deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-38170
Published: 2024-08-13
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38170
CVE: CVE-2024-38171
Published: 2024-08-13
Description: Microsoft PowerPoint Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38171
CVE: CVE-2024-38172
Published: 2024-08-13
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38172
CVE: CVE-2024-38173
Published: 2024-08-13
Description: Microsoft Outlook Remote Code Execution Vulnerability
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-73
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38173
CVE: CVE-2024-38177
Published: 2024-08-13
Description: Windows App Installer Spoofing Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-116
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38177
CVE: CVE-2024-38178
Published: 2024-08-13
Description: Scripting Engine Memory Corruption Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38178; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38178
CVE: CVE-2024-38180
Published: 2024-08-13
Description: Windows SmartScreen Security Feature Bypass Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38180
CVE: CVE-2024-38184
Published: 2024-08-13
Description: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38184; https://massgrave.dev/blog/keyhole; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1964
CVE: CVE-2024-38185
Published: 2024-08-13
Description: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38185; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1965
CVE: CVE-2024-38186
Published: 2024-08-13
Description: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-367
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38186; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1966
CVE: CVE-2024-38187
Published: 2024-08-13
Description: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38187; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1969
CVE: CVE-2024-38189
Published: 2024-08-13
Description: Microsoft Project Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38189; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38189
CVE: CVE-2024-38191
Published: 2024-08-13
Description: Kernel Streaming Service Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38191
CVE: CVE-2024-38193
Published: 2024-08-13
Description: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38193; https://www.exploit-db.com/exploits/52284; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38193
CVE: CVE-2024-38195
Published: 2024-08-13
Description: Azure CycleCloud Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38195
CVE: CVE-2024-38196
Published: 2024-08-13
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38196
CVE: CVE-2024-38197
Published: 2024-08-13
Description: Microsoft Teams for iOS Spoofing Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-451
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38197
CVE: CVE-2024-38198
Published: 2024-08-13
Description: Windows Print Spooler Elevation of Privilege Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-345
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38198
CVE: CVE-2024-38199
Published: 2024-08-13
Description: Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38199
CVE: CVE-2024-38201
Published: 2024-08-13
Description: Azure Stack Hub Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38201
CVE: CVE-2024-38211
Published: 2024-08-13
Description: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVSS Score: 8.2 (HIGH)
CWE: CWE-601, CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38211
CVE: CVE-2024-38213
Published: 2024-08-13
Description: Windows Mark of the Web Security Feature Bypass Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38213; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38213
CVE: CVE-2024-38214
Published: 2024-08-13
Description: Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38214
CVE: CVE-2024-38215
Published: 2024-08-13
Description: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38215
CVE: CVE-2024-38223
Published: 2024-08-13
Description: Windows Initial Machine Configuration Elevation of Privilege Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38223
CVE: CVE-2024-6079
Published: 2024-08-13
Description: A vulnerability exists in the Rockwell Automation Emulate3D™, which could be leveraged to execute a DLL Hijacking attack. The application loads shared libraries, which are readable and writable by any user. If exploited, a malicious user could leverage a malicious dll and perform a remote code execution attack.
CWE: CWE-610
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD%201683.html
CVE: CVE-2024-7567
Published: 2024-08-13
Description: A denial-of-service vulnerability exists via the CIP/Modbus port in the Rockwell Automation Micro850/870 (2080 -L50E/2080 -L70E). If exploited, the CIP/Modbus communication may be disrupted for short duration.
CWE: CWE-400
References: https://https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1684.html
CVE: CVE-2024-7733
Published: 2024-08-13
Description: A vulnerability, which was classified as problematic, was found in FastCMS up to 0.1.5. Affected is an unknown function of the component New Article Category Page. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://gitee.com/xjd2020/fastcms/issues/IAI8T6; https://vuldb.com/?ctiid.274350; https://vuldb.com/?id.274350
CVE: CVE-2024-7569
Published: 2024-08-13
Description: An information disclosure vulnerability in Ivanti ITSM on-prem and Neurons for ITSM versions 2023.4 and earlier allows an unauthenticated attacker to obtain the OIDC client secret via debug information.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-215, CWE-922
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-CVE-2024-7569-CVE-2024-7570
CVE: CVE-2024-7570
Published: 2024-08-13
Description: Improper certificate validation in Ivanti ITSM on-prem and Neurons for ITSM Versions 2023.4 and earlier allows a remote attacker in a MITM position to craft a token that would allow access to ITSM as any user.
