deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-33893
Published: 2024-08-02
Description: Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to XSS when displaying the logs due to improper input sanitization. This is fixed in version 21.2s10 and 22.1s3.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://blog.syss.com/posts/hacking-a-secure-industrial-remote-access-gateway/; https://hmsnetworks.blob.core.windows.net/nlw/docs/default-source/products/cybersecurity/security-advisory/hms-security-advisory-2024-07-29-001--ewon-several-cosy--vulnerabilities.pdf; https://www.ewon.biz/products/cosy/ewon-cosy-wifi
CVE: CVE-2024-33894
Published: 2024-08-02
Description: Insecure Permission vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are executing several processes with elevated privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://blog.syss.com/posts/hacking-a-secure-industrial-remote-access-gateway/; https://hmsnetworks.blob.core.windows.net/nlw/docs/default-source/products/cybersecurity/security-advisory/hms-security-advisory-2024-07-29-001--ewon-several-cosy--vulnerabilities.pdf; https://www.ewon.biz/products/cosy/ewon-cosy-wifi
CVE: CVE-2024-33895
Published: 2024-08-02
Description: Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 use a unique key to encrypt the configuration parameters. This is fixed in version 21.2s10 and 22.1s3, the key is now unique per device.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-798, CWE-798
References: https://blog.syss.com/posts/hacking-a-secure-industrial-remote-access-gateway/; https://hmsnetworks.blob.core.windows.net/nlw/docs/default-source/products/cybersecurity/security-advisory/hms-security-advisory-2024-07-29-001--ewon-several-cosy--vulnerabilities.pdf; https://www.ewon.biz/products/cosy/ewon-cosy-wifi
CVE: CVE-2024-33896
Published: 2024-08-02
Description: Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to code injection due to improper parameter blacklisting. This is fixed in version 21.2s10 and 22.1s3.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://blog.syss.com/posts/hacking-a-secure-industrial-remote-access-gateway/; https://hmsnetworks.blob.core.windows.net/nlw/docs/default-source/products/cybersecurity/security-advisory/hms-security-advisory-2024-07-29-001--ewon-several-cosy--vulnerabilities.pdf; https://www.ewon.biz/products/cosy/ewon-cosy-wifi
CVE: CVE-2024-38881
Published: 2024-08-02
Description: An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Rainbow Table Password cracking attack due to the use of one-way hashes without salts when storing user passwords.
CVSS Score: 7.5 (HIGH)
CWE: CWE-760
References: http://caterease.com; http://horizon.com; https://packetstormsecurity.com/files/179892/Caterease-Software-SQL-Injection-Command-Injection-Bypass.html
CVE: CVE-2024-38882
Published: 2024-08-02
Description: An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform command line execution through SQL Injection due to improper neutralization of special elements used in an OS command.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://caterease.com; http://horizon.com; https://packetstormsecurity.com/files/179892/Caterease-Software-SQL-Injection-Command-Injection-Bypass.html
CVE: CVE-2024-38883
Published: 2024-08-02
Description: An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Drop Encryption Level attack due to the selection of a less-secure algorithm during negotiation.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-757
References: http://caterease.com; http://horizon.com; https://packetstormsecurity.com/files/179892/Caterease-Software-SQL-Injection-Command-Injection-Bypass.html
CVE: CVE-2024-38884
Published: 2024-08-02
Description: An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a local attacker to perform an Authentication Bypass attack due to improperly implemented security checks for standard authentication mechanisms
CVSS Score: 7.8 (HIGH)
CWE: CWE-863, CWE-592
References: http://caterease.com; http://horizon.com; https://packetstormsecurity.com/files/179892/Caterease-Software-SQL-Injection-Command-Injection-Bypass.html
CVE: CVE-2024-38885
Published: 2024-08-02
Description: An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform unauthorized access using known operating system credentials due to hardcoded SQL user credentials in the client application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-259
References: http://caterease.com; http://horizon.com; https://vuldb.com/?id.273369
CVE: CVE-2024-38886
Published: 2024-08-02
Description: An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Traffic Injection attack due to improper verification of the source of a communication channel.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-940
References: http://caterease.com; http://horizon.com; https://packetstormsecurity.com/files/179892/Caterease-Software-SQL-Injection-Command-Injection-Bypass.html
CVE: CVE-2024-22169
Published: 2024-08-02
Description: WD Discovery
versions prior to 5.0.589 contain a misconfiguration in the Node.js environment
settings that could allow code execution by utilizing the 'ELECTRON_RUN_AS_NODE' environment variable.
