https://www.twcert.org.tw/en/cp-139-8243-3d818-2.html; https://www.twcert.org.tw/tw/cp-132-8242-384a1-1.html
CVE: CVE-2024-11310
Published: 2024-11-18
Description: The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-23, CWE-22
References: https://www.twcert.org.tw/en/cp-139-8245-ad7d7-2.html; https://www.twcert.org.tw/tw/cp-132-8244-c45b5-1.html
CVE: CVE-2024-52941
Published: 2024-11-18
Description: An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24695. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting (XSS) while viewing archived content. This could reflect back to an authenticated user without sanitization if executed by that user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.veritas.com/support/en_US/security/VTS24-013
CVE: CVE-2024-52942
Published: 2024-11-18
Description: An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24696. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting (XSS) while viewing archived content. This could reflect back to an authenticated user without sanitization if executed by that user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.veritas.com/support/en_US/security/VTS24-013
CVE: CVE-2024-52943
Published: 2024-11-18
Description: An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24697. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting (XSS) while viewing archived content. This could reflect back to an authenticated user without sanitization if executed by that user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.veritas.com/support/en_US/security/VTS24-013
CVE: CVE-2024-52944
Published: 2024-11-18
Description: An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting while viewing archived content. This could reflect back to an authenticated user without sanitization if executed by that user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.veritas.com/support/en_US/security/VTS24-013
CVE: CVE-2024-52945
Published: 2024-11-18
Description: An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows Operating System. If a user executes specific NetBackup commands or an attacker uses social engineering techniques to impel the user to execute the commands, a malicious DLL could be loaded, resulting in execution of the attacker's code in the user's security context.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://www.veritas.com/content/support/en_US/security/VTS24-012
CVE: CVE-2024-52946
Published: 2024-11-18
Description: An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentication level if the admin configured an "Adaptative authentication rule" with an increment instead of an absolute value.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/3255; https://lists.debian.org/debian-lts-announce/2024/11/msg00037.html
CVE: CVE-2024-52947
Published: 2024-11-18
Description: A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.20.1 allows remote attackers to inject arbitrary web script or HTML via the url parameter of the upgrade session confirmation page (upgradeSession / forceUpgrade) if the "Upgrade session" plugin has been enabled by an admin
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/3257; https://lists.debian.org/debian-lts-announce/2024/11/msg00037.html
CVE: CVE-2024-5030
Published: 2024-11-18
Description: The CM Table Of Contents  WordPress plugin before 1.2.3 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin perform such action via a CSRF attack
CVSS Score: 3.8 (LOW)
CWE: CWE-352
References: https://wpscan.com/vulnerability/2c2e994c-31bd-4de4-9480-b86f980d4130/
CVE: CVE-2024-11311
Published: 2024-11-18
Description: The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-23, CWE-434, CWE-22, CWE-434
References: https://www.twcert.org.tw/en/cp-139-8247-83457-2.html; https://www.twcert.org.tw/tw/cp-132-8246-d462a-1.html
CVE: CVE-2024-11312
Published: 2024-11-18
Description: The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-23, CWE-434, CWE-22, CWE-434
References: https://www.twcert.org.tw/en/cp-139-8249-65252-2.html; https://www.twcert.org.tw/tw/cp-132-8248-8dac9-1.html
CVE: CVE-2024-11313
Published: 2024-11-18
Description: The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-23, CWE-434, CWE-22, CWE-434
References: https://www.twcert.org.tw/en/cp-139-8251-3455e-2.html; https://www.twcert.org.tw/tw/cp-132-8250-1837b-1.html
CVE: CVE-2024-11314
Published: 2024-11-18
Description: The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-23, CWE-434, CWE-22, CWE-434
References: https://www.twcert.org.tw/en/cp-139-8253-bc363-2.html; https://www.twcert.org.tw/tw/cp-132-8252-91d6a-1.html