deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-48792
Published: 2024-10-14
Description: An issue in Hideez com.hideez 2.7.8.3 allows a remote attacker to obtain sensitive information via the firmware update process.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.hideez/com.hideez.md; https://hideez.com/en-int
CVE: CVE-2024-48793
Published: 2024-10-14
Description: An issue in INATRONIC com.inatronic.bmw 2.7.1 allows a remote attacker to obtain sensitive information via the firmware update process.
CVSS Score: 5.9 (MEDIUM)
References: https://drivedeck.de/; https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.inatronic.bmw/com.inatronic.bmw.md
CVE: CVE-2024-48795
Published: 2024-10-14
Description: An issue in Creative Labs Pte Ltd com.creative.apps.xficonnect 2.00.02 allows a remote attacker to obtain sensitive information via the firmware update process.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.creative.apps.xficonnect/com.creative.apps.xficonnect.md; https://hk.creative.com/
CVE: CVE-2023-48082
Published: 2024-10-14
Description: Nagios XI before 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly generate the same set of API keys for all users and utilize them to authenticate.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-79
References: https://www.nagios.com/change-log/
CVE: CVE-2024-47885
Published: 2024-10-14
Description: The Astro web framework has a DOM Clobbering gadget in the client-side router starting in version 3.0.0 and prior to version 4.16.1. It can lead to cross-site scripting (XSS) in websites enables Astro's client-side routing and has *stored* attacker-controlled scriptless HTML elements (i.e., `iframe` tags with unsanitized `name` attributes) on the destination pages. This vulnerability can result in cross-site scripting (XSS) attacks on websites that built with Astro that enable the client-side routing with `ViewTransitions` and store the user-inserted scriptless HTML tags without properly sanitizing the `name` attributes on the page. Version 4.16.1 contains a patch for this issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://github.com/withastro/astro/blob/7814a6cad15f06931f963580176d9b38aa7819f2/packages/astro/src/transitions/router.ts#L135-L156; https://github.com/withastro/astro/commit/a4ffbfaa5cb460c12bd486fd75e36147f51d3e5e; https://github.com/withastro/astro/security/advisories/GHSA-m85w-3h95-hcf9
CVE: CVE-2024-48821
Published: 2024-10-14
Description: Cross Site Scripting vulnerability in Automatic Systems Maintenance SlimLane 29565_d74ecce0c1081d50546db573a499941b10799fb7 allows a remote attacker to escalate privileges via the FtpConfig.php component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://daly.wtf/multiple-vulnerabilities-discovered-in-automatic-systems-software/
CVE: CVE-2024-48822
Published: 2024-10-14
Description: Privilege escalation in Automatic Systems Maintenance SlimLane 29565_d74ecce0c1081d50546db573a499941b10799fb7 allows a remote attacker to escalate privileges via the FtpConfig.php page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://daly.wtf/multiple-vulnerabilities-discovered-in-automatic-systems-software/
CVE: CVE-2024-48823
Published: 2024-10-14
Description: Local file inclusion in Automatic Systems Maintenance SlimLane 29565_d74ecce0c1081d50546db573a499941b10799fb7 allows a remote attacker to escalate privileges via the PassageAutoServer.php page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://daly.wtf/multiple-vulnerabilities-discovered-in-automatic-systems-software/
CVE: CVE-2024-48824
Published: 2024-10-14
Description: An issue in Automatic Systems Maintenance SlimLane 29565_d74ecce0c1081d50546db573a499941b10799fb7 allows a remote attacker to obtain sensitive information via the Racine & FileName parameters in the download-file.php component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://daly.wtf/multiple-vulnerabilities-discovered-in-automatic-systems-software/
CVE: CVE-2024-48909
Published: 2024-10-14
Description: SpiceDB is an open source database for scalably storing and querying fine-grained authorization data. Starting in version 1.35.0 and prior to version 1.37.1, clients that have enabled `LookupResources2` and have caveats in the evaluation path for their requests can return a permissionship of `CONDITIONAL` with context marked as missing, even then the context was supplied. LookupResources2 is the new default in SpiceDB 1.37.0 and has been opt-in since SpiceDB 1.35.0. The bug is patched as part of SpiceDB 1.37.1. As a workaround, disable LookupResources2 via the `--enable-experimental-lookup-resources` flag by setting it to `false`.
