deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-48919
Published: 2024-10-22
Description: Cursor is a code editor built for programming with AI. Prior to Sep 27, 2024, if a user generated a terminal command via Cursor's Terminal Cmd-K/Ctrl-K feature and if the user explicitly imported a malicious web page into the Terminal Cmd-K prompt, an attacker with control over the referenced web page could have a significant chance of influencing a language model to output arbitrary commands for execution in the user's terminal. This scenario would require the user explicitly opt-in to including the contents of a compromised webpage, and it would require that the attacker display prompt injection text in the the contents of the compromised webpage.

A server-side patch to not stream back newlines or control characters was released on September 27, 2024, within two hours of the issue being reported. Additionally, Cursor 0.42 includes client-side mitigations to prevent any newline or control character from being streamed into the terminal directly. It also contains a new setting, `"cursor.terminal.usePreviewBox"`, which, if set to true, streams the response into a preview box whose contents then have to be manually accepted before being inserted into the terminal. This setting is useful if you're working in a shell environment where commands can be executed without pressing enter or any control character. The patch has been applied server-side, so no additional action is needed, even on older versions of Cursor. Separately, Cursor's maintainers also recommend, as best practice, to only include trusted pieces of context in prompts.
CWE: CWE-20
References: https://github.com/getcursor/cursor/security/advisories/GHSA-rmj9-23rg-gr67
CVE: CVE-2024-10229
Published: 2024-10-22
Description: Inappropriate implementation in Extensions in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. (Chromium security severity: High)
CVSS Score: 8.1 (HIGH)
References: https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_22.html; https://issues.chromium.org/issues/371011220
CVE: CVE-2024-10230
Published: 2024-10-22
Description: Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-843, CWE-843
References: https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_22.html; https://issues.chromium.org/issues/371565065
CVE: CVE-2024-10231
Published: 2024-10-22
Description: Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-843, CWE-843
References: https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_22.html; https://issues.chromium.org/issues/372269618
CVE: CVE-2024-26519
Published: 2024-10-22
Description: An issue in Casa Systems NTC-221 version 2.0.99.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the /www/cgi-bin/nas.cgi component.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-306
References: https://cybercx.com.au/blog/zero-day-rce-in-netcomm-ntc-221-industrial-iot-m2m-lte-4g-router/
CVE: CVE-2024-31029
Published: 2024-10-22
Description: An issue in the server_handle_regular function of the test_coap_server.c file within the FreeCoAP project allows remote attackers to cause a Denial of Service through specially crafted packets.
CVSS Score: 8.2 (HIGH)
CWE: CWE-125
References: https://gist.github.com/dqp10515/41ec400b7eecfcae7578d505598ab85f; https://github.com/keith-cullen/FreeCoAP/issues/36
CVE: CVE-2024-40493
Published: 2024-10-22
Description: Null Pointer Dereference in `coap_client_exchange_blockwise2` function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a denial of service and potentially execute arbitrary code via a specially crafted CoAP packet that causes `coap_msg_get_payload(resp)` to return a null pointer, which is then dereferenced in a call to `memcpy`.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476, CWE-476
References: https://gist.github.com/dqp10515/fe80005e2fb58ed8ada178ac017e4ad4; https://github.com/keith-cullen/FreeCoAP/issues/37
CVE: CVE-2024-40494
Published: 2024-10-22
Description: Buffer Overflow in coap_msg.c in FreeCoAP allows remote attackers to execute arbitrary code or cause a denial of service (stack buffer overflow) via a crafted packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://gist.github.com/dqp10515/e9d7d663cb89187bfe7b39bb3aeb0113; https://github.com/dqp10515/security/tree/main/FreeCoAP_bug
CVE: CVE-2024-41717
Published: 2024-10-22
Description: Kieback & Peter's DDC4000 series is vulnerable to a path traversal vulnerability, which may allow an unauthenticated attacker to read files on the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-291-05
CVE: CVE-2024-42643
Published: 2024-10-22
Description: Integer Overflow in fast_ping.c in SmartDNS Release46 allows remote attackers to cause a Denial of Service via misaligned memory access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/pymumu/smartdns/issues/1779
CVE: CVE-2024-43698
Published: 2024-10-22
Description: Kieback & Peter's DDC4000 series uses weak credentials, which may allow an unauthenticated attacker to get full admin rights on the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1391
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-291-05
CVE: CVE-2024-43812
Published: 2024-10-22
Description: Kieback & Peter's DDC4000 series has an insufficiently protected credentials vulnerability, which may allow an unauthenticated attacker with access to /etc/passwd to read the password hashes of all users on the system.
