deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-52592
Published: 2024-12-18
Description: Misskey is an open source, federated social media platform. In affected versions missing validation in `ApInboxService.update` allows an attacker to modify the result of polls belonging to another user. No authentication is required, except for a valid signature from any actor on any remote instance. Vulnerable Misskey instances will accept spoofed updates for remote polls. Local polls are unaffected. This issue has been addressed in version 2024.11.0-alpha.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://github.com/misskey-dev/misskey/security/advisories/GHSA-5h8r-gq97-xv69
CVE: CVE-2024-52593
Published: 2024-12-18
Description: Misskey is an open source, federated social media platform.In affected versions missing validation in `NoteCreateService.insertNote`, `ApPersonService.createPerson`, and `ApPersonService.updatePerson` allows an attacker to control the target of any "origin" links (such as the "view on remote instance" banner). Any HTTPS URL can be set, even if it belongs to a different domain than the note / user. Vulnerable Misskey instances will use the unverified URL for several clickable links, allowing an attacker to conduct phishing or other attacks against remote users. This issue has been addressed in version 2024.11.0-alpha.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://github.com/misskey-dev/misskey/security/advisories/GHSA-675w-hf2m-qwmj
CVE: CVE-2024-53269
Published: 2024-12-18
Description: Envoy is a cloud-native high-performance edge/middle/service proxy. When additional address are not ip addresses, then the Happy Eyeballs sorting algorithm will crash in data plane. This issue has been addressed in releases 1.32.2, 1.31.4, and 1.30.8. Users are advised to upgrade. Users unable to upgrade may disable Happy Eyeballs and/or change the IP configuration.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-670
References: https://github.com/envoyproxy/envoy/pull/37743/commits/3f62168d86aceb90f743f63b50cc711710b1c401; https://github.com/envoyproxy/envoy/security/advisories/GHSA-mfqp-7mmj-rm53; https://github.com/envoyproxy/envoy/security/advisories/GHSA-mfqp-7mmj-rm53
CVE: CVE-2024-53270
Published: 2024-12-18
Description: Envoy is a cloud-native high-performance edge/middle/service proxy. In affected versions `sendOverloadError` is going to assume the active request exists when `envoy.load_shed_points.http1_server_abort_dispatch` is configured. If `active_request` is nullptr, only onMessageBeginImpl() is called. However, the `onMessageBeginImpl` will directly return ok status if the stream is already reset leading to the nullptr reference. The downstream reset can actually happen during the H/2 upstream reset. As a result envoy may crash. This issue has been addressed in releases 1.32.3, 1.31.5, 1.30.9, and 1.29.12. Users are advised to upgrade. Users unable to upgrade may disable `http1_server_abort_dispatch` load shed point and/or use a high threshold.
CVSS Score: 7.5 (HIGH)
CWE: CWE-670, CWE-476
References: https://github.com/envoyproxy/envoy/pull/37743/commits/6cf8afda956ba67c9afad185b962325a5242ef02; https://github.com/envoyproxy/envoy/security/advisories/GHSA-q9qv-8j52-77p3; https://github.com/envoyproxy/envoy/security/advisories/GHSA-q9qv-8j52-77p3
CVE: CVE-2024-53271
Published: 2024-12-18
Description: Envoy is a cloud-native high-performance edge/middle/service proxy. In affected versions envoy  does not properly handle http 1.1 non-101 1xx responses. This can lead to downstream failures in networked devices. This issue has been addressed in versions 1.31.5 and 1.32.3. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 7.1 (HIGH)
CWE: CWE-670
References: https://github.com/envoyproxy/envoy/commit/da56f6da63079baecef9183436ee5f4141a59af8; https://github.com/envoyproxy/envoy/security/advisories/GHSA-rmm5-h2wv-mg4f; https://github.com/envoyproxy/envoy/security/advisories/GHSA-rmm5-h2wv-mg4f
CVE: CVE-2024-12686
Published: 2024-12-18
Description: A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://nvd.nist.gov/vuln/detail/CVE-2024-12686; https://www.beyondtrust.com/trust-center/security-advisories/bt24-11; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-12686
CVE: CVE-2024-45338
Published: 2024-12-18
Description: An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1333
References: https://go.dev/cl/637536; https://go.dev/issue/70906; https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ
CVE: CVE-2024-56140
Published: 2024-12-18
Description: Astro is a web framework for content-driven websites. In affected versions a bug in Astro’s CSRF-protection middleware allows requests to bypass CSRF checks. When the `security.checkOrigin` configuration option is set to `true`, Astro middleware will perform a CSRF check. However, a vulnerability exists that can bypass this security. A semicolon-delimited parameter is allowed after the type in `Content-Type`. Web browsers will treat a `Content-Type` such as `application/x-www-form-urlencoded; abc` as a `simple request` and will not perform preflight validation. In this case, CSRF is not blocked as expected. Additionally, the `Content-Type` header is not required for a request. This issue has been addressed in version 4.16.17 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-352