Any malicious application operating with standard user permissions can exploit
this vulnerability, enabling code execution within WD Discovery application's
context. WD Discovery version 5.0.589 addresses this issue by disabling certain
features and fuses in Electron. The attack vector for this issue requires the victim to have the WD Discovery app installed on their device.
CWE: CWE-94
References: https://www.westerndigital.com/support/product-security/wdc-24004-wd-discovery-desktop-app-version-5-0-589
CVE: CVE-2024-28297
Published: 2024-08-02
Description: SQL injection vulnerability in AzureSoft MyHorus 4.3.5 allows authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2024-28297_MYHorus%28AzureSoft%29_Pre-Authenticated%20SQLI.pdf; https://www.azursoft.com/
CVE: CVE-2024-28298
Published: 2024-08-02
Description: SQL injection vulnerability in BM SOFT BMPlanning 1.0.0.1 allows authenticated users to execute arbitrary SQL commands via the SEC_IDF, LIE_IDF, PLANF_IDF, CLI_IDF, DOS_IDF, and possibly other parameters to /BMServerR.dll/BMRest.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2024-28298_BMPlanning%28BM-Soft%29_Authenticated%20SQLI.pdf; https://www.e-bmsoft.com/
CVE: CVE-2024-38888
Published: 2024-08-02
Description: An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a local attacker to perform a Password Brute Forcing attack due to improper restriction of excessive authentication attempts.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-307
References: http://caterease.com; http://horizon.com; https://packetstormsecurity.com/files/179892/Caterease-Software-SQL-Injection-Command-Injection-Bypass.html
CVE: CVE-2024-38889
Published: 2024-08-02
Description: An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform SQL Injection due to improper neutralization of special elements used in an SQL command.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-78
References: http://caterease.com; http://horizon.com; https://packetstormsecurity.com/files/179892/Caterease-Software-SQL-Injection-Command-Injection-Bypass.html
CVE: CVE-2024-42348
Published: 2024-08-02
Description: FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.2 can leak AD username and password when registering a computer.  This vulnerability is fixed in 1.5.10.41.3 and 1.6.0-beta.1395.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/FOGProject/fogproject/security/advisories/GHSA-456c-4gw3-c9xw
CVE: CVE-2024-42349
Published: 2024-08-02
Description: FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.4 and earlier can leak authorized and rejected logins via logs stored directly on the root of the web server. FOG Server creates 2 logs on the root of the web server (fog_login_accepted.log and fog_login_failed.log), exposing the name of the user account used to manage FOG, the IP address of the computer used to login and the User-Agent. This vulnerability is fixed in 1.5.10.47.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://github.com/FOGProject/fogproject/security/advisories/GHSA-697m-3c4p-g29h
CVE: CVE-2024-38887
Published: 2024-08-02
Description: An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to expand control over the operating system from the database due to the execution of commands with unnecessary privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: http://caterease.com; http://horizon.com; https://packetstormsecurity.com/files/179892/Caterease-Software-SQL-Injection-Command-Injection-Bypass.html
CVE: CVE-2024-38891
Published: 2024-08-02
Description: An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Sniffing Network Traffic attack due to the cleartext transmission of sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-319
References: http://caterease.com; http://horizon.com; https://packetstormsecurity.com/files/179892/Caterease-Software-SQL-Injection-Command-Injection-Bypass.html
CVE: CVE-2024-3056
Published: 2024-08-02
Description: A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same IPC with at least one other container, can create a large number of IPC resources in /dev/shm. The malicious container will continue to exhaust resources until it is out-of-memory (OOM) killed. While the malicious container's cgroup will be removed, the IPC resources it created are not. Those resources are tied to the IPC namespace that will not be removed until all containers using it are stopped, and one non-malicious container is holding the namespace open. The malicious container is restarted, either automatically or by attacker control, repeating the process and increasing the amount of memory consumed. With a container configured to restart always, such as `podman run --restart=always`, this can result in a memory-based denial of service of the system.
