deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-6582
Published: 2024-09-13
Description: A broken access control vulnerability exists in the latest version of lunary-ai/lunary. The `saml.ts` file allows a user from one organization to update the Identity Provider (IDP) settings and view the SSO metadata of another organization. This vulnerability can lead to unauthorized access and potential account takeover if the email of a user in the target organization is known.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://github.com/lunary-ai/lunary/commit/1f043d8798ad87346dfe378eea723bff78ad7433; https://huntr.com/bounties/251d138c-3911-4a81-96e5-5a4ab59a0b59
CVE: CVE-2024-6862
Published: 2024-09-13
Description: A Cross-Site Request Forgery (CSRF) vulnerability exists in lunary-ai/lunary version 1.2.34 due to overly permissive CORS settings. This vulnerability allows an attacker to sign up for and create projects or use the instance as if they were a user with local access. The main attack vector is for instances hosted locally on personal machines, which are not publicly accessible. The CORS settings in the backend permit all origins, exposing unauthenticated endpoints to CSRF attacks.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://github.com/lunary-ai/lunary/commit/3451fcd7b9d95e9091d62c515752f39f2faa6e54; https://huntr.com/bounties/0b1d851e-3455-480c-ad5a[PII_REDACTED]6f
CVE: CVE-2024-6867
Published: 2024-09-13
Description: An information disclosure vulnerability exists in the lunary-ai/lunary, specifically in the `runs/{run_id}/related` endpoint. This endpoint does not verify that the user has the necessary access rights to the run(s) they are accessing. As a result, it returns not only the specified run but also all runs that have the `run_id` listed as their parent run. This issue affects the main branch, commit a761d833. The vulnerability allows unauthorized users to obtain information about non-public runs and their related runs, given the `run_id` of a public or non-public run.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1220
References: https://github.com/lunary-ai/lunary/commit/35afd[PII_REDACTED]eb016318cd7b6f85a162225ca; https://huntr.com/bounties/460df515-164c-4435-954b-0233a181545f
CVE: CVE-2024-39924
Published: 2024-09-13
Description: An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been identified in the authentication and authorization process of the endpoint responsible for altering the metadata of an emergency access. It permits an attacker with granted emergency access to escalate their privileges by changing the access level and modifying the wait time. Consequently, the attacker can gain full control over the vault (when only intended to have read access) while bypassing the necessary wait period.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://github.com/dani-garcia/vaultwarden/blob/1.30.3/src/api/core/emergency_access.rs#L115-L148; https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.0; https://www.mgm-sp.com/cve/missing-authentication-check-for-emergency-access
CVE: CVE-2024-39925
Published: 2024-09-13
Description: An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. It lacks an offboarding process for members who leave an organization. As a result, the shared organization key is not rotated when a member departs. Consequently, the departing member, whose access should be revoked, retains a copy of the organization key. Additionally, the application fails to adequately protect some encrypted data stored on the server. Consequently, an authenticated user could gain unauthorized access to encrypted data of any organization, even if the user is not a member of the targeted organization. However, the user would need to know the corresponding organizationId. Hence, if a user (whose access to an organization has been revoked) already possesses the organization key, that user could use the key to decrypt the leaked data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/dani-garcia/vaultwarden/releases; https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.0; https://www.mgm-sp.com/cve/missing-rotation-of-the-organization-key
CVE: CVE-2024-39926
Published: 2024-09-13
Description: An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A stored cross-site scripting (XSS) or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard, which is then executed or rendered in the context of an administrator's browser when viewing the injected content. However, it is important to note that the default Content Security Policy (CSP) of the application blocks most exploitation paths, significantly mitigating the potential impact.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/dani-garcia/vaultwarden/blob/1.30.3/src/static/scripts/admin_users.js#L201; https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.0; https://www.mgm-sp.com/cve/html-injection-in-vaultwarden