References: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#simple_requests; https://github.com/withastro/astro/blob/6031962ab5f56457de986eb82bd24807e926ba1b/packages/astro/src/core/app/middlewares.ts; https://github.com/withastro/astro/commit/e7d14c374b9d45e27089994a4eb72186d05514de
CVE: CVE-2024-56145
Published: 2024-12-18
Description: Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Users of affected versions are affected by this vulnerability if their php.ini configuration has `register_argc_argv` enabled. For these users an unspecified remote code execution vector is present. Users are advised to update to version 3.9.14, 4.13.2, or 5.5.2. Users unable to upgrade should disable `register_argc_argv` to mitigate the issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/craftcms/cms/commit/82e893fb794d30563da296bca31379c0df0079b3; https://github.com/craftcms/cms/security/advisories/GHSA-2p6p-9rc9-62j9; https://github.com/Chocapikk/CVE-2024-56145
CVE: CVE-2024-12692
Published: 2024-12-18
Description: Type Confusion in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://chromereleases.googleblog.com/2024/12/stable-channel-update-for-desktop_18.html; https://issues.chromium.org/issues/382291459
CVE: CVE-2024-12693
Published: 2024-12-18
Description: Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-125
References: https://chromereleases.googleblog.com/2024/12/stable-channel-update-for-desktop_18.html; https://issues.chromium.org/issues/382190919
CVE: CVE-2024-12694
Published: 2024-12-18
Description: Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2024/12/stable-channel-update-for-desktop_18.html; https://issues.chromium.org/issues/368222741
CVE: CVE-2024-12695
Published: 2024-12-18
Description: Out of bounds write in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2024/12/stable-channel-update-for-desktop_18.html; https://issues.chromium.org/issues/383647255
CVE: CVE-2024-55231
Published: 2024-12-18
Description: An IDOR vulnerability in the edit-notes.php module of PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to modify notes belonging to other accounts due to missing authorization checks. This flaw exposes sensitive data and enables attackers to alter another user's information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://github.com/CV1523/CVEs/blob/main/CVE-2024-55231.md; https://github.com/CV1523/CVEs/blob/main/CVE-2024-55231.md
CVE: CVE-2024-55232
Published: 2024-12-18
Description: An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to delete notes belonging to other accounts due to missing authorization checks. This flaw enables attackers to delete another user's information.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-290
References: https://github.com/CV1523/CVEs/blob/main/CVE-2024-55232.md
CVE: CVE-2024-55505
Published: 2024-12-18
Description: An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the mess-view.php component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/CV1523/CVEs/blob/main/CVE-2024-55505.md
CVE: CVE-2022-40732
Published: 2024-12-18
Description: An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboot. An unprivileged user can run specially-crafted code to trigger Denial Of Service.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-476
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1514
CVE: CVE-2022-40733
Published: 2024-12-18
Description: An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboot. An unprivileged user can run specially-crafted code to trigger Denial Of Service.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-476
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1515
CVE: CVE-2024-37649
Published: 2024-12-18
Description: Insecure Permissions vulnerability in SecureSTATION v.2.5.5.3116-S50-SMA-B20160811A and before allows a physically proximate attacker to obtain sensitive information via the modification of user credentials.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-281
References: https://github.com/kklzzcun/SecureSTATION-/blob/main/The%20SecureSTATION%20.md; https://github.com/kklzzcun/SecureSTATION-/blob/main/The%20SecureSTATION%20.md
CVE: CVE-2024-39804
Published: 2024-12-18
Description: A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-347
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1974; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1974
CVE: CVE-2024-41138
Published: 2024-12-18
Description: A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-347
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1991; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1991
CVE: CVE-2024-41145
Published: 2024-12-18
Description: A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-347
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1990; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1990
CVE: CVE-2024-41159
Published: 2024-12-18
Description: A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-347
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1975; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1975
CVE: CVE-2024-41165
Published: 2024-12-18
Description: A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-347
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1977; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1977
CVE: CVE-2024-42004
Published: 2024-12-18
Description: A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-347
