deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-49243
Published: 2024-10-18
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ramjon27 Dynamic Elementor Addons dynamic-elementor-addons allows PHP Local File Inclusion.This issue affects Dynamic Elementor Addons: from n/a through <= 1.0.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-98, CWE-829
References: https://patchstack.com/database/Wordpress/Plugin/dynamic-elementor-addons/vulnerability/wordpress-dynamic-elementor-addons-plugin-1-0-0-local-file-inclusion-vulnerability?_s_id=cve
CVE: CVE-2024-9425
Published: 2024-10-18
Description: The Advanced Category and Custom Taxonomy Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ad_tax_image shortcode in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/advanced-category-and-custom-taxonomy-image/trunk/wp-advanced-taxonomy-image.php#L495; https://plugins.trac.wordpress.org/changeset/3170877/; https://wordpress.org/plugins/advanced-category-and-custom-taxonomy-image/#developers
CVE: CVE-2024-43300
Published: 2024-10-18
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bert Movie Database movie-database allows Stored XSS.This issue affects Movie Database: from n/a through <= 1.0.11.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/movie-database/vulnerability/wordpress-movie-database-plugin-1-0-11-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-9674
Published: 2024-10-18
Description: The Debrandify · Remove or Replace WordPress Branding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3170586/; https://wordpress.org/plugins/debrandify/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/a2110d13-d6d3-43f8-b1bf-8958d4f39ef5?source=cve
CVE: CVE-2024-47240
Published: 2024-10-18
Description: Dell Secure Connect Gateway (SCG) 5.24 contains an Incorrect Default Permissions vulnerability. A local attacker with low privileges can access the file system and could potentially exploit this vulnerability to gain write access to unauthorized data and cause a version update failure condition.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://www.dell.com/support/kbdoc/en-us/000237211/dsa-2024-407-dell-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities
CVE: CVE-2024-9537
Published: 2024-10-18
Description: ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+.  Remediations have been made available for all SL1 versions back to version lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x.
CVSS Score: 9.8 (CRITICAL)
References: https://arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-sciencelogic-sl1s-third-party-utility/; https://community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september-30-2024---latest-kb-articles-and-known-issues-part-1-of-2/1690; https://rackspace.service-now.com/system_status?id=detailed_status&service=4dafca5a87f41610568b206f8bbb35a6
CVE: CVE-2024-42508
Published: 2024-10-18
Description: This vulnerability could be exploited, leading to unauthorized disclosure of information to authenticated users.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04721en_us&docLocale=en_US
CVE: CVE-2023-6080
Published: 2024-10-18
Description: Lakeside Software’s SysTrack LsiAgent Installer version 10.7.8 for Windows contains a local privilege escalation vulnerability which allows attackers SYSTEM level access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-379
References: https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2024/MNDT-2024-0009.md; https://www.cve.org/CVERecord?id=CVE-2023-6080; https://www.lakesidesoftware.com/
CVE: CVE-2024-10120
Published: 2024-10-18
Description: A vulnerability has been found in wfh45678 Radar up to 1.0.8 and classified as critical. This vulnerability affects unknown code of the file /services/v1/common/upload. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-434
References: https://github.com/weliveby/ForCVE/blob/main/radar%20Arbitrary%20file%20upload%20vulnerability.md; https://vuldb.com/?ctiid.280912; https://vuldb.com/?id.280912
CVE: CVE-2024-47241
Published: 2024-10-18
Description: Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains an Improper Certificate Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access and modification of transmitted data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-295
References: https://www.dell.com/support/kbdoc/en-us/000237211/dsa-2024-407-dell-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities
CVE: CVE-2024-48016
Published: 2024-10-18
Description: Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure. The attacker may be able to use exposed credentials to access the system with privileges of the compromised account.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-327
References: https://www.dell.com/support/kbdoc/en-us/000237211/dsa-2024-407-dell-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities
CVE: CVE-2024-9593
Published: 2024-10-18
Description: The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 (for Time Clock) and 1.1.4 (for Time Clock Pro) via the 'etimeclockwp_load_function_callback' function. This allows unauthenticated attackers to execute code on the server. The invoked function's parameters cannot be specified.