CVSS Score: 8.3 (HIGH)
CWE: CWE-295, CWE-295
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-CVE-2024-7569-CVE-2024-7570
CVE: CVE-2024-7593
Published: 2024-08-13
Description: Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-303, CWE-287
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Virtual-Traffic-Manager-vTM-CVE-2024-7593; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-7593
CVE: CVE-2024-7738
Published: 2024-08-13
Description: A vulnerability, which was classified as problematic, has been found in yzane vscode-markdown-pdf 1.5.0. Affected by this issue is some unknown functionality of the component Markdown File Handler. The manipulation leads to pathname traversal. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.3 (LOW)
CWE: CWE-21, CWE-22
References: https://github.com/abhi-ingle/Vulnerability-Research/blob/main/POC/Arbitrary%20File%20Read/file_read_report.md; https://github.com/abhi-ingle/Vulnerability-Research/blob/main/POC/Arbitrary%20File%20Read/poc_arbitrary_file_read.mp4; https://vuldb.com/?ctiid.274358
CVE: CVE-2024-7739
Published: 2024-08-13
Description: A vulnerability, which was classified as problematic, was found in yzane vscode-markdown-pdf 1.5.0. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://github.com/abhi-ingle/Vulnerability-Research/blob/main/POC/Script%20Injection/poc_script_inject.mp4; https://github.com/abhi-ingle/Vulnerability-Research/blob/main/POC/Script%20Injection/script_injection_report.md; https://vuldb.com/?ctiid.274359
CVE: CVE-2024-42368
Published: 2024-08-13
Description: OpenTelemetry, also known as OTel, is a vendor-neutral open source Observability framework for instrumenting, generating, collecting, and exporting telemetry data such as traces, metrics, and logs. The bearertokenauth extension's server authenticator performs a simple, non-constant time string comparison of the received & configured bearer tokens. This impacts anyone using the `bearertokenauth` server authenticator. Malicious clients with network access to the collector may perform a timing attack against a collector with this authenticator to guess the configured token, by iteratively sending tokens and comparing the response time. This would allow an attacker to introduce fabricated or bad data into the collector's telemetry pipeline. The observable timing vulnerability was fixed by using constant-time comparison in  0.107.0
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-208
References: https://github.com/open-telemetry/opentelemetry-collector-contrib/commit/c9bd3eff0bb357d9c812a0d8defd3b09db95699a; https://github.com/open-telemetry/opentelemetry-collector-contrib/pull/34516; https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-rfxf-mf63-cpqv
CVE: CVE-2024-7740
Published: 2024-08-13
Description: A vulnerability has been found in wanglongcn ltcms 1.0.20 and classified as critical. This vulnerability affects the function download of the file /api/test/download of the component API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-918
References: https://github.com/DeepMountains/Mirage/blob/main/CVE14-1.md; https://vuldb.com/?ctiid.274360; https://vuldb.com/?id.274360
CVE: CVE-2024-7741
Published: 2024-08-13
Description: A vulnerability was found in wanglongcn ltcms 1.0.20 and classified as critical. This issue affects the function downloadFile of the file /api/file/downloadfile of the component API Endpoint. The manipulation of the argument file leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/DeepMountains/Mirage/blob/main/CVE14-2.md; https://vuldb.com/?ctiid.274361; https://vuldb.com/?id.274361
CVE: CVE-2024-7742
Published: 2024-08-13
Description: A vulnerability was found in wanglongcn ltcms 1.0.20. It has been classified as critical. Affected is the function multiDownload of the file /api/file/multiDownload of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-918
References: https://github.com/DeepMountains/Mirage/blob/main/CVE14-3.md; https://vuldb.com/?ctiid.274362; https://vuldb.com/?id.274362
CVE: CVE-2024-7743
Published: 2024-08-13
Description: A vulnerability was found in wanglongcn ltcms 1.0.20. It has been declared as critical. Affected by this vulnerability is the function downloadUrl of the file /api/file/downloadUrl of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-918
References: https://github.com/DeepMountains/Mirage/blob/main/CVE14-4.md; https://vuldb.com/?ctiid.274363; https://vuldb.com/?id.274363
CVE: CVE-2024-7748
Published: 2024-08-13
Description: A vulnerability, which was classified as critical, has been found in SourceCodester Accounts Manager App 1.0. This issue affects some unknown processing of the file /endpoint/delete-account.php. The manipulation of the argument account leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/joinia/webray.com.cn/blob/main/Accounts-Manager-App/Accounts-Manager-Appsql.md; https://vuldb.com/?ctiid.274367; https://vuldb.com/?id.274367
CVE: CVE-2024-7749
Published: 2024-08-13
Description: A vulnerability, which was classified as problematic, was found in SourceCodester Accounts Manager App 1.0. Affected is an unknown function of the file /endpoint/add-account.php. The manipulation of the argument account_name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/joinia/webray.com.cn/blob/main/Accounts-Manager-App/Accounts-Manager-Appxss.md; https://vuldb.com/?ctiid.274368; https://vuldb.com/?id.274368
CVE: CVE-2024-28986
Published: 2024-08-13
Description: SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. 