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1973; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1973; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1973
CVE: CVE-2024-42220
Published: 2024-12-18
Description: A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS. A specially crafted library can leverage Outlook's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-347
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1972; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1972; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1972
CVE: CVE-2024-43106
Published: 2024-12-18
Description: A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excel's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-347
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1976; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1976; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1976
CVE: CVE-2024-53580
Published: 2024-12-18
Description: iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://gist.github.com/neolead/663badf2ebefefa6fe4303695e7aa7a3; https://github.com/esnet/iperf/releases/tag/3.18; https://lists.debian.org/debian-lts-announce/2025/01/msg00027.html
CVE: CVE-2024-55239
Published: 2024-12-18
Description: A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker to craft malicious urls with arbitrary javascript in the 'titulo_documento' parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/RegularUs3r/CVE-Research/blob/main/CVE-2024/Portabilis%20-%20iEducar/CVE-2024-55239%20-%20Reflected%20Cross-Site%20Scripting.md; https://github.com/RegularUs3r/CVE-Research/blob/main/CVE-2024/Portabilis%20-%20iEducar/CVE-2024-55649%20-%20Reflected%20Cross-Site%20Scripting.md; https://github.com/RegularUs3r/CVE-Research/blob/main/CVE-2024/Portabilis%20-%20iEducar/CVE-2024-55239%20-%20Reflected%20Cross-Site%20Scripting.md
CVE: CVE-2024-55461
Published: 2024-12-18
Description: SeaCMS <=13.0 is vulnerable to command execution in phome.php via the function Ebak_RepPathFiletext().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://gitee.com/FengFu01/sea/issues/IB8S1N; https://gitee.com/FengFu01/sea/issues/IB8S1N
CVE: CVE-2024-55506
Published: 2024-12-18
Description: An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 (version with 0 updates) enables an attacker to execute arbitrary code and obtain sensitive information via the delete.php file and modifying the id parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-639
References: https://github.com/CV1523/CVEs/blob/main/CVE-2024-55506.md; https://github.com/CV1523/CVEs/blob/main/CVE-2024-55506.md
CVE: CVE-2024-56115
Published: 2024-12-18
Description: A vulnerability in Amiro.CMS before 7.8.4 exists due to the failure to take measures to neutralize special elements. It allows remote attackers to conduct a Cross-Site Scripting (XSS) attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ComplianceControl/CVE-2024-56115
CVE: CVE-2024-56116
Published: 2024-12-18
Description: A Cross-Site Request Forgery vulnerability in Amiro.CMS before 7.8.4 allows remote attackers to create an administrator account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/ComplianceControl/CVE-2024-56116
CVE: CVE-2024-56317
Published: 2024-12-18
Description: In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0, the WriteAcl function deletes all existing ACL entries first, and then attempts to recreate them based on user input. If input validation fails during decoding, the process stops, and no entries are restored by access-control-server.cpp, i.e., a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-281
References: https://github.com/project-chip/connectedhomeip/issues/36535
CVE: CVE-2024-56318
Published: 2024-12-18
Description: In raw\TCP.cpp in Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before 27ca6ec, there is a NULL pointer dereference in TCPBase::ProcessSingleMessage via TCP packets with zero messageSize, leading to denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/project-chip/connectedhomeip/commit/27ca6ec255b78168e04bd71e0f1a473869cf144b; https://github.com/project-chip/connectedhomeip/issues/36750; https://github.com/project-chip/connectedhomeip/pull/36751
CVE: CVE-2024-56319
Published: 2024-12-18
Description: In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before e3277eb, unlimited user label appends in a userlabel cluster can lead to a denial of service (resource exhaustion).
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/project-chip/connectedhomeip/commit/e3277eb02ed8115de5887e8beca0e35007ba71f3; https://github.com/project-chip/connectedhomeip/issues/36760; https://github.com/project-chip/connectedhomeip/pull/36843
CVE: CVE-2021-20553
Published: 2024-12-19
Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/6496761
CVE: CVE-2021-29827
Published: 2024-12-19
Description: IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-1021
References: https://www.ibm.com/support/pages/security-bulletin-ibm-infosphere-information-server-vulnerable-cross-frame-scripting-exploit-cve-2021-29827
CVE: CVE-2022-44512
Published: 2024-12-19
Description: Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE: CVE-2022-44513
Published: 2024-12-19
Description: Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE: CVE-2022-44514
Published: 2024-12-19
Description: Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE: CVE-2022-44515
Published: 2024-12-19
Description: Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb22-16.html