CVSS Score: 7.7 (HIGH)
CWE: CWE-400
References: https://access.redhat.com/security/cve/CVE-2024-3056; https://bugzilla.redhat.com/show_bug.cgi?id=2270717; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-7319
Published: 2024-08-02
Description: An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: https://access.redhat.com/security/cve/CVE-2024-7319; https://bugzilla.redhat.com/show_bug.cgi?id=2258810
CVE: CVE-2024-6390
Published: 2024-08-03
Description: The Quiz and Survey Master (QSM)  WordPress plugin before 9.1.0 does not properly sanitise and escape some of its Quizz settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/00586687-33c7-4d84-b606-0478b1063d24/
CVE: CVE-2024-6477
Published: 2024-08-03
Description: The UsersWP WordPress plugin before 1.2.12 uses predictable filenames when an admin generates an export, which could allow unauthenticated attackers to download them and retrieve sensitive information such as IP, username, and email address
CVSS Score: 7.5 (HIGH)
References: https://wpscan.com/vulnerability/346c855a-4d42-4a87-aac9-e5bfc2242b16/
CVE: CVE-2024-7291
Published: 2024-08-03
Description: The JetFormBuilder plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.3.4.1. This is due to improper restriction on user meta fields. This makes it possible for authenticated attackers, with administrator-level and above permissions, to register as super-admins on the sites configured as multi-sites.
CVSS Score: 7.2 (HIGH)
CWE: CWE-269
References: https://plugins.trac.wordpress.org/browser/jetformbuilder/tags/3.3.4.1/includes/actions/methods/update-user/user-meta-property.php#L23; https://plugins.trac.wordpress.org/browser/jetformbuilder/tags/3.3.4.1/includes/actions/types/register-user.php#L220; https://www.wordfence.com/threat-intel/vulnerabilities/id/0d8ea1c2-7c6e-43b3-97ca-a06438d51d11?source=cve
CVE: CVE-2024-7031
Published: 2024-08-03
Description: The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'njt_fs_saveSettingRestrictions' function in all versions up to, and including, 1.8.2. This makes it possible for authenticated attackers, with a role that has been granted permissions by an Administrator, to update the plugin settings for user role restrictions, including allowing file types such as .php to be uploaded.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/filester/trunk/includes/File_manager/FileManager.php#L566; https://plugins.trac.wordpress.org/changeset/3129722/; https://www.wordfence.com/threat-intel/vulnerabilities/id/aef584bd-60a5-4bf2-b8d3-58e3b45e785e?source=cve
CVE: CVE-2024-7257
Published: 2024-08-03
Description: The YayExtra – WooCommerce Extra Product Options plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handle_upload_file function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://plugins.trac.wordpress.org/browser/yayextra/tags/1.3.6/includes/Classes/ProductPage.php#L1413; https://plugins.trac.wordpress.org/browser/yayextra/tags/1.3.6/includes/Classes/ProductPage.php#L1452; https://plugins.trac.wordpress.org/changeset/3129731/
CVE: CVE-2024-7356
Published: 2024-08-03
Description: The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘filename’ parameter in all versions up to, and including, 3.3.100 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/zephyr-project-manager/trunk/assets/js/core-admin.js#L2975; https://plugins.trac.wordpress.org/changeset/3129917/; https://wordpress.org/plugins/zephyr-project-manager/#developers
CVE: CVE-2024-6709
Published: 2024-08-03
Description: The Sync Post With Other Site plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'sps_add_update_post' function in all versions up to, and including, 1.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create new draft posts and update existing posts.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/sync-post-with-other-site/trunk/includes/sps_sync.class.php#L231; https://plugins.trac.wordpress.org/changeset/3128945/; https://www.wordfence.com/threat-intel/vulnerabilities/id/3d97eee1-0f72-4dd3-998a-acb454fa5e8a?source=cve
CVE: CVE-2024-6872
Published: 2024-08-03
Description: The Build Your Dream Website Fast with 400+ Starter Templates and Landing Pages, No Coding Needed, One-Click Import for Elementor & Gutenberg Blocks! – TemplateSpare plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'templatespare_activate_required_theme' and 'templatespare_get_theme_status' functions in all versions up to, and including, 2.4.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate any installed theme and read any theme status. If the attacker attempts to activate a theme that is not installed, a non-existent theme with the slug chosen by the attacker will be considered the active theme, leaving the site with no theme functionality.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/templatespare/trunk/includes/templatespare-kit.php#L13; https://plugins.trac.wordpress.org/browser/templatespare/trunk/includes/templatespare-kit.php#L34; https://plugins.trac.wordpress.org/changeset/3129809/
