deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-4380
Published: 2023-10-04
Description: A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://access.redhat.com/errata/RHSA-2023:4693; https://access.redhat.com/security/cve/CVE-2023-4380; https://bugzilla.redhat.com/show_bug.cgi?id=2232324
CVE: CVE-2023-5113
Published: 2023-10-04
Description: Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to denial of service due to WS-Print request and potential injections of Cross Site Scripting via jQuery-UI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.hp.com/us-en/document/ish_9[PII_REDACTED]309-16; https://support.hp.com/us-en/document/ish_9[PII_REDACTED]309-16
CVE: CVE-2021-3784
Published: 2023-10-04
Description: Garuda Linux performs an insecure user creation and authentication that allows any user to impersonate the created account. By creating users from the 'Garuda settings manager', an insecure procedure is performed that keeps the created user without an assigned password during some seconds. This could allow a potential attacker to exploit this vulnerability in order to authenticate without knowing the password.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://www.incibe.es/en/incibe-cert/notices/aviso/garuda-linux-improper-authorization; https://www.incibe.es/en/incibe-cert/notices/aviso/garuda-linux-improper-authorization
CVE: CVE-2022-36276
Published: 2023-10-04
Description: TCMAN GIM v8.0.1 is vulnerable to a SQL injection via the 'SqlWhere' parameter inside the function 'BuscarESM'. The exploitation of this vulnerability might allow a remote attacker to directly interact with the database.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tcman-gim; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tcman-gim
CVE: CVE-2022-36277
Published: 2023-10-04
Description: The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditServicio.aspx files in TCMAN GIM v8.0.1, could allow an attacker to perform persistent XSS attacks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tcman-gim; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tcman-gim
CVE: CVE-2023-43838
Published: 2023-10-04
Description: An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile's avatar.
CVSS Score: 7.8 (HIGH)
CWE: CWE-434
References: http://www.w3.org/2000/svg; https://github.com/Volmarg; https://github.com/Volmarg/personal-management-system
CVE: CVE-2023-20101
Published: 2023-10-04
Description: A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected device using the root account, which has default, static credentials that cannot be changed or deleted.
 This vulnerability is due to the presence of static user credentials for the root account that are typically reserved for use during development. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and execute arbitrary commands as the root user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cer-priv-esc-B9t3hqk9; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cer-priv-esc-B9t3hqk9
CVE: CVE-2023-20235
Published: 2023-10-04
Description: A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user.
 This vulnerability exists because Docker containers with the privileged runtime option are not blocked when they are in application development mode. An attacker could exploit this vulnerability by using the Docker CLI to access an affected device. The application development workflow is meant to be used only on development systems and not in production systems.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-552, CWE-269
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rdocker-uATbukKn; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rdocker-uATbukKn
CVE: CVE-2023-20259
Published: 2023-10-04
Description: A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the web-based management interface and cause delays with call processing. This API is not used for device management and is unlikely to be used in normal operations of the device.
 This vulnerability is due to improper API authentication and incomplete validation of the API request. An attacker could exploit this vulnerability by sending a crafted HTTP request to a specific API on the device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition due to high CPU utilization, which could negatively impact user traffic and management access. When the attack stops, the device will recover without manual intervention.
CVSS Score: 8.6 (HIGH)
CWE: CWE-400
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-apidos-PGsDcdNF; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-apidos-PGsDcdNF
CVE: CVE-2023-43804
Published: 2023-10-04
Description: urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the `Cookie` HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a `Cookie` header and unknowingly leak information via HTTP redirects to a different origin if that user doesn't disable redirects explicitly. This issue has been patched in urllib3 version 1.26.17 or 2.0.5.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://github.com/urllib3/urllib3/commit/01220354d389cd05474713f8c982d05c9b17aafb; https://github.com/urllib3/urllib3/commit/644124ecd0b6e417c527191f866daa05a5a2056d; https://github.com/urllib3/urllib3/security/advisories/GHSA-v845-jxx5-vc9f
CVE: CVE-2023-5371
Published: 2023-10-04
Description: RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-789, CWE-770
References: https://gitlab.com/wireshark/wireshark/-/issues/19322; https://www.wireshark.org/security/wnpa-sec-2023-27.html; https://gitlab.com/wireshark/wireshark/-/issues/19322
CVE: CVE-2023-5402
Published: 2023-10-04
Description: 


