deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-7264
Published: 2024-07-31
Description: libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an
ASN.1 Generalized Time field. If given an syntactically incorrect field, the
parser might end up using -1 for the length of the *time fraction*, leading to
a `strlen()` getting performed on a pointer to a heap buffer area that is not
(purposely) null terminated.

This flaw most likely leads to a crash, but can also lead to heap contents
getting returned to the application when
[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2024/07/31/1; https://curl.se/docs/CVE-2024-7264.html; https://curl.se/docs/CVE-2024-7264.json
CVE: CVE-2024-7303
Published: 2024-07-31
Description: A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /request.php of the component Send Blood Request Page. The manipulation of the argument Address/bloodgroup leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273185 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/cl4irv0yance/CVEs/issues/1; https://vuldb.com/?ctiid.273185; https://vuldb.com/?id.273185
CVE: CVE-2024-7306
Published: 2024-07-31
Description: A vulnerability, which was classified as critical, was found in SourceCodester Establishment Billing Management System 1.0. Affected is an unknown function of the file /manage_block.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-273198 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://gist.github.com/topsky979/0d5ec3fac4f1fc895478344be5521575; https://vuldb.com/?ctiid.273198; https://vuldb.com/?id.273198
CVE: CVE-2024-2508
Published: 2024-07-31
Description: The WP Mobile Menu plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_menu_item_icon function in all versions up to, and including, 2.8.4.4. This makes it possible for unauthenticated attackers to add the '_mobmenu_icon' post meta to arbitrary posts with an arbitrary (but sanitized) value. NOTE: Version 2.8.4.4 contains a partial fix for this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset?old_path=%2Fmobile-menu%2Ftrunk%2Fincludes%2Fclass-wp-mobile-menu-core.php&old=3125561&new_path=%2Fmobile-menu%2Ftrunk%2Fincludes%2Fclass-wp-mobile-menu-core.php&new=3125561&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/3cd9569f-3cda-4482-8ccd-c3f362b4e651?source=cve
CVE: CVE-2024-32857
Published: 2024-07-31
Description: Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability.  An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege
CVSS Score: 7.3 (HIGH)
CWE: CWE-427
References: https://www.dell.com/support/kbdoc/en-us/000225474/dsa-2024-242
CVE: CVE-2024-37127
Published: 2024-07-31
Description: Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.dell.com/support/kbdoc/en-us/000225474/dsa-2024-242
CVE: CVE-2024-37129
Published: 2024-07-31
Description: Dell Inventory Collector, versions prior to 12.3.0.6 contains a Path Traversal vulnerability. A local authenticated malicious user could potentially exploit this vulnerability, leading to arbitrary code execution on the system.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.dell.com/support/kbdoc/en-us/000225779/dsa-2024-263
CVE: CVE-2024-37142
Published: 2024-07-31
Description: Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege
CVSS Score: 7.3 (HIGH)
CWE: CWE-427
References: https://www.dell.com/support/kbdoc/en-us/000225474/dsa-2024-242
CVE: CVE-2024-7307
Published: 2024-07-31
Description: A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manage_billing.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273199.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://gist.github.com/topsky979/df642bf14cce32c58d4805b6f6cf44e0; https://vuldb.com/?ctiid.273199; https://vuldb.com/?id.273199
CVE: CVE-2024-7308
Published: 2024-07-31
Description: A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view_bill.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273200.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://gist.github.com/topsky979/c11fd2c1b[PII_REDACTED]de2e58cbf5ff3; https://vuldb.com/?ctiid.273200; https://vuldb.com/?id.273200
CVE: CVE-2024-7309
Published: 2024-07-31
Description: A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. This affects an unknown part of the file entry.php. The manipulation of the argument school leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273201 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/zw-a11y/VUL/blob/main/Record-Management-System-1.md; https://vuldb.com/?ctiid.273201; https://vuldb.com/?id.273201
CVE: CVE-2024-7310
Published: 2024-07-31
Description: A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file sort_user.php. The manipulation of the argument sort leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-273202 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/zw-a11y/VUL/blob/main/Record-Management-System-2.md; https://vuldb.com/?ctiid.273202; https://vuldb.com/?id.273202