CVE: CVE-2024-3100
Published: 2024-09-13
Description: A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-121
References: https://support.lenovo.com/us/en/product_security/LEN-165524
CVE: CVE-2024-45101
Published: 2024-09-13
Description: A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that could allow an attacker to intercept a valid, authenticated LXCA user’s XCC session if they can convince the user to click on a specially crafted URL.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-319
References: https://support.lenovo.com/us/en/product_security/LEN-154748
CVE: CVE-2024-45103
Published: 2024-09-13
Description: A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface without sufficient privileges.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-282
References: https://support.lenovo.com/us/en/product_security/LEN-154748
CVE: CVE-2024-45104
Published: 2024-09-13
Description: A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a specially crafted web API call.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-282
References: https://support.lenovo.com/us/en/product_security/LEN-154748
CVE: CVE-2024-45105
Published: 2024-09-13
Description: An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that could allow a local attacker with elevated privileges to execute arbitrary code.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-825
References: https://support.lenovo.com/us/en/product_security/LEN-165524
CVE: CVE-2024-4550
Published: 2024-09-13
Description: A potential buffer overflow vulnerability was reported in some Lenovo ThinkSystem and ThinkStation products that could allow a local attacker with elevated privileges to execute arbitrary code.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-121
References: https://support.lenovo.com/us/en/product_security/LEN-165524
CVE: CVE-2024-7756
Published: 2024-09-13
Description: A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-489
References: https://support.lenovo.com/us/en/product_security/LEN-165524
CVE: CVE-2024-8059
Published: 2024-09-13
Description: IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-319
References: https://support.lenovo.com/us/en/product_security/LEN-172051
CVE: CVE-2024-8278
Published: 2024-09-13
Description: A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://support.lenovo.com/us/en/product_security/LEN-172051
CVE: CVE-2024-8279
Published: 2024-09-13
Description: A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://support.lenovo.com/us/en/product_security/LEN-172051
CVE: CVE-2024-8280
Published: 2024-09-13
Description: An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection or cause a recoverable denial of service using a specially crafted file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://support.lenovo.com/us/en/product_security/LEN-172051
CVE: CVE-2024-8281
Published: 2024-09-13
Description: An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection through specially crafted command line input in the XCC SSH captive shell.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://support.lenovo.com/us/en/product_security/LEN-172051
CVE: CVE-2024-8782
Published: 2024-09-13
Description: A vulnerability was found in JFinalCMS up to 1.0. It has been rated as critical. This issue affects the function delete of the file /admin/template/edit. The manipulation of the argument name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://gitee.com/heyewei/JFinalcms/issues/IAOSJG; https://github.com/yhy7612/Seccode/blob/main/README1.md; https://vuldb.com/?ctiid.277433
CVE: CVE-2024-5754
Published: 2024-09-13
Description: BT: Encryption procedure host vulnerability
CVSS Score: 8.2 (HIGH)
CWE: CWE-807
References: https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gvv5-66hw-5qrc
CVE: CVE-2024-6258
Published: 2024-09-13
Description: BT: Missing length checks of net_buf in rfcomm_handle_data
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-122, CWE-191, CWE-191
References: https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7833-fcpm-3ggm
CVE: CVE-2024-8783
Published: 2024-09-13
Description: A vulnerability classified as problematic has been found in OpenTibiaBR MyAAC up to 0.8.16. Affected is an unknown function of the file system/pages/forum/new_post.php of the component Post Reply Handler. The manipulation of the argument post_topic leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The patch is identified as bf6ae3df0d32fa22552bb44ca4f8489a6e78cc1c. It is recommended to apply a patch to fix this issue.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/opentibiabr/myaac/issues/121; https://github.com/opentibiabr/myaac/pull/122; https://github.com/opentibiabr/myaac/pull/122/commits/bf6ae3df0d32fa22552bb44ca4f8489a6e78cc1c
