deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-52586
Published: 2024-12-09
Description: eLabFTW is an open source electronic lab notebook for research labs. A vulnerability has been found starting in version 4.6.0 and prior to version 5.1.0 that allows an attacker to bypass eLabFTW's built-in multifactor authentication mechanism. An attacker who can authenticate locally (by knowing or guessing the password of a user) can thus log in regardless of MFA requirements. This does not affect MFA that are performed by single sign-on services. Users are advised to upgrade to at least version 5.1.9 to receive a fix.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-288, CWE-303
References: https://github.com/elabftw/elabftw/security/advisories/GHSA-pvxr-39g3-m28c
CVE: CVE-2024-52599
Published: 2024-12-09
Description: Tuleap is an open source suite to improve management of software developments and collaboration. In Tuleap Community Edition prior to version 16.1.99.50 and Tuleap Enterprise Edition prior to versions 16.1-4 and 16.0-7, a malicious user with the ability to create an artifact in a tracker with a Gantt chart could force a victim to execute uncontrolled code. Tuleap Community Edition 16.1.99.50, Tuleap Enterprise Edition 16.1-4, and Tuleap Enterprise Edition 16.0-7 contain a fix.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Enalean/tuleap/commit/d3686ab152b6f64ff835e7dd3c99d97b36a9d4d5; https://github.com/Enalean/tuleap/security/advisories/GHSA-489c-fm2j-qjw7; https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=d3686ab152b6f64ff835e7dd3c99d97b36a9d4d5
CVE: CVE-2024-53847
Published: 2024-12-09
Description: The Trix rich text editor, prior to versions 2.1.9 and 1.3.3, is vulnerable to cross-site scripting (XSS) + mutation XSS attacks when pasting malicious code. An attacker could trick a user to copy and paste malicious code that would execute arbitrary JavaScript code within the context of the user's session, potentially leading to unauthorized actions being performed or sensitive information being disclosed. Users should upgrade to Trix editor version 2.1.9 or 1.3.3, which uses DOMPurify to sanitize the pasted content.
CWE: CWE-79
References: https://github.com/basecamp/trix/commit/272c7e27e722608732a67108ad3fe7870e233ac8; https://github.com/basecamp/trix/security/advisories/GHSA-6vx4-v2jw-qwqh
CVE: CVE-2024-54147
Published: 2024-12-09
Description: Altair is a GraphQL client for all platforms. Prior to version 8.0.5, Altair GraphQL Client's desktop app does not validate HTTPS certificates allowing a man-in-the-middle to intercept all requests. Any Altair users on untrusted networks (eg. public wifi, malicious DNS servers) may have all GraphQL request and response headers and bodies fully compromised including authorization tokens. The attack also allows obtaining full access to any signed-in Altair GraphQL Cloud account and replacing payment checkout pages with a malicious website. Version 8.0.5 fixes the issue.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-295
References: https://github.com/altair-graphql/altair/blob/004f645d1cae032787fccf7166dc193b775e9660/packages/altair-electron/src/app/index.ts#L162-L170; https://github.com/altair-graphql/altair/security/advisories/GHSA-8v9h-hxp5-9jcx
CVE: CVE-2024-54918
Published: 2024-12-09
Description: Kashipara E-learning Management System v1.0 is vulnerable to Remote Code Execution via File Upload in /teacher_avatar.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/m14r41/Writeups/blob/main/CVE/Kashipara/E-learning%20Management%20System%20project/RCE%20by%20File%20Upload%20-%20Update%20Avatar.pdf
CVE: CVE-2024-54921
Published: 2024-12-09
Description: A SQL Injection was found in /student_signup.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the username, firstname, lastname, and class_id parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/m14r41/Writeups/blob/main/CVE/Kashipara/E-learning%20Management%20System%20project/SQL%20Injection%20-%20Signup%20Student.pdf