While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing.  

However, out of an abundance of caution, we recommend all Web Help Desk customers apply the patch, which is now available.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://support.solarwinds.com/SuccessCenter/s/article/WHD-12-8-3-Hotfix-1; https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28986; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-28986
CVE: CVE-2024-7750
Published: 2024-08-13
Description: A vulnerability has been found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /medicines.php. The manipulation of the argument medicine_name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Wsstiger/cve/blob/main/Clinic's_sql.md; https://vuldb.com/?ctiid.274369; https://vuldb.com/?id.274369
CVE: CVE-2024-7751
Published: 2024-08-13
Description: A vulnerability was found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /update_medicine.php. The manipulation of the argument hidden_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Wsstiger/cve/blob/main/Clinic's_sql2.md; https://vuldb.com/?ctiid.274370; https://vuldb.com/?id.274370
CVE: CVE-2024-38163
Published: 2024-08-14
Description: Windows Update Stack Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38163
CVE: CVE-2024-7752
Published: 2024-08-14
Description: A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /update_medicine.php. The manipulation of the argument medicine_name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/Wsstiger/cve/blob/main/Clinic's_xss.md; https://vuldb.com/?ctiid.274371; https://vuldb.com/?id.274371
CVE: CVE-2024-7753
Published: 2024-08-14
Description: A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user_images/. The manipulation leads to direct request. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-425
References: https://github.com/Wsstiger/cve/blob/main/Clinic's_Directory.md; https://vuldb.com/?ctiid.274372; https://vuldb.com/?id.274372
CVE: CVE-2024-7754
Published: 2024-08-14
Description: A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ajax/check_medicine_name.php. The manipulation of the argument user_name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Wsstiger/cve/blob/main/Clinic's_sql3.md; https://vuldb.com/?ctiid.274373; https://vuldb.com/?id.274373
CVE: CVE-2024-20082
Published: 2024-08-14
Description: In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01182594; Issue ID: MSV-1529.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-119
References: https://corp.mediatek.com/product-security-bulletin/August-2024
CVE: CVE-2024-20083
Published: 2024-08-14
Description: In venc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08810810 / ALPS08805789; Issue ID: MSV-1502.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2024
CVE: CVE-2024-36136
Published: 2024-08-14
Description: An off-by-one error in WLInfoRailService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting in a DoS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-193, CWE-193
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-4-CVE-2024-38652-CVE-2024-38653-CVE-2024-36136-CVE-2024-37399-CVE-2024-37373
CVE: CVE-2024-37373
Published: 2024-08-14
Description: Improper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote authenticated attacker with admin rights to achieve RCE.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-4-CVE-2024-38652-CVE-2024-38653-CVE-2024-36136-CVE-2024-37399-CVE-2024-37373
CVE: CVE-2024-37399
Published: 2024-08-14
Description: A NULL pointer dereference in WLAvalancheService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting in a DoS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-4-CVE-2024-38652-CVE-2024-38653-CVE-2024-36136-CVE-2024-37399-CVE-2024-37373
CVE: CVE-2024-38652
Published: 2024-08-14
Description: Path traversal in the skin management component of Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to achieve denial of service via arbitrary file deletion.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-4-CVE-2024-38652-CVE-2024-38653-CVE-2024-36136-CVE-2024-37399-CVE-2024-37373
CVE: CVE-2024-38653
Published: 2024-08-14
Description: XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611, CWE-611
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-4-CVE-2024-38652-CVE-2024-38653-CVE-2024-36136-CVE-2024-37399-CVE-2024-37373
CVE: CVE-2024-7728
Published: 2024-08-14
Description: The specific CGI of the CAYIN Technology CMS does not properly validate user input, allowing a remote attacker with administrator privileges to inject OS commands into the specific parameter and execute them on the remote server.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://resource1.cayintech.com/patch/; https://www.twcert.org.tw/en/cp-139-8002-b6167-2.html; https://www.twcert.org.tw/tw/cp-132-8001-8416d-1.html
CVE: CVE-2024-7729
Published: 2024-08-14
Description: The CAYIN Technology CMS lacks proper access control, allowing unauthenticated remote attackers to download arbitrary CGI files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: https://resource1.cayintech.com/patch/; https://www.twcert.org.tw/en/cp-139-8004-ed9aa-2.html; https://www.twcert.org.tw/tw/cp-132-8003-5543e-1.html