CVE: CVE-2024-8784
Published: 2024-09-13
Description: A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of the file /user/chat/mynewuser of the component Chat. The manipulation of the argument users[] with the input 1'+AND+(SELECT+3220+FROM+(SELECT(SLEEP(5)))ZNun)+AND+'WwBM'%3d'WwBM as part of POST Request Parameter leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.1 is able to address this issue. It is recommended to upgrade the affected component.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://codecanyon.net/item/smart-school-school-management-system/19426018; https://github.com/bytium/vulnerability-research/blob/main/Advisory%20for%20Time-Based%20Blind%20SQL%20Injection%20in%20QDocs%20Smart%20School.md; https://smart-school.in/article/version-7-0-1
CVE: CVE-2024-44430
Published: 2024-09-13
Description: SQL Injection vulnerability in Best Free Law Office Management Software-v1.0 allows an attacker to execute arbitrary code and obtain sensitive information via a crafted payload to the kortex_lite/control/register_case.php interface
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-94
References: https://blog.csdn.net/samwbs/article/details/140954482; https://github.com/samwbs/kortexcve/blob/main/xss_register_case/XSS_register_case.md
CVE: CVE-2024-5931
Published: 2024-09-13
Description: BT: Unchecked user input in bap_broadcast_assistant
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-121, CWE-1284, CWE-787
References: https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-r8h3-64gp-wv7f
CVE: CVE-2024-6135
Published: 2024-09-13
Description: BT:Classic: Multiple missing buf length checks
CVSS Score: 7.6 (HIGH)
CWE: CWE-122, CWE-369
References: https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-xcr5-5g98-mchp
CVE: CVE-2024-6137
Published: 2024-09-13
Description: BT: Classic: SDP OOB access in get_att_search_list
CVSS Score: 7.6 (HIGH)
CWE: CWE-121, CWE-787, CWE-787
References: https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-pm38-7g85-cf4f
CVE: CVE-2024-29779
Published: 2024-09-13
Description: there is a possible escalation of privilege due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://source.android.com/security/bulletin/pixel/2024-09-01
CVE: CVE-2024-44092
Published: 2024-09-13
Description: There is a possible LCS signing enforcement missing  due to test/debugging code left in a production build. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-489
References: https://source.android.com/security/bulletin/pixel/2024-09-01
CVE: CVE-2024-44093
Published: 2024-09-13
Description: In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-783
References: https://source.android.com/security/bulletin/pixel/2024-09-01
CVE: CVE-2024-44094
Published: 2024-09-13
Description: In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-20
References: https://source.android.com/security/bulletin/pixel/2024-09-01
CVE: CVE-2024-44095
Published: 2024-09-13
Description: In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible corrupt memory due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-09-01
CVE: CVE-2024-44096
Published: 2024-09-13
Description: there is a possible arbitrary read due to an insecure default value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-1188
References: https://source.android.com/security/bulletin/pixel/2024-09-01
CVE: CVE-2024-6259
Published: 2024-09-13
Description: BT: HCI: adv_ext_report Improper discarding in adv_ext_report
CVSS Score: 7.6 (HIGH)
CWE: CWE-122, CWE-787, CWE-787
References: https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p5j7-v26w-wmcp
CVE: CVE-2022-3459
Published: 2024-09-14
Description: The WooCommerce Multiple Free Gift plugin for WordPress is vulnerable to gift manipulation in all versions up to, and including, 1.2.3. This is due to plugin not enforcing server-side checks on the products that can be added as a gift. This makes it possible for unauthenticated attackers to add non-gift items to their cart as a gift.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639
References: https://plugins.trac.wordpress.org/browser/woocommerce-multiple-free-gift/trunk/lib/WFG_Frontend.class.php#L189; https://www.wordfence.com/threat-intel/vulnerabilities/id/cdb9c321-1a2c-4593-9947-2071a908ee1c?source=cve
CVE: CVE-2024-8271
Published: 2024-09-14