CVSS Score: 2.0 (LOW)
CWE: CWE-172
References: https://github.com/authzed/spicedb/commit/2f3cf77a7fcfcb478ef5a480a245842c96ac8853; https://github.com/authzed/spicedb/security/advisories/GHSA-3c32-4hq9-6wgj
CVE: CVE-2024-48911
Published: 2024-10-14
Description: OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. Prior to version 0.9.4, where the config file is stored in an unprivileged user directory but the daemon is executed by root, it’s possible for the unprivileged user to change the config file and escalate permissions when root later runs the daemon. Version 0.9.4 contains a fix for the issue.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://github.com/thinkst/opencanary/commit/2c11575b1a3dd8b0df26a879ba856c0aa350c049; https://github.com/thinkst/opencanary/releases/tag/v0.9.4; https://github.com/thinkst/opencanary/security/advisories/GHSA-pf5v-pqfv-x8jj
CVE: CVE-2024-6207
Published: 2024-10-14
Description: CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted CIP message to the device.  If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation.  To recover the controllers, a download is required which ends any process that the controller is running.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1707.html
CVE: CVE-2024-35518
Published: 2024-10-14
Description: Netgear EX6120 v1.0.0.68 is vulnerable to Command Injection in genie_fix2.cgi via the wan_dns1_pri parameter.
CVSS Score: 8.4 (HIGH)
CWE: CWE-77, CWE-77
References: https://github.com/consrc/cves/blob/main/CVE-2024-35518.md
CVE: CVE-2024-35519
Published: 2024-10-14
Description: Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operating_mode.cgi via the ap_mode parameter.
CVSS Score: 8.4 (HIGH)
CWE: CWE-77, CWE-78
References: https://github.com/consrc/cves/blob/main/CVE-2024-35519.md
CVE: CVE-2024-35520
Published: 2024-10-14
Description: Netgear R7000 1.0.11.136 is vulnerable to Command Injection in RMT_invite.cgi via device_name2 parameter.
CVSS Score: 8.4 (HIGH)
CWE: CWE-77, CWE-77
References: https://kb.netgear.com/000066027/Security-Advisory-for-Post-Authentication-Command-Injection-on-the-R7000-PSV-2023-0154
CVE: CVE-2024-9953
Published: 2024-10-14
Description: A potential denial-of-service (DoS) vulnerability exists in CERT VINCE software versions prior to 3.0.8. An authenticated administrative user can inject an arbitrary pickle object into a user’s profile, which may lead to a DoS condition when the profile is accessed. While the Django server restricts unpickling to prevent server crashes, this vulnerability could still disrupt operations.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-502, CWE-502
References: https://github.com/CERTCC/VINCE/issues?q=label%3Asecurity
CVE: CVE-2024-30117
Published: 2024-10-14
Description: A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances.
CVSS Score: 2.5 (LOW)
CWE: CWE-427, CWE-427
References: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0116659
CVE: CVE-2024-9546
Published: 2024-10-15
Description: The WPIDE – File Manager & Code Editor plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.4.9. This is due to the plugin utilizing the PHP-Parser library, which outputs parser rebuild command execution results. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/browser/wpide/tags/3.4.9/vendor/nikic/php-parser/grammar/rebuildParsers.php#L77; https://www.wordfence.com/threat-intel/vulnerabilities/id/e884af8b-c83f-4380-bfaf-f1419fce125c?source=cve
CVE: CVE-2024-9548
Published: 2024-10-15
Description: The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the resource parameter in all versions up to, and including, 5.2.6 due to insufficient input sanitization and output escaping when logging visitor requests. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-slimstat/tags/5.2.6; https://plugins.trac.wordpress.org/browser/wp-slimstat/tags/5.2.6/admin/view/right-now.php#L196; https://www.wordfence.com/threat-intel/vulnerabilities/id/fa91912d-5794-4c96-8a13-bd54ce0f1deb?source=cve
CVE: CVE-2024-6757
Published: 2024-10-15
Description: The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 3.23.5 via the get_image_alt function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract either excerpt data or titles of private or password-protected posts.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/browser/elementor/tags/3.23.0/includes/controls/media.php#L413; https://www.wordfence.com/threat-intel/vulnerabilities/id/96fa9ed7-6c13-4356-8a25-8a309be2b0e9?source=cve
CVE: CVE-2024-9687
Published: 2024-10-15
Description: The WP 2FA with Telegram plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0. This is due to insufficient validation of the user-controlled key on the 'validate_tg' action. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user on the site, such as an administrator.