CVE: CVE-2024-54923
Published: 2024-12-09
Description: A SQL Injection vulnerability was found in /admin/edit_teacher.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the department parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/m14r41/Writeups/blob/main/CVE/Kashipara/E-learning%20Management%20System%20project/SQL%20Injection%20-%20edit_teacher.pdf
CVE: CVE-2024-54924
Published: 2024-12-09
Description: A SQL Injection was found in /admin/edit_content.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the title and content parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/m14r41/Writeups/blob/main/CVE/Kashipara/E-learning%20Management%20System%20project/SQL%20Injection%20-%20edit%20content.pdf
CVE: CVE-2024-54925
Published: 2024-12-09
Description: A SQL Injection was found in /remove_sent_message.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/m14r41/Writeups/blob/main/CVE/Kashipara/E-learning%20Management%20System%20project/SQL%20Injection%20-%20remove_sent_message.pdf
CVE: CVE-2024-54927
Published: 2024-12-09
Description: Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_users.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/m14r41/Writeups/blob/main/CVE/Kashipara/E-learning%20Management%20System%20project/SQL%20Injection%20-%20delete%20user.pdf
CVE: CVE-2024-54928
Published: 2024-12-09
Description: kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_teacher.php,
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/m14r41/Writeups/blob/main/CVE/Kashipara/E-learning%20Management%20System%20project/SQL%20Injection%20-%20delete%20teacher.pdf
CVE: CVE-2024-54931
Published: 2024-12-09
Description: A SQL Injection was found in /admin/delete_event.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/m14r41/Writeups/blob/main/CVE/Kashipara/E-learning%20Management%20System%20project/SQL%20Injection%20-%20delete%20event.pdf
CVE: CVE-2024-54932
Published: 2024-12-09
Description: Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_department.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/m14r41/Writeups/blob/main/CVE/Kashipara/E-learning%20Management%20System%20project/SQL%20Injection%20-%20delete%20department.pdf
CVE: CVE-2024-54934
Published: 2024-12-09
Description: Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_class.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/m14r41/Writeups/blob/main/CVE/Kashipara/E-learning%20Management%20System%20project/SQL%20Injection%20-%20delete%20class.pdf
CVE: CVE-2024-54938
Published: 2024-12-09
Description: A Directory Listing issue was found in Kashipara E-Learning Management System v1.0, which allows remote attackers to access sensitive files and directories via /admin/uploads.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/m14r41/Writeups/blob/main/CVE/Kashipara/E-learning%20Management%20System%20project/Directory%20listing%20-%20admin-uploads.pdf
CVE: CVE-2024-53441
Published: 2024-12-09
Description: An issue in the index.js decryptCookie function of cookie-encrypter v1.0.1 allows attackers to execute a bit flipping attack.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-327
References: https://gist.github.com/mathysEthical/f45f1503f87381090e38a33c50eec971; https://mathys.reboux.pro/CVE/2024/53441
CVE: CVE-2024-12369
Published: 2024-12-09
Description: A vulnerability was found in OIDC-Client. When using the RH SSO OIDC adapter with EAP 7.x or when using the elytron-oidc-client subsystem with EAP 8.x, authorization code injection attacks can occur, allowing an attacker to inject a stolen authorization code into the attacker's own session with the client with a victim's identity. This is usually done with a Man-in-the-Middle (MitM) or phishing attack.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-345