CVSS Score: 8.4 (HIGH)
CWE: CWE-522
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-291-05
CVE: CVE-2024-44331
Published: 2024-10-22
Description: Incorrect Access Control in GStreamer RTSP server 1.25.0 in gst-rtsp-server/rtsp-media.c allows remote attackers to cause a denial of service via a series of specially crafted hexstream requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://gist.github.com/dqp10515/c6a8879bebe92d8c74f7c52667fd3400; https://github.com/dqp10515/security/tree/main/gst-rtsp-server_bug/bug1
CVE: CVE-2024-44812
Published: 2024-10-22
Description: SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the username and password parameters in the /admin.index.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/b1u3st0rm/CVE-2024-44812-PoC
CVE: CVE-2024-46482
Published: 2024-10-22
Description: An arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution Faveo-Helpdesk v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .html or .svg file.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79, CWE-434
References: https://github.com/Asadiqbal2/Vulnerabilities-Research/tree/main/CVE-2024-46482
CVE: CVE-2024-46483
Published: 2024-10-22
Description: Xlight FTP Server <3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which can lead to a heap overflow with attacker-controlled content.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://github.com/kn32/cve-2024-46483
CVE: CVE-2024-46914
Published: 2024-10-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-48415
Published: 2024-10-22
Description: itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the lastname, firstname, middlename, address, contact_no, email and tax_id parameters in new borrowers functionality on the Borrowers page.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/khaliquesX/CVE-2024-48415/blob/main/README.md
CVE: CVE-2024-48644
Published: 2024-10-22
Description: Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera (Firmware Version v3.0.0.1889_23031701) allows remote attackers to determine valid user accounts via login attempts. This can lead to the enumeration of user accounts and potentially facilitate other attacks, such as brute-forcing of passwords. The vulnerability arises from the application responding differently to login attempts with valid and invalid usernames.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://github.com/rosembergpro/CVE-2024-48644
CVE: CVE-2024-48652
Published: 2024-10-22
Description: Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/paragbagul111/CVE-2024-48652/
CVE: CVE-2024-48656
Published: 2024-10-22
Description: Cross Site Scripting vulnerability in student management system in php with source code v.1.0.0 allows a remote attacker to execute arbitrary code.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/LeiPudd/Student-Management-System-v1.0-has-Cross-site-Scripting-XSS-
CVE: CVE-2024-48657
Published: 2024-10-22
Description: SQL Injection vulnerability in hospital management system in php with source code v.1.0.0 allows a remote attacker to execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/LeiPudd/Hospital-Management-System-v1.0-has-SQL-Injection-SQLDET-
CVE: CVE-2024-7587
Published: 2024-10-22
Description: Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric GENESIS32 versions 9.70.300.23 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS32 versions 9.70.300.23 and prior, and Mitsubishi Electric MC Works64 all versions allows a local authenticated attacker to disclose or tamper with confidential information and data contained in the products, or cause a denial of service (DoS) condition on the products, by accessing a folder with incorrect permissions, when GenBroker32 is installed on the same PC as GENESIS64, ICONICS Suite, MC Works64, or GENESIS32.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://jvn.jp/vu/JVNVU95548104; https://www.cisa.gov/news-events/ics-advisories/icsa-24-296-01; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-008_en.pdf
CVE: CVE-2024-31880
Published: 2024-10-23
Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service, under specific configurations, as the server may crash when using a specially crafted SQL statement by an authenticated user.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-770
References: https://www.ibm.com/support/pages/node/7156851; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-9927
Published: 2024-10-23
Description: The WooCommerce Order Proposal plugin for WordPress is vulnerable to privilege escalation via order proposal in all versions up to and including 2.0.5. This is due to the improper implementation of allow_payment_without_login function. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to log in to WordPress as an arbitrary user account, including administrators.