CVSS Score: 8.8 (HIGH)
CWE: CWE-639
References: https://plugins.trac.wordpress.org/browser/two-factor-login-telegram/tags/3.0/includes/class-wp-factor-telegram-plugin.php#L244; https://www.wordfence.com/threat-intel/vulnerabilities/id/13b5292f-4484-498b-b6b7-2895871ab794?source=cve
CVE: CVE-2024-9820
Published: 2024-10-15
Description: The WP 2FA with Telegram plugin for WordPress is vulnerable to Two-Factor Authentication Bypass in versions up to, and including, 3.0. This is due to the two-factor code being stored in a cookie, which makes it possible to bypass two-factor authentication.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-784, CWE-565
References: https://plugins.trac.wordpress.org/browser/two-factor-login-telegram/tags/3.0/includes/class-wp-factor-telegram-plugin.php#L228; https://www.wordfence.com/threat-intel/vulnerabilities/id/ccd73030-7185-4302-b3fd-29cbbe716e3e?source=cve
CVE: CVE-2024-9952
Published: 2024-10-15
Description: A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/?page=system_info/contact_info of the component Contact Information Page. The manipulation of the argument Address leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://gist.github.com/higordiego/bedd395e74a335f0145872c96d7cb92d; https://vuldb.com/?ctiid.280319; https://vuldb.com/?id.280319
CVE: CVE-2024-9968
Published: 2024-10-15
Description: WebEIP v3.0 from 

NewType does not properly validate user input, allowing remote attackers with regular privilege to inject SQL commands to read, modify, and delete data stored in database. The affected product is no longer maintained. It is recommended to upgrade to the new product.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.twcert.org.tw/en/cp-139-8133-2cc3a-2.html; https://www.twcert.org.tw/tw/cp-132-8132-160bb-1.html
CVE: CVE-2024-9969
Published: 2024-10-15
Description: NewType WebEIP v3.0 does not properly validate user input, allowing a remote attacker with regular privileges to insert JavaScript into specific parameters, resulting in a Reflected Cross-site Scripting (XSS) attack. The affected product is no longer maintained. It is recommended to upgrade to the new product.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.twcert.org.tw/en/cp-139-8135-ce1e6-2.html; https://www.twcert.org.tw/tw/cp-132-8134-c476d-1.html
CVE: CVE-2024-9970
Published: 2024-10-15
Description: The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability. Remote attackers with regular privileges can elevate their privileges to administrator by tampering with a specific cookie.
CVSS Score: 8.8 (HIGH)
CWE: CWE-565
References: https://www.twcert.org.tw/en/cp-139-8137-ea537-2.html; https://www.twcert.org.tw/tw/cp-132-8136-4d5b4-1.html
CVE: CVE-2024-9971
Published: 2024-10-15
Description: The specific query functionality in the FlowMaster BPM Plus from NewType does not properly restrict user input, allowing remote attackers with regular privileges to inject SQL commands to read, modify, or delete database contents.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.twcert.org.tw/en/cp-139-8139-4daab-2.html; https://www.twcert.org.tw/tw/cp-132-8138-d2bb7-1.html
CVE: CVE-2024-21535
Published: 2024-10-15
Description: Versions of the package markdown-to-jsx before 7.4.0 are vulnerable to Cross-site Scripting (XSS) via the src property due to improper input sanitization. An attacker can execute arbitrary code by injecting a malicious iframe element in the markdown.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/quantizor/markdown-to-jsx/commit/8eb74da825c0d8d2e9508d73c672bcae36ba555a; https://security.snyk.io/vuln/SNYK-JS-MARKDOWNTOJSX-6258886
CVE: CVE-2024-0129
Published: 2024-10-15
Description: NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction. A successful exploit of this vulnerability may lead to code execution and data tampering.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5580
CVE: CVE-2024-9944
Published: 2024-10-15
Description: The WooCommerce plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 9.0.2. This is due to the plugin not properly neutralizing HTML elements from submitted order forms. This makes it possible for unauthenticated attackers to inject arbitrary HTML that will render when the administrator views order form submissions.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/woocommerce/woocommerce/pull/49370; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3115837%40woocommerce%2Ftrunk&old=3106873%40woocommerce%2Ftrunk&sfp_email=&sfph_mail=; https://raw.githubusercontent.com/woocommerce/woocommerce/trunk/changelog.txt
CVE: CVE-2024-46898
Published: 2024-10-15
Description: SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability. If this vulnerability is exploited, arbitrary files on the server may be retrieved when processing crafted HTTP requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/shirasagi/shirasagi/commit/5ac4685d7e4330f949f[PII_REDACTED]fc5d768934; https://jvn.jp/en/jp/JVN58721679/; https://www.ss-proj.org/
CVE: CVE-2024-9972
Published: 2024-10-15
Description: Property Management System from ChanGate has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.chtsecurity.com/news/4552fc54-18af-4c18-972d-394a68e44a39; https://www.chtsecurity.com/news/8585c924-4a27-4337-bb44-684adc206432; https://www.twcert.org.tw/en/cp-139-8141-9b045-2.html
CVE: CVE-2024-9837
Published: 2024-10-15
Description: The The AADMY – Add Auto Date Month Year Into Posts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.0.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://plugins.trac.wordpress.org/browser/auto-date-year-month/trunk/auto-date-year-month.php#L218; https://plugins.trac.wordpress.org/changeset/3167908/; https://wordpress.org/plugins/auto-date-year-month/#developers