References: https://access.redhat.com/errata/RHSA-2025:3989; https://access.redhat.com/errata/RHSA-2025:3990; https://access.redhat.com/errata/RHSA-2025:3992
CVE: CVE-2024-46455
Published: 2024-12-09
Description: unstructured v.0.14.2 and before is vulnerable to XML External Entity (XXE) via the XMLParser.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://binarysouljour.me/cve-2024-46455; https://github.com/Unstructured-IO/unstructured/tree/0.14.2
CVE: CVE-2024-54149
Published: 2024-12-09
Description: Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Winter CMS prior to versions 1.2.7, 1.1.11, and 1.0.476 allow users with access to the CMS templates sections that modify Twig files to bypass the sandbox placed on Twig files and modify resources such as theme customisation values or modify, or remove, templates in the theme even if not provided direct access via the permissions. As all objects passed through to Twig are references to the live objects, it is also possible to also manipulate model data if models are passed directly to Twig, including changing attributes or even removing records entirely. In most cases, this is unwanted behavior and potentially dangerous. To actively exploit this security issue, an attacker would need access to the Backend with a user account with any of the following permissions: `cms.manage_layouts`; `cms.manage_pages`; or `cms.manage_partials`. The Winter CMS maintainers strongly recommend that these permissions only be reserved to trusted administrators and developers in general. The maintainers of Winter CMS have significantly increased the scope of the sandbox, effectively making all models and datasources read-only in Twig, in versions 1.2.7, 1.1.11, and 1.0.476. Thse who cannot upgrade may apply commit fb88e6fabde3b3278ce1844e581c87dcf7daee22 to their Winter CMS installation manually to resolve the issue. In the rare event that a Winter user was relying on being able to write to models/datasources within their Twig templates, they should instead use or create components to make changes to their models.
CVSS Score: 8.4 (HIGH)
CWE: CWE-184
References: https://github.com/wintercms/winter/commit/fb88e6fabde3b3278ce1844e581c87dcf7daee22; https://github.com/wintercms/winter/security/advisories/GHSA-xhw3-4j3m-hq53
CVE: CVE-2024-54151
Published: 2024-12-09
Description: Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 11.0.0 and prior to version 11.3.0, when setting `WEBSOCKETS_GRAPHQL_AUTH` or `WEBSOCKETS_REST_AUTH` to "public", an unauthenticated user is able to do any of the supported operations (CRUD, subscriptions) with full admin privileges. This impacts any Directus instance that has either `WEBSOCKETS_GRAPHQL_AUTH` or `WEBSOCKETS_REST_AUTH` set to `public` allowing unauthenticated users to subscribe for changes on any collection or do REST CRUD operations on user defined collections ignoring permissions. Version 11.3.0 fixes the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/directus/directus/commit/ce0397d16cf767b5293cd57f626c5349b5732a21; https://github.com/directus/directus/security/advisories/GHSA-849r-qrwj-8rv4; https://github.com/directus/directus/security/advisories/GHSA-849r-qrwj-8rv4
CVE: CVE-2024-12174
Published: 2024-12-09
Description: An Improper Certificate Validation vulnerability exists in Tenable Security Center where an authenticated, privileged attacker could intercept email messages sent from Security Center via a rogue SMTP server.
CVSS Score: 2.7 (LOW)
CWE: CWE-295
References: https://www.tenable.com/security/tns-2024-19
CVE: CVE-2024-50625
Published: 2024-12-09
Description: An issue was discovered in Digi ConnectPort LTS before 1.4.12. A vulnerability in the file upload handling of a web application allows manipulation of file paths via POST requests. This can lead to arbitrary file uploads within specific directories, potentially enabling privilege escalation when combined with other vulnerabilities.