CVE: CVE-2024-6725
Published: 2024-07-31
Description: The Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘html’ parameter in all versions up to, and including, 6.11.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with form editing permissions and Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/formidable/trunk/classes/models/fields/FrmFieldType.php#L875; https://plugins.trac.wordpress.org/changeset/3128202/; https://www.wordfence.com/threat-intel/vulnerabilities/id/848cfa72-4211-4576-91c2-4f643e3161c3?source=cve
CVE: CVE-2024-7135
Published: 2024-07-31
Description: The Tainacan plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_file' function in all versions up to, and including, 0.21.7. The function is also vulnerable to directory traversal. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/tainacan/trunk/classes/api/endpoints/class-tainacan-rest-background-processes-controller.php#L370; https://plugins.trac.wordpress.org/browser/tainacan/trunk/classes/api/endpoints/class-tainacan-rest-background-processes-controller.php#L378; https://plugins.trac.wordpress.org/changeset/3127693/
CVE: CVE-2024-7311
Published: 2024-07-31
Description: A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file register.php. The manipulation of the argument Email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273203.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/23588hk/cve/issues/1; https://vuldb.com/?ctiid.273203; https://vuldb.com/?id.273203
CVE: CVE-2024-7320
Published: 2024-07-31
Description: A vulnerability classified as critical has been found in itsourcecode Online Blood Bank Management System 1.0. This affects an unknown part of the file /admin/index.php of the component Admin Login. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273231.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/cl4irv0yance/CVEs/issues/3; https://vuldb.com/?ctiid.273231; https://vuldb.com/?id.273231
CVE: CVE-2024-7321
Published: 2024-07-31
Description: A vulnerability classified as problematic was found in itsourcecode Online Blood Bank Management System 1.0. This vulnerability affects unknown code of the file signup.php of the component User Registration Handler. The manipulation of the argument user leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273232.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://github.com/cl4irv0yance/CVEs/issues/4; https://vuldb.com/?ctiid.273232; https://vuldb.com/?id.273232
CVE: CVE-2024-39379
Published: 2024-07-31
Description: Acrobat for Edge versions 126.0.2592.81 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-39379
CVE: CVE-2024-6208
Published: 2024-07-31
Description: The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpdm_all_packages' shortcode in all versions up to, and including, 3.2.97 due to insufficient input sanitization and output escaping on the 'cols' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/download-manager/trunk/src/Package/views/all-packages-shortcode.php?rev=3097323#L10; https://plugins.trac.wordpress.org/browser/download-manager/trunk/src/Package/views/all-packages-shortcode.php?rev=3097323#L302; https://plugins.trac.wordpress.org/changeset/3126662/
CVE: CVE-2024-31199
Published: 2024-07-31
Description: A “CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')” allows malicious users to permanently inject arbitrary Javascript code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31199
CVE: CVE-2024-31200
Published: 2024-07-31
Description: A “CWE-201: Insertion of Sensitive Information Into Sent Data” affecting the administrative account allows an attacker with physical access to the machine to retrieve the password in cleartext when an administrative session is open in the browser.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-201
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31200
CVE: CVE-2024-31201
Published: 2024-07-31
Description: A “CWE-428: Unquoted Search Path or Element” affects the ThermoscanIP_Scrutation service. Such misconfiguration could be abused in scenarios where incorrect permissions were assigned to the C:\ path to attempt a privilege escalation on the local machine.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-428, CWE-428
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31201
CVE: CVE-2024-31202
Published: 2024-07-31
Description: A “CWE-732: Incorrect Permission Assignment for Critical Resource” in the ThermoscanIP installation folder allows a local attacker to perform a Local Privilege Escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732, CWE-732
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31202
CVE: CVE-2024-31203
Published: 2024-07-31
Description: A “CWE-121: Stack-based Buffer Overflow” in the wd210std.dll dynamic library packaged with the ThermoscanIP installer allows a local attacker to possibly trigger a Denial-of-Service (DoS) condition on the target component.