A CWE-269: Improper Privilege Management vulnerability exists that could cause a remote
code execution when the transfer command is used over the network.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-283-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-283-01.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-283-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-283-01.pdf
CVE: CVE-2023-27121
Published: 2023-10-04
Description: A cross-site scripting (XSS) vulnerability in the component /framework/cron/action/humanize of Pleasant Solutions Pleasant Password Server v7.11.41.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cronString parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://pleasantpasswords.com/download; https://www.mdsec.co.uk/2023/09/the-not-so-pleasant-password-manager/; https://www.nuget.org/packages/CronExpressionDescriptor/2.9.0
CVE: CVE-2023-38701
Published: 2023-10-04
Description: Hydra is the layer-two scalability solution for Cardano. Users of the Hydra head protocol send the UTxOs they wish to commit into the Hydra head first to the `commit` validator, where they remain until they are either collected into the `head` validator or the protocol initialisation is aborted and the value in the committed UTxOs is returned to the users who committed them. Prior to version 0.12.0, the `commit` validator contains a flawed check when the `ViaAbort` redeemer is used, which allows any user to spend any UTxO which is at the validator arbitrarily, meaning an attacker can steal the funds that users are trying to commit into the head validator. The intended behavior is that the funds must be returned to the user which committed the funds and can only be performed by a participant of the head. The `initial` validator also is similarly affected as the same flawed check is performed for the `ViaAbort` redeemer. Due to this issue, an attacker can steal any funds that user's try to commit into a Hydra head. Also, an attacker can prevent any Hydra head from being successfully opened. It does not allow an attacker to take funds which have been successfully collected into and currently reside in the `head` validator. Version 0.12.0 contains a fix for this issue.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: https://github.com/input-output-hk/hydra/blob/master/CHANGELOG.md#0120---2023-08-18; https://github.com/input-output-hk/hydra/blob/master/hydra-plutus/src/Hydra/Contract/Commit.hs#L94-L97; https://github.com/input-output-hk/hydra/blob/master/hydra-plutus/src/Hydra/Contract/Util.hs#L32-L42
CVE: CVE-2023-39191
Published: 2023-10-04
Description: An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of proper validation of dynamic pointers within user-supplied eBPF programs prior to executing them. This may allow an attacker with CAP_BPF privileges to escalate privileges and execute arbitrary code in the context of the kernel.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20
References: https://access.redhat.com/errata/RHSA-2023:6583; https://access.redhat.com/errata/RHSA-2024:0381; https://access.redhat.com/errata/RHSA-2024:0439
CVE: CVE-2023-3428
Published: 2023-10-04
Description: A heap-based buffer overflow vulnerability was found  in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://access.redhat.com/security/cve/CVE-2023-3428; https://bugzilla.redhat.com/show_bug.cgi?id=2218369; https://access.redhat.com/security/cve/CVE-2023-3428
CVE: CVE-2023-3576
Published: 2023-10-04
Description: A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119, CWE-401
References: https://access.redhat.com/errata/RHSA-2023:6575; https://access.redhat.com/security/cve/CVE-2023-3576; https://bugzilla.redhat.com/show_bug.cgi?id=2219340
CVE: CVE-2023-42448
Published: 2023-10-04
Description: Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, the specification states that the contestation period in the datum of the UTxO at the head validator must stay unchanged as the state progresses from Open to Closed (Close transaction), but no such check appears to be performed in the `checkClose` function of the head validator. This would allow a malicious participant to modify the contestation deadline of the head to either allow them to fanout the head without giving another participant the chance to contest, or prevent any participant from ever redistributing the funds locked in the head via a fan-out. Version 0.13.0 contains a patch for this issue.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20, CWE-1284
References: https://github.com/input-output-hk/hydra/blob/master/CHANGELOG.md#0130---2023-10-03; https://github.com/input-output-hk/hydra/blob/master/hydra-plutus/src/Hydra/Contract/Head.hs#L284-L296; https://github.com/input-output-hk/hydra/blob/master/hydra-plutus/src/Hydra/Contract/Head.hs#L320-L323
CVE: CVE-2023-42824
Published: 2023-10-04
Description: The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213972; https://support.apple.com/en-us/HT213972; https://support.apple.com/kb/HT213961
CVE: CVE-2023-5391
Published: 2023-10-04
Description: 


A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker to
execute arbitrary code on the targeted system by sending a specifically crafted packet to the
application.





CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-283-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-283-02.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-283-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-283-02.pdf
CVE: CVE-2023-5399
Published: 2023-10-04
Description: 




A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path
Traversal') vulnerability exists that could cause tampering of files on the personal computer
running C-Bus when using the File Command.




CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-283-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-283-01.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-283-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-283-01.pdf
CVE: CVE-2023-38537
Published: 2023-10-04
Description: A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incoming audio/video calls that could have resulted in app termination or unexpected control flow with very low probability.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-362
References: https://www.whatsapp.com/security/advisories/2023/; https://www.whatsapp.com/security/advisories/2023/
CVE: CVE-2023-38538
Published: 2023-10-04
Description: A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could have resulted in app termination or unexpected control flow with very low probability.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-362
References: https://www.whatsapp.com/security/advisories/2023/; https://www.whatsapp.com/security/advisories/2023/
CVE: CVE-2023-42449
Published: 2023-10-04
Description: Hydra is the two-layer scalability solution for Cardano. Prior to version 0.13.0, it is possible for a malicious head initializer to extract one or more PTs for the head they are initializing due to incorrect data validation logic in the head token minting policy which then results in an flawed check for burning the head ST in the `initial` validator. This is possible because it is not checked in `HeadTokens.hs` that the datums of the outputs at the `initial` validator are equal to the real head ID, and it is also not checked in the `off-chain code`.

During the `Initial` state of the protocol, if the malicious initializer removes a PT from the Hydra scripts it becomes impossible for any other participant to reclaim any funds they have attempted to commit into the head, as to do so the Abort transaction must burn all the PTs for the head, but they cannot burn the PT which the attacker controls and so cannot satisfy this requirement. That means the initializer can lock the other participants committed funds forever or until they choose to return the PT (ransom).

The malicious initializer can also use the PT to spoof that they have committed a particular TxO when progressing the head into the `Open` state. For example, they could say they committed a TxO residing at their address containing 100 ADA, but in fact this 100 ADA was not moved into the head, and thus in order for an other participant to perform the fanout they will be forced to pay the attacker the 100 ADA out of their own funds, as the fanout transaction must pay all the committed TxOs (even though the attacker did not really commit that TxO). They can do this by placing the PT in a UTxO with a well-formed `Commit` datum with whatever contents they like, then use this UTxO in the `collectCom` transaction. There may be other possible ways to abuse having control of a PT.

Version 0.13.0 fixes this issue.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: https://github.com/input-output-hk/hydra/blob/1e13b60a7b21c5ccd6c36e3cf220547f5d443cef/hydra-node/src/Hydra/Chain/Direct/Tx.hs#L645-L761; https://github.com/input-output-hk/hydra/blob/1e13b60a7b21c5ccd6c36e3cf220547f5d443cef/hydra-plutus/src/Hydra/Contract/Initial.hs#L84-L91; https://github.com/input-output-hk/hydra/blob/master/CHANGELOG.md#0130---2023-10-03
CVE: CVE-2023-42808
Published: 2023-10-04
Description: Common Voice is the web app for Mozilla Common Voice, a platform for collecting speech donations in order to create public domain datasets for training voice recognition-related tools. Version 1.88.2 is vulnerable to reflected Cross-Site Scripting given that user-controlled data flows to a path expression (path of a network request). This issue may lead to reflected Cross-Site Scripting (XSS) in the context of Common Voice’s server origin. As of time of publication, it is unknown whether any patches or workarounds exist.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/mozilla/common-voice/blob/9d6ffd755e29b81918b86b9f5218b9c27d9c1c1a/server/src/fetch-legal-document.ts#LL21-L62C2; https://github.com/mozilla/common-voice/blob/9d6ffd755e29b81918b86b9f5218b9c27d9c1c1a/server/src/server.ts#L214; https://securitylab.github.com/advisories/GHSL-2023-026_Common_Voice/
CVE: CVE-2023-42809
Published: 2023-10-04
Description: Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious server can include especially crafted objects in its responses that, once deserialized by the client, force it to execute arbitrary code. This can be abused to take control of the machine the client is running in. Version 3.22.0 contains a patch for this issue.