CVSS Score: 8.0 (HIGH)
CWE: CWE-434
References: https://www.digi.com/getattachment/Resources/Security/Alerts/Digi-ConnectPort-LTS-Firmware-Update/ConnectPort-LTS-KB.pdf; https://www.digi.com/resources/documentation/digidocs/pdfs/90001001.pdf; https://www.digi.com/resources/security
CVE: CVE-2024-50626
Published: 2024-12-09
Description: An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Directory Traversal vulnerability exists in WebFS. This allows an attacker on the local area network to manipulate URLs to include traversal sequences, potentially leading to unauthorized access to data.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://www.digi.com/getattachment/Resources/Security/Alerts/Digi-ConnectPort-LTS-Firmware-Update/ConnectPort-LTS-KB.pdf; https://www.digi.com/resources/documentation/digidocs/pdfs/90001001.pdf; https://www.digi.com/resources/security
CVE: CVE-2024-50627
Published: 2024-12-09
Description: An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Privilege Escalation vulnerability exists in the file upload feature. It allows an attacker on the local area network (with specific permissions) to upload and execute malicious files, potentially leading to unauthorized system access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-552
References: https://www.digi.com/getattachment/Resources/Security/Alerts/Digi-ConnectPort-LTS-Firmware-Update/ConnectPort-LTS-KB.pdf; https://www.digi.com/resources/documentation/digidocs/pdfs/90001001.pdf; https://www.digi.com/resources/security
CVE: CVE-2024-50628
Published: 2024-12-09
Description: An issue was discovered in the web services of Digi ConnectPort LTS before 1.4.12. It allows an attacker on the local area network to achieve unauthorized manipulation of resources, which may lead to remote code execution when combined with other issues.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://www.digi.com/getattachment/Resources/Security/Alerts/Digi-ConnectPort-LTS-Firmware-Update/ConnectPort-LTS-KB.pdf; https://www.digi.com/resources/documentation/digidocs/pdfs/90001001.pdf; https://www.digi.com/resources/security
CVE: CVE-2024-55601
Published: 2024-12-09
Description: Hugo is a static site generator. Starting in version 0.123.0 and prior to version 0.139.4, some HTML attributes in Markdown in the internal templates listed below not escaped in internal render hooks. Those whoa re impacted are Hugo users who do not trust their Markdown content files and are using one or more of these templates: `_default/_markup/render-link.html` from `v0.123.0`; `_default/_markup/render-image.html` from `v0.123.0`; `_default/_markup/render-table.html` from `v0.134.0`; and/or `shortcodes/youtube.html` from `v0.125.0`. This issue is patched in v0.139.4. As a workaround, one may replace an affected component with user defined templates or disable the internal templates.
CWE: CWE-79
References: https://github.com/gohugoio/hugo/commit/54398f8d572c689f9785d59e907fd910a23401b0; https://github.com/gohugoio/hugo/releases/tag/v0.139.4; https://github.com/gohugoio/hugo/security/advisories/GHSA-c2xf-9v2r-r2rx
CVE: CVE-2024-12393
Published: 2024-12-10
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.drupal.org/sa-core-2024-003
CVE: CVE-2024-55634
Published: 2024-12-10
Description: A vulnerability in Drupal Core allows Privilege Escalation.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.
CVSS Score: 8.1 (HIGH)
CWE: CWE-178, CWE-289, CWE-178
References: https://www.drupal.org/sa-core-2024-004
CVE: CVE-2024-55635
Published: 2024-12-10
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 7.0 before 7.102.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.drupal.org/sa-core-2024-005
CVE: CVE-2024-55636
Published: 2024-12-10
Description: Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.

Drupal core contains a chain of methods that is exploitable when an insecure deserialization vulnerability exists on the site. This so called gadget chain presents no direct threat, but is a vector that can be used to achieve remote code execution if the application deserializes untrusted data due to another vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-915, CWE-502
References: https://www.drupal.org/sa-core-2024-006
CVE: CVE-2024-55637
Published: 2024-12-10
Description: Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.

Drupal core contains a chain of methods that is exploitable when an insecure deserialization vulnerability exists on the site. This so-called gadget chain presents no direct threat but is a vector that can be used to achieve remote code execution if the application deserializes untrusted data due to another vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-915, CWE-502
References: https://www.drupal.org/sa-core-2024-007
CVE: CVE-2024-55638
Published: 2024-12-10
Description: Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 7.0 before 7.102, from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9.