CVSS Score: 8.3 (HIGH)
CWE: CWE-94
References: https://plugins.trac.wordpress.org/browser/time-clock/tags/1.2.2/includes/admin/ajax_functions_admin.php#L58; https://plugins.trac.wordpress.org/changeset/3171046/time-clock#file40; https://www.wordfence.com/threat-intel/vulnerabilities/id/247e599a-74e2-41d5-a1ba-978a807e6544?source=cve
CVE: CVE-2024-10115
Published: 2024-10-18
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-9884. Reason: This candidate is a reservation duplicate of CVE-2024-9884. Notes: All CVE users should reference CVE-2024-9884 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-10121
Published: 2024-10-18
Description: A vulnerability was found in wfh45678 Radar up to 1.0.8 and classified as critical. This issue affects some unknown processing of the component Interface Handler. The manipulation with the input /../ leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This appears not to be a path traversal weakness. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-639
References: https://github.com/weliveby/ForCVE/blob/main/radar%20Authentication%20bypass%20vulnerability.md; https://vuldb.com/?ctiid.280913; https://vuldb.com/?id.280913
CVE: CVE-2024-10122
Published: 2024-10-18
Description: A vulnerability was found in Topdata Inner Rep Plus WebServer 2.01. It has been classified as problematic. Affected is an unknown function of the file /InnerRepPlus.html of the component Operator Details Form. The manipulation leads to missing password field masking. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.7 (LOW)
CWE: CWE-549
References: https://vuldb.com/?ctiid.280914; https://vuldb.com/?id.280914; https://vuldb.com/?submit.421292
CVE: CVE-2024-45944
Published: 2024-10-18
Description: In J2eeFAST <=2.7, the backend function has unsafe filtering, which allows an attacker to trigger certain sensitive functions resulting in arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://gitee.com/dromara/J2EEFAST; https://github.com/dromara/J2EEFAST; https://github.com/lazy-forever/CVE-Reference/tree/main/2024/45944
CVE: CVE-2024-49361
Published: 2024-10-18
Description: ACON is a widely-used library of tools for machine learning that focuses on adaptive correlation optimization. A potential vulnerability has been identified in the input validation process, which could lead to arbitrary code execution if exploited. This issue could allow an attacker to submit malicious input data, bypassing input validation, resulting in remote code execution in certain machine learning applications using the ACON library. All users utilizing ACON’s input-handling functions are potentially at risk. Specifically, machine learning models or applications that ingest user-generated data without proper sanitization are the most vulnerable. Users running ACON on production servers are at heightened risk, as the vulnerability could be exploited remotely. As of time of publication, it is unclear whether a fix is available.
CWE: CWE-20
References: https://github.com/torinriley/ACON/security/advisories/GHSA-345g-6rmp-3cv9
CVE: CVE-2024-10123
Published: 2024-10-18
Description: A vulnerability was found in Tenda AC8 16.03.34.06. It has been declared as critical. Affected by this vulnerability is the function compare_parentcontrol_time of the file /goform/saveParentControlInfo. The manipulation of the argument time leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This is not the same issue like CVE-2023-33671. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://github.com/JohenanLi/router_vuls/blob/main/ac8v4/compare_parentcontrol_time_vul.md; https://vuldb.com/?ctiid.280915; https://vuldb.com/?id.280915
CVE: CVE-2024-10128
Published: 2024-10-18
Description: A vulnerability was found in Topdata Inner Rep Plus WebServer 2.01. It has been rated as problematic. Affected by this issue is some unknown functionality of the file td.js.gz. The manipulation leads to risky cryptographic algorithm. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.7 (LOW)
CWE: CWE-327
References: https://vuldb.com/?ctiid.280916; https://vuldb.com/?id.280916; https://vuldb.com/?submit.422604
CVE: CVE-2024-10129
Published: 2024-10-18
Description: A vulnerability classified as critical has been found in HFO4 shudong-share up to 2.4.7. This affects an unknown part of the file /includes/create_share.php of the component Share Handler. The manipulation of the argument fkey leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/timeflykai/shudong_share_sql_injection; https://vuldb.com/?ctiid.280917; https://vuldb.com/?id.280917
CVE: CVE-2024-10130
Published: 2024-10-18
Description: A vulnerability classified as critical was found in Tenda AC8 16.03.34.06. This vulnerability affects the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://github.com/JohenanLi/router_vuls/blob/main/ac8v4/FUN_004a8838.md; https://vuldb.com/?ctiid.280918; https://vuldb.com/?id.280918
CVE: CVE-2024-29213
Published: 2024-10-18
Description: Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://forums.ivanti.com/s/article/SA-2024-07-12-CVE-2024-29213
CVE: CVE-2024-29821
Published: 2024-10-18
Description: Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://forums.ivanti.com/s/article/SA-2024-07-12-CVE-2024-29821
CVE: CVE-2024-37404
Published: 2024-10-18
Description: Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 allows a remote authenticated attacker to achieve remote code execution.