CVE: CVE-2024-9980
Published: 2024-10-15
Description: The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify and delete database contents.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.twcert.org.tw/en/cp-139-8143-53d30-2.html; https://www.twcert.org.tw/tw/cp-132-8142-cf0d3-1.html
CVE: CVE-2024-9981
Published: 2024-10-15
Description: The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to upload a malicious PHP file first and then exploit this vulnerability to include the file, resulting in arbitrary code execution on the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-98, CWE-434
References: https://www.twcert.org.tw/en/cp-139-8145-15bea-2.html; https://www.twcert.org.tw/tw/cp-132-8144-2885b-1.html
CVE: CVE-2024-9982
Published: 2024-10-15
Description: AIM LINE Marketing Platform from Esi Technology does not properly validate a specific query parameter. When the LINE Campaign Module is enabled, unauthenticated remote attackers can inject arbitrary FetchXml commands to read, modify, and delete database content.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.twcert.org.tw/en/cp-139-8147-eb650-2.html; https://www.twcert.org.tw/tw/cp-132-8146-497a2-1.html
CVE: CVE-2024-47943
Published: 2024-10-15
Description: The firmware upgrade function in the admin web interface of the Rittal IoT Interface & CMC III Processing Unit devices checks if 
the patch files are signed before executing the containing run.sh 
script. The signing process is kind of an HMAC with a long string as key
 which is hard-coded in the firmware and is freely available for 
download. This allows crafting malicious "signed" .patch files in order 
to compromise the device and execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-347
References: https://r.sec-consult.com/rittaliot; https://www.rittal.com/de-de/products/deep/3124300; http://seclists.org/fulldisclosure/2024/Oct/4
CVE: CVE-2024-47944
Published: 2024-10-15
Description: The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface. This leads to an unauthenticated code execution via the firmware upgrade function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-1299
References: https://r.sec-consult.com/rittaliot; https://www.rittal.com/de-de/products/deep/3124300; http://seclists.org/fulldisclosure/2024/Oct/4
CVE: CVE-2024-9895
Published: 2024-10-15
Description: The Smart Online Order for Clover plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's moo_receipt_link shortcode in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/clover-online-orders/trunk/includes/shortcodes/checkoutPage.php#L2011; https://plugins.trac.wordpress.org/browser/clover-online-orders/trunk/moo_OnlineOrders.php#L171; https://plugins.trac.wordpress.org/browser/clover-online-orders/trunk/moo_OnlineOrders.php#L90
CVE: CVE-2024-9925
Published: 2024-10-15
Description: SQL injection vulnerability in TAI Smart Factory's QPLANT SF version 1.0. Exploitation of this vulnerability could allow a remote attacker to retrieve all database information by sending a specially crafted SQL query to the ‘email’ parameter on the ‘RequestPasswordChange’ endpoint.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://incibe.es/en/incibe-cert/notices/aviso-sci/sql-injection-qplant-tai-smart-factory
CVE: CVE-2024-9983
Published: 2024-10-15
Description: Enterprise Cloud Database from Ragic does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-23, CWE-22
References: https://www.twcert.org.tw/en/cp-139-8149-31424-2.html; https://www.twcert.org.tw/tw/cp-132-8148-ed790-1.html
CVE: CVE-2024-9984
Published: 2024-10-15
Description: Enterprise Cloud Database from Ragic does not authenticate access to specific functionality, allowing unauthenticated remote attackers to use this functionality to obtain any user's session cookie.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.twcert.org.tw/en/cp-139-8151-1a4b5-2.html; https://www.twcert.org.tw/tw/cp-132-8150-c955a-1.html
CVE: CVE-2024-9985
Published: 2024-10-15
Description: Enterprise Cloud Database from Ragic does not properly validate the file type for uploads. Attackers with regular privileges can upload a webshell and use it to execute arbitrary code on the remote server.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://www.twcert.org.tw/en/cp-139-8153-1120e-2.html; https://www.twcert.org.tw/tw/cp-132-8152-09e81-1.html
CVE: CVE-2024-47945
Published: 2024-10-15
Description: The devices are vulnerable to session hijacking due to insufficient 
entropy in its session ID generation algorithm. The session IDs are 
predictable, with only 32,768 possible values per user, which allows 
attackers to pre-generate valid session IDs, leading to unauthorized 
access to user sessions. This is not only due to the use of an 
(insecure) rand() function call but also because of missing 
initialization via srand(). As a result only the PIDs are effectively 
used as seed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-340, CWE-331
References: https://r.sec-consult.com/rittaliot; https://www.rittal.com/de-de/products/deep/3124300; http://seclists.org/fulldisclosure/2024/Oct/4
CVE: CVE-2024-9973
Published: 2024-10-15
Description: A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=reports of the component Report Viewing Page. The manipulation of the argument date leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://gist.github.com/higordiego/b9699573de61b26f2290e69f38d23fd0; https://vuldb.com/?ctiid.280338; https://vuldb.com/?id.280338