CVSS Score: 3.3 (LOW)
CWE: CWE-121, CWE-787
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31203
CVE: CVE-2024-37135
Published: 2024-07-31
Description: DM5500 5.16.0.0, contains an information disclosure vulnerability. A local attacker with high privileges could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.
CVSS Score: 3.3 (LOW)
CWE: CWE-256
References: https://www.dell.com/support/kbdoc/en-us/000227424/dsa-2024-290-security-update-for-dell-powerprotect-data-manager-appliance-dm5500-for-multiple-vulnerabilities
CVE: CVE-2024-3082
Published: 2024-07-31
Description: A “CWE-256: Plaintext Storage of a Password” affecting the administrative account allows an attacker with physical access to the machine to retrieve the password in cleartext unless specific security measures at other layers (e.g., full-disk encryption) have been enabled.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-256, CWE-522
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-3082
CVE: CVE-2024-3083
Published: 2024-07-31
Description: A “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploited by remote attackers to perform state-changing operations with administrative privileges by luring authenticated victims into visiting a malicious web page.
CVSS Score: 8.3 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-3083
CVE: CVE-2024-7340
Published: 2024-07-31
Description: The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-20
References: https://github.com/wandb/weave/pull/1657; https://research.jfrog.com/vulnerabilities/wandb-weave-server-remote-arbitrary-file-leak-jfsa-2[PII_REDACTED]48/
CVE: CVE-2024-37898
Published: 2024-07-31
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When a user has view but not edit right on a page in XWiki, that user can delete the page and replace it by a page with new content without having delete right. The previous version of the page is moved into the recycle bin and can be restored from there by an admin. As the user is recorded as deleter, the user would in theory also be able to view the deleted content, but this is not directly possible as rights of the previous version are transferred to the new page and thus the user still doesn't have view right on the page. It therefore doesn't seem to be possible to exploit this to gain any rights. This has been patched in XWiki 14.10.21, 15.5.5 and 15.10.6 by cancelling save operations by users when a new document shall be saved despite the document's existing already.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://github.com/xwiki/xwiki-platform/commit/0bc27d6ec63c8a505ff950e2d1792cb4f773c22e; https://github.com/xwiki/xwiki-platform/commit/56f5d8aab7371d5ba891168f[PII_REDACTED]1322c5; https://github.com/xwiki/xwiki-platform/commit/c5efc1e519e710afdf3c5f40c0fcc300ad77149f
CVE: CVE-2024-37900
Published: 2024-07-31
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When uploading an attachment with a malicious filename, malicious JavaScript code could be executed. This requires a social engineering attack to get the victim into uploading a file with a malicious name. The malicious code is solely executed during the upload and affects only the user uploading the attachment. While this allows performing actions in the name of that user, it seems unlikely that a user wouldn't notice the malicious filename while uploading the attachment. This has been patched in XWiki 14.10.21, 15.5.5, 15.10.6 and 16.0.0.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-96, CWE-94
References: https://github.com/xwiki/xwiki-platform/commit/6cdd69d31d6bf3caa7f40ec55eb317e4e528ad28; https://github.com/xwiki/xwiki-platform/commit/8b8a2d80529b9a9c038014c1eb6c2adc08069dfd; https://github.com/xwiki/xwiki-platform/commit/910a5018a50039e8b24556573dfe342f143ef949
CVE: CVE-2024-37901
Published: 2024-07-31
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit right on any page can perform arbitrary remote code execution by adding instances of `XWiki.SearchSuggestConfig` and `XWiki.SearchSuggestSourceClass` to their user profile or any other page. This compromises the confidentiality, integrity and availability of the whole XWiki installation. This vulnerability has been patched in XWiki 14.10.21, 15.5.5 and 15.10.2.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-95, CWE-862, CWE-94