CVSS Score: 8.8 (HIGH)
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-and-Policy-Secure-CVE-2024-37404
CVE: CVE-2024-43577
Published: 2024-10-18
Description: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-449
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43577
CVE: CVE-2019-25218
Published: 2024-10-19
Description: The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/wp-responsive-photo-gallery/tags/1.0.3/wp-responsive-photo-gallery.php#L1393; https://plugins.trac.wordpress.org/browser/wp-responsive-photo-gallery/tags/1.0.4/wp-responsive-photo-gallery.php#L1614; https://wordpress.org/plugins/wp-responsive-photo-gallery/
CVE: CVE-2024-10131
Published: 2024-10-19
Description: The `add_llm` function in `llm_app.py` in infiniflow/ragflow version 0.11.0 contains a remote code execution (RCE) vulnerability. The function uses user-supplied input `req['llm_factory']` and `req['llm_name']` to dynamically instantiate classes from various model dictionaries. This approach allows an attacker to potentially execute arbitrary code due to the lack of comprehensive input validation or sanitization. An attacker could provide a malicious value for 'llm_factory' that, when used as an index to these model dictionaries, results in the execution of arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://huntr.com/bounties/42ae0b27-e851-4b58-a991-f691a437fbaa
CVE: CVE-2024-9219
Published: 2024-10-19
Description: The WordPress Social Share Buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.19. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/share-button/tags/1.19/admin/page_editor.php#L60; https://plugins.trac.wordpress.org/changeset/3171315/; https://plugins.trac.wordpress.org/tags/1.19/share-button/trunk/admin/page_editor.php#L78
CVE: CVE-2024-21536
Published: 2024-10-19
Description: Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch. An attacker could kill the Node.js process and crash the server by making requests to certain paths.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://gist.github.com/mhassan1/28be67266d82a53708ed59ce5dc3c94a; https://github.com/chimurai/http-proxy-middleware/commit/0b4274e8cc9e9a2c5a06f35fbf456ccfcebc55a5; https://github.com/chimurai/http-proxy-middleware/commit/788b21e4aff38332d6319557d4a5b1b13b1f9a22
CVE: CVE-2023-6243
Published: 2024-10-19
Description: The EventON PRO - WordPress Virtual Event Calendar Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6.8. This is due to missing or incorrect nonce validation on the admin_test_email function. This makes it possible for unauthenticated attackers to send test emails to arbitrary email addresses via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://docs.myeventon.com/documentations/eventon-changelog/; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3017939%40eventon-lite&new=3017939%40eventon-lite&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/1d0a40f8-4c31-447d-ac28-73cfe7a07687?source=cve
CVE: CVE-2024-9889
Published: 2024-10-19
Description: The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.9 via the Page Loader widget. This makes it possible for authenticated attackers, with contributor-level access and above, to view private/draft/password protected posts, pages, and Elementor templates that they should not have access to.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3171339%40elementinvader-addons-for-elementor&new=3171339%40elementinvader-addons-for-elementor&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/9bd04f78-0b9c-4985-b450-007bb5cc9e26?source=cve
CVE: CVE-2024-10133
Published: 2024-10-19
Description: A vulnerability has been found in ESAFENET CDG 5 and classified as critical. Affected by this vulnerability is the function updateNetSecPolicyPriority of the file /com/esafenet/servlet/ajax/NetSecPolicyAjax.java. The manipulation of the argument id/frontId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://flowus.cn/share/a320073e-a545-419e-bfb5-d6e2b8526433?code=G8A6P3; https://vuldb.com/?ctiid.280921; https://vuldb.com/?id.280921
CVE: CVE-2024-10134
Published: 2024-10-19
Description: A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is the function connectLogout of the file /com/esafenet/servlet/ajax/MultiServerAjax.java. The manipulation of the argument servername leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://flowus.cn/share/cf5e5c45-d097-48d4-b33b-54acfa846fe5?code=G8A6P3; https://vuldb.com/?ctiid.280922; https://vuldb.com/?id.280922
CVE: CVE-2024-9897
Published: 2024-10-19
Description: The StreamWeasels Twitch Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sw-twitch-embed shortcode in all versions up to, and including, 1.8.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/streamweasels-twitch-integration/trunk/public/class-streamweasels-public.php#L201; https://plugins.trac.wordpress.org/changeset/3171629; https://wordpress.org/plugins/streamweasels-twitch-integration/#developers
CVE: CVE-2024-10135
Published: 2024-10-19
Description: A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects the function actionDelNetSecConfig of the file /com/esafenet/servlet/netSec/NetSecConfigService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://flowus.cn/share/90077815-dc85-42a1-9144-af0002cd0011?code=G8A6P3; https://vuldb.com/?ctiid.280923; https://vuldb.com/?id.280923
CVE: CVE-2024-10136
Published: 2024-10-19
Description: A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /manage_invoice.php. The manipulation of the argument invoice_number leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://code-projects.org/; https://gist.github.com/higordiego/f6411aecc606b015a37382b2be828831; https://vuldb.com/?ctiid.280924
CVE: CVE-2024-10137
Published: 2024-10-19
Description: A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /manage_medicine.php?action=delete. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://code-projects.org/; https://gist.github.com/higordiego/edd15afd508c51c95e5ce[PII_REDACTED]0; https://vuldb.com/?ctiid.280925
CVE: CVE-2024-10138
Published: 2024-10-19
Description: A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. Affected is an unknown function of the file /add_new_purchase.php?action=is_supplier. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://code-projects.org/; https://gist.github.com/higordiego/26694ace59cbc1e1f8366bef96953569; https://vuldb.com/?ctiid.280926