Some post-fix advice is available. Do NOT use `Kryo5Codec` as deserialization codec, as it is still vulnerable to arbitrary object deserialization due to the `setRegistrationRequired(false)` call. On the contrary, `KryoCodec` is safe to use. The fix applied to `SerializationCodec` only consists of adding an optional allowlist of class names, even though making this behavior the default is recommended. When instantiating `SerializationCodec` please use the `SerializationCodec(ClassLoader classLoader, Set<String> allowedClasses)` constructor to restrict the allowed classes for deserialization.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-502
References: https://github.com/redisson/redisson/commit/fe6a[PII_REDACTED]ff1599ef87bdee20f519a5d1fe; https://securitylab.github.com/advisories/GHSL-2023-053_Redisson/; https://github.com/redisson/redisson/commit/fe6a[PII_REDACTED]ff1599ef87bdee20f519a5d1fe
CVE: CVE-2023-44075
Published: 2023-10-04
Description: Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute arbitrary code via a crafted payload to the Address parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/TheKongV/CVE/blob/main/CVE-2023-44075; https://github.com/TheKongV/CVE/blob/main/CVE-2023-44075
CVE: CVE-2023-44209
Published: 2023-10-04
Description: Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 29051, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186.
CVSS Score: 7.8 (HIGH)
CWE: CWE-610, CWE-610
References: https://security-advisory.acronis.com/advisories/SEC-2119; https://security-advisory.acronis.com/advisories/SEC-2119
CVE: CVE-2023-44210
Published: 2023-10-04
Description: Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 29258, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://security-advisory.acronis.com/SEC-5528; https://security-advisory.acronis.com/advisories/SEC-2159; https://security-advisory.acronis.com/SEC-5528
CVE: CVE-2023-36618
Published: 2023-10-04
Description: Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://networks.unify.com/security/advisories/OBSO-2307-01.pdf; https://packetstormsecurity.com/files/174704/Atos-Unify-OpenScape-Code-Execution-Missing-Authentication.html; https://sec-consult.com/vulnerability-lab/advisory/authenticated-remote-code-execution-missing-authentication-atos-unify-openscape/
CVE: CVE-2023-36619
Published: 2023-10-04
Description: Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://networks.unify.com/security/advisories/OBSO-2307-01.pdf; https://packetstormsecurity.com/files/174704/Atos-Unify-OpenScape-Code-Execution-Missing-Authentication.html; https://sec-consult.com/vulnerability-lab/advisory/authenticated-remote-code-execution-missing-authentication-atos-unify-openscape/
CVE: CVE-2023-41094
Published: 2023-10-04
Description: TouchLink packets processed after timeout or out of range due to Operation on a Resource after Expiration and Missing Release of Resource after Effective Lifetime may allow a device to be added outside of valid TouchLink range or pairing duration

This issue affects Ember ZNet 7.1.x from 7.1.3 through 7.1.5; 7.2.x from 7.2.0 through 7.2.3; Version 7.3 and later are unaffected
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-940, CWE-672, CWE-772
References: https://community.silabs.com/0688Y00000aIPzL; https://community.silabs.com/0688Y00000aIPzL
CVE: CVE-2023-43793
Published: 2023-10-04
Description: Misskey is an open source, decentralized social media platform. Prior to version 2023.9.0, by editing the URL, a user can bypass the authentication of the Bull dashboard, which is the job queue management UI, and access it. Version 2023.9.0 contains a fix. There are no known workarounds.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://github.com/misskey-dev/misskey/commit/c9aeccb2ab260ceedc126e6e366da8cd13ece4b2; https://github.com/misskey-dev/misskey/security/advisories/GHSA-9fj2-gjcf-cqqc; https://github.com/nexryai/nexkey/security/advisories/GHSA-g8w5-568f-ffwf