Drupal core contains a chain of methods that is exploitable when an insecure deserialization vulnerability exists on the site. This so-called gadget chain presents no direct threat but is a vector that can be used to achieve remote code execution if the application deserializes untrusted data due to another vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-915, CWE-502
References: https://www.drupal.org/sa-core-2024-008
CVE: CVE-2024-9672
Published: 2024-12-10
Description: A reflected cross-site scripting (XSS) vulnerability exists in PaperCut NG/MF. This issue can be used to execute specially created JavaScript payloads in the browser. A user must click on a malicious link for this issue to occur.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-917, CWE-79
References: https://www.papercut.com/kb/Main/security-bulletin-december-2024/
CVE: CVE-2024-32732
Published: 2024-12-10
Description: Under certain conditions SAP BusinessObjects Business Intelligence platform allows an attacker to access information which would otherwise be restricted.This has low impact on Confidentiality with no impact on Integrity and Availability of the application.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-497
References: https://me.sap.com/notes/3524933; https://url.sap/sapsecuritypatchday
CVE: CVE-2024-47576
Published: 2024-12-10
Description: SAP Product Lifecycle Costing Client (versions below 4.7.1) application loads on demand a DLL that is available with Windows OS. This DLL is loaded from the computer running SAP Product Lifecycle Costing Client application. That particular DLL could be replaced by a malicious one, that could execute commands as being part of SAP Product Lifecycle Costing Client Application. On a successful attack, it can cause a low impact to confidentiality but no impact to the integrity and availability of the application.
CVSS Score: 3.3 (LOW)
CWE: CWE-427
References: https://me.sap.com/notes/3504847; https://url.sap/sapsecuritypatchday
CVE: CVE-2024-47577
Published: 2024-12-10
Description: Webservice API endpoints for Assisted Service Module within SAP Commerce Cloud has information disclosure vulnerability. When an authorized agent searches for customer to manage their accounts, the request url includes customer data and it is recorded in server logs. If an attacker impersonating as authorized admin visits such server logs, then they get access to the customer data. The amount of leaked confidential data however is extremely limited, and the attacker has no control over what data is leaked.
CVSS Score: 2.7 (LOW)
CWE: CWE-319
References: https://me.sap.com/notes/3535451; https://url.sap/sapsecuritypatchday
CVE: CVE-2024-47578
Published: 2024-12-10
Description: Adobe Document Service allows an attacker with administrator privileges to send a crafted request from a vulnerable web application. It is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external network, resulting in a Server-Side Request Forgery vulnerability. On successful exploitation, the attacker can read or modify any file and/or make the entire system unavailable.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: https://me.sap.com/notes/3536965; https://url.sap/sapsecuritypatchday
CVE: CVE-2024-47579
Published: 2024-12-10
Description: An attacker authenticated as an administrator can use an exposed webservice to upload or download a custom PDF font file on the system server.  Using the upload functionality to copy an internal file into a font file and subsequently using the download functionality to retrieve that file allows the attacker to read any file on the server with no effect on integrity or availability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-538
References: https://me.sap.com/notes/3536965; https://url.sap/sapsecuritypatchday
CVE: CVE-2024-47580
Published: 2024-12-10
Description: An attacker authenticated as an administrator can use an exposed webservice to create a PDF with an embedded attachment.  By specifying the file to be an internal server file and subsequently downloading the generated PDF, the attacker can read any file on the server with no effect on integrity or availability.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-538
References: https://me.sap.com/notes/3536965; https://url.sap/sapsecuritypatchday
CVE: CVE-2024-47581
Published: 2024-12-10
Description: SAP HCM Approve Timesheets Version 4 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.There is low impact on integrity of the application. Confidentiality and availibility are not impacted.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3522332; https://url.sap/sapsecuritypatchday
CVE: CVE-2024-47582
Published: 2024-12-10
Description: Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which leads to XML Entity Expansion attack. This causes limited impact on availability of the application.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-611
References: https://me.sap.com/notes/3351041; https://url.sap/sapsecuritypatchday