Description: The The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.4.2.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode in the 'woocs_get_custom_price_html' function. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://plugins.trac.wordpress.org/browser/woocommerce-currency-switcher/tags/1.4.2.1/classes/woocs.php#L4604; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3150596%40woocommerce-currency-switcher&new=3150596%40woocommerce-currency-switcher&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/dec51bd6-2ffe-47b6-9[PII_REDACTED]bf439?source=cve
CVE: CVE-2024-8775
Published: 2024-09-14
Description: A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as include_vars to load vaulted variables without setting the no_log: true parameter, resulting in sensitive data being printed in the playbook output or logs. This can lead to the unintentional disclosure of secrets like passwords or API keys, compromising security and potentially allowing unauthorized access or actions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: https://access.redhat.com/errata/RHSA-2024:10762; https://access.redhat.com/errata/RHSA-2024:8969; https://access.redhat.com/errata/RHSA-2024:9894
CVE: CVE-2024-8039
Published: 2024-09-14
Description: Improper permission configurationDomain configuration vulnerability of the mobile application (com.afmobi.boomplayer) can lead to account takeover risks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://security.tecno.com/SRC/blogdetail/307?lang=en_US; https://security.tecno.com/SRC/securityUpdates?type=SA
CVE: CVE-2024-8246
Published: 2024-09-14
Description: The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.8.11. This is due to plugin not properly restricting what users have access to set the default role on registration forms. This makes it possible for authenticated attackers, with contributor-level access and above, to create a registration form with a custom role that allows them to register as administrators.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://plugins.trac.wordpress.org/changeset/3149760/buddyforms/trunk/includes/admin/form-builder/meta-boxes/metabox-registration.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/40760f60-b81a-447b-a2c8-83c7666ce410?source=cve
CVE: CVE-2024-8479
Published: 2024-09-14
Description: The The Simple Spoiler plugin for WordPress is vulnerable to arbitrary shortcode execution in versions 1.2 to 1.3. This is due to the plugin adding the filter add_filter('comment_text', 'do_shortcode'); which will run all shortcodes in comments. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://plugins.trac.wordpress.org/browser/simple-spoiler/trunk/simple-spoiler.php#L108; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3151179%40simple-spoiler&new=3151179%40simple-spoiler&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/8ffc76d8-b841-4c26-bbc6-1f96664efe36?source=cve
CVE: CVE-2024-8669
Published: 2024-09-14
Description: The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the 'options' parameter passed to the backuply_wp_clone_sql() function in all versions up to, and including, 1.3.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/backuply/trunk/functions.php#L1477; https://plugins.trac.wordpress.org/changeset/3151205/; https://www.wordfence.com/threat-intel/vulnerabilities/id/6a061553-c988-4a31-a0a2-7a2608faa33f?source=cve
CVE: CVE-2024-8724
Published: 2024-09-14
Description: The Waitlist Woocommerce ( Back in stock notifier ) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.7.5. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/waitlist-woocommerce/trunk/admin/templates/xoo-wl-import-form.php#L8; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3151186%40waitlist-woocommerce&new=3151186%40waitlist-woocommerce&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/c298c87e-cf3c-4b72-bb0e-a01ca2dfe52f?source=cve
CVE: CVE-2024-8797
Published: 2024-09-14
Description: The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.0.19.8. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.0.19.10/includes/modules/update-checker/views/view-register-website.php#L21; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3150487%40wp-booking-system&new=3150487%40wp-booking-system&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/1bea55b5-b2d7-4eaf-8868-d2645ce18619?source=cve
CVE: CVE-2023-3410
Published: 2024-09-14
Description: The Bricks theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘customTag' attribute in versions up to, and including, 1.10.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with access to the Bricks Builder (admin-only by default), to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This becomes more of an issue when Bricks Builder access is granted to lower-privileged users.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://bricksbuilder.io/; https://bricksbuilder.io/release/bricks-1-10-2/; https://www.wordfence.com/threat-intel/vulnerabilities/id/ba5e93a2-8f42-4747-86fa-297ba709be8f?source=cve