CVE: CVE-2024-38321
Published: 2024-08-03
Description: IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 stores potentially sensitive information in log files under certain situations that could be read by an authenticated user.  IBM X-Force ID:  284868.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-532
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/294868; https://www.ibm.com/support/pages/node/7162334
CVE: CVE-2024-7436
Published: 2024-08-03
Description: A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07. This issue affects the function msp_info_htm of the file msp_info.htm. The manipulation of the argument cmd leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273521 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77
References: https://github.com/aLtEr6/pdf/blob/main/2.pdf; https://vuldb.com/?ctiid.273521; https://vuldb.com/?id.273521
CVE: CVE-2024-7437
Published: 2024-08-03
Description: A vulnerability, which was classified as critical, was found in SimpleMachines SMF 2.1.4. Affected is an unknown function of the file /index.php?action=profile;u=2;area=showalerts;do=remove of the component Delete User Handler. The manipulation of the argument aid leads to improper control of resource identifiers. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-99, CWE-639
References: https://github.com/Fewword/Poc/blob/main/smf/smf-poc1.md; https://vuldb.com/?ctiid.273522; https://vuldb.com/?id.273522
CVE: CVE-2024-37286
Published: 2024-08-03
Description: APM server logs contain document body from a partially failed bulk index request. For example, in case of unavailable_shards_exception for a specific document, since the ES response line contains the document body, and that APM server logs the ES response line on error, the document is effectively logged.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://discuss.elastic.co/t/apm-server-8-14-0-security-update-esa-2024-19/364289
CVE: CVE-2024-7438
Published: 2024-08-03
Description: A vulnerability has been found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?action=profile;u=2;area=showalerts;do=read of the component User Alert Read Status Handler. The manipulation of the argument aid leads to improper control of resource identifiers. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-99, CWE-639
References: https://github.com/Fewword/Poc/blob/main/smf/smf-poc2.md; https://vuldb.com/?ctiid.273523; https://vuldb.com/?id.273523
CVE: CVE-2024-7439
Published: 2024-08-03
Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek CC8160 VVTK-0100d and classified as critical. Affected by this issue is the function read of the component httpd. The manipulation of the argument Content-Length leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273524. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the affected release tree is end-of-life.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-119
References: https://vuldb.com/?ctiid.273524; https://vuldb.com/?id.273524; https://vuldb.com/?submit.383830
CVE: CVE-2024-7440
Published: 2024-08-03
Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek CC8160 VVTK-0100d. It has been classified as critical. This affects the function getenv of the file upload_file.cgi. The manipulation of the argument QUERY_STRING leads to command injection. It is possible to initiate the attack remotely. The identifier VDB-273525 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the affected release tree is end-of-life.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77, CWE-77
References: https://vuldb.com/?ctiid.273525; https://vuldb.com/?id.273525; https://vuldb.com/?submit.383839
CVE: CVE-2024-7441
Published: 2024-08-03
Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been declared as critical. This vulnerability affects the function read of the component httpd. The manipulation of the argument Content-Length leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-273526 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the affected release tree is end-of-life.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-119
References: https://vuldb.com/?ctiid.273526; https://vuldb.com/?id.273526; https://vuldb.com/?submit.383842
CVE: CVE-2024-7442
Published: 2024-08-03
Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been rated as critical. This issue affects the function getenv of the file upload_file.cgi. The manipulation of the argument QUERY_STRING leads to command injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-273527. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the affected release tree is end-of-life.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77
References: https://vuldb.com/?ctiid.273527; https://vuldb.com/?id.273527; https://vuldb.com/?submit.383843