CVSS Score: 7.2 (HIGH)
CWE: CWE-287
References: https://wpovernight.com/downloads/woocommerce-order-proposal/; https://www.wordfence.com/threat-intel/vulnerabilities/id/cdc993a4-6f65-4570-811c-13a80dbec064?source=cve
CVE: CVE-2024-9829
Published: 2024-10-23
Description: The Download Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks on the 'dpwap_handle_download_user' and 'dpwap_handle_download_comment' functions in all versions up to, and including, 2.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to download any comment, and download metadata for any user including user PII and sensitive information including username, email, hashed passwords and application passwords, session token information and more depending on set up and additional plugins installed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/download-plugin/trunk/download-plugin.php#L242; https://plugins.trac.wordpress.org/browser/download-plugin/trunk/download-plugin.php#L262; https://plugins.trac.wordpress.org/browser/download-plugin/trunk/download-plugin.php#L335
CVE: CVE-2024-9583
Published: 2024-10-23
Description: The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the wprss_ajax_send_premium_support function in all versions up to, and including, 4.23.12. This makes it possible for authenticated attackers, with Subscriber-level access and above, to send premium support requests with an attacker-controlled subject line and email address to support allowing them to impersonate the site owner. License information may also be leaked.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/wp-rss-aggregator/trunk/includes/admin-help.php#L274; https://plugins.trac.wordpress.org/changeset/3168468/wp-rss-aggregator/trunk/includes/admin-help.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/126c77fa-11c5-431f-8fc9-0375ed6c8a91?source=cve
CVE: CVE-2024-9947
Published: 2024-10-23
Description: The ProfilePress Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.11.1. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email and the user does not have an already-existing account for the service returning the token.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287, CWE-287, CWE-276
References: https://profilepress.com/; https://www.wordfence.com/threat-intel/vulnerabilities/id/61b477c3-88b7-45a4-9fc4-6bca6f7c3604?source=cve
CVE: CVE-2024-10045
Published: 2024-10-23
Description: The Transients Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.6. This is due to missing or incorrect nonce validation on the process_actions function. This makes it possible for unauthenticated attackers to delete transients via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/transients-manager/trunk/src/TransientsManager.php#L993; https://plugins.trac.wordpress.org/changeset/3171619/transients-manager/trunk/src/TransientsManager.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/03b8b5a2-979d-42d0-86f5-48ee73162d22?source=cve
CVE: CVE-2024-43924
Published: 2024-10-23
Description: Missing Authorization vulnerability in dFactory Responsive Lightbox allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Responsive Lightbox: from n/a through 2.4.7.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/responsive-lightbox/wordpress-responsive-lightbox-gallery-plugin-2-4-7-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-9530
Published: 2024-10-23
Description: The Qi Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.0 via private templates. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the contents of templates that are private.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3170536%40qi-addons-for-elementor%2Ftrunk&old=3159768%40qi-addons-for-elementor%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/0dd93514-657c-4b04-931a-23f3d405fb88?source=cve
CVE: CVE-2023-50310
Published: 2024-10-23
Description: IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-522
References: https://www.ibm.com/support/pages/node/7145418
CVE: CVE-2024-10276
Published: 2024-10-23
Description: A vulnerability has been found in Telestream Sentry 6.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /?page=reports of the component Reports Page. The manipulation of the argument z leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://vuldb.com/?ctiid.281551; https://vuldb.com/?id.281551; https://vuldb.com/?submit.423695
CVE: CVE-2024-8500
Published: 2024-10-23
Description: The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the several parameters in all versions up to, and including, 7.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/shortcodes-ultimate/trunk/includes/js/shortcodes/index.js; https://plugins.trac.wordpress.org/changeset/3171844/; https://www.wordfence.com/threat-intel/vulnerabilities/id/78af6e06-4b4c-4f56-a6f8-f98e8f681976?source=cve
CVE: CVE-2024-10277
Published: 2024-10-23
Description: A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is some unknown functionality of the file /com/esafenet/servlet/ajax/UsbKeyAjax.java. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://flowus.cn/share/510c9ef1-8bb9-4c8f-9648-2ea6ee726b06?code=G8A6P3; https://vuldb.com/?ctiid.281552; https://vuldb.com/?id.281552
CVE: CVE-2024-10286
Published: 2024-10-23
Description: Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /testmail/index.php, parameter to.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-xss-vulnerabilities-localserver
CVE: CVE-2024-10287
Published: 2024-10-23
Description: Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/ForgotPassword, parameter ListName.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-xss-vulnerabilities-localserver
CVE: CVE-2024-10288
Published: 2024-10-23
Description: Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/SubscribeToList, parameter ListName.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-xss-vulnerabilities-localserver
CVE: CVE-2024-10289
Published: 2024-10-23
Description: Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/ManageSubscription, parameter MSubListName.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-xss-vulnerabilities-localserver
CVE: CVE-2024-10278
Published: 2024-10-23
Description: A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects an unknown part of the file /com/esafenet/servlet/user/ReUserOrganiseService.java. The manipulation of the argument userId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://flowus.cn/share/cdfbea40-da0c-4fe7-a4b8-86631f0fd796?code=G8A6P3; https://vuldb.com/?ctiid.281553; https://vuldb.com/?id.281553
CVE: CVE-2024-10279
Published: 2024-10-23
Description: A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects unknown code of the file /com/esafenet/servlet/policy/PrintPolicyService.java. The manipulation of the argument policyId leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://flowus.cn/share/b04c63c7-5b3c-47d2-9159-43943aecc342?code=G8A6P3; https://vuldb.com/?ctiid.281554; https://vuldb.com/?id.281554
CVE: CVE-2024-10041
Published: 2024-10-23
Description: A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-922, CWE-922
References: https://access.redhat.com/errata/RHSA-2024:10379; https://access.redhat.com/errata/RHSA-2024:11250; https://access.redhat.com/errata/RHSA-2024:9941
CVE: CVE-2024-10250
Published: 2024-10-23
Description: The Nioland theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘s’ parameter in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://themeforest.net/item/nioland-saas-software-startup-tech-wordpress-theme/47895474#item-description__change-log; https://www.wordfence.com/threat-intel/vulnerabilities/id/e13c6d97-873a-4067-846d-92e54514645d?source=cve