References: https://github.com/xwiki/xwiki-platform/commit/0b135760514fef73db748986a3311f3edd4a553b; https://github.com/xwiki/xwiki-platform/commit/742cd4591642be4cdcaf68325f17540e0934e64e; https://github.com/xwiki/xwiki-platform/commit/9ce3e0319869b6d8131fc4e0909736f7041566a4
CVE: CVE-2024-39318
Published: 2024-07-31
Description: The Ibexa Admin UI Bundle contains all the necessary parts to run the Ibexa DXP Back Office interface. The file upload widget is vulnerable to XSS payloads in filenames. Access permission to upload files is required. As such, in most cases only authenticated editors and administrators will have the required permission. It is not persistent, i.e. the payload is only executed during the upload. In effect, an attacker will have to trick an editor/administrator into uploading a strangely named file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://developers.ibexa.co/security-advisories/ibexa-sa-2024-004-dom-based-xss-in-file-upload; https://github.com/ezsystems/ezplatform-admin-ui/commit/7a9f991b200fa5a03d49cd07f50577c8bc90a30b; https://github.com/ezsystems/ezplatform-admin-ui/security/advisories/GHSA-gc5h-6jx9-q2qh
CVE: CVE-2024-39694
Published: 2024-07-31
Description: Duende IdentityServer is an OpenID Connect and OAuth 2.x framework for ASP.NET Core. It is possible for an attacker to craft malicious Urls that certain functions in IdentityServer will incorrectly treat as local and trusted. If such a Url is returned as a redirect, some browsers will follow it to a third-party, untrusted site. Note: by itself, this vulnerability does **not** allow an attacker to obtain user credentials, authorization codes, access tokens, refresh tokens, or identity tokens. An attacker could however exploit this vulnerability as part of a phishing attack designed to steal user credentials. This vulnerability is fixed in 7.0.6, 6.3.10, 6.2.5, 6.1.8, and 6.0.5. Duende.IdentityServer 5.1 and earlier and all versions of IdentityServer4 are no longer supported and will not be receiving updates. If upgrading is not possible, use `IUrlHelper.IsLocalUrl` from ASP.NET Core to validate return Urls in user interface code in the IdentityServer host.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-601
References: https://github.com/DuendeSoftware/IdentityServer/commit/269ca2171fe1e901c87f2f0797bbc7c230db87c6; https://github.com/DuendeSoftware/IdentityServer/commit/765116a2d4fb0671b6eba015e698533900c61c8e; https://github.com/DuendeSoftware/IdentityServer/commit/d0d8eab35ad9183b[PII_REDACTED]ed8b36658d0a1
CVE: CVE-2024-41947
Published: 2024-07-31
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By creating a conflict when another user with more rights is currently editing a page, it is possible to execute JavaScript snippets on the side of the other user, which compromises the confidentiality, integrity and availability of the whole XWiki installation. This has been patched in XWiki 15.10.8 and 16.3.0RC1.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-80, CWE-79
References: https://github.com/xwiki/xwiki-platform/commit/821d43ec45e67d45a6735a0717b9b77fffc1cd9f; https://github.com/xwiki/xwiki-platform/commit/e00e159d3737397eebd1f6ff925c1f5cb7cdec34; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-692v-783f-mg8x
CVE: CVE-2024-41950
Published: 2024-07-31
Description: Haystack is an end-to-end LLM framework that allows you to build applications powered by LLMs, Transformer models, vector search and more. Haystack clients that let their users create and run Pipelines from scratch are vulnerable to remote code executions. Certain Components in Haystack use Jinja2 templates, if anyone can create and render that template on the client machine they run any code. The vulnerability has been fixed with Haystack `2.3.1`.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1336
References: https://github.com/deepset-ai/haystack/commit/3fed1366c448b02189851bf08166c1f6477a02b0; https://github.com/deepset-ai/haystack/commit/6c25a5c73e83aa32c3241ba84a5cbb3ac0e8a89e; https://github.com/deepset-ai/haystack/pull/8095