deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-7295
Published: 2024-10-16
Description: The Video Grid plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2824307%40video-grid%2Ftags%2F1.21&new=2900422%40video-grid%2Ftags%2F1.22; https://www.wordfence.com/threat-intel/vulnerabilities/id/db5247ad-dbbf-4d8e-92f5-3a673b97d080?source=cve
CVE: CVE-2023-7296
Published: 2024-10-16
Description: The BigBlueButton plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the moderator code and viewer code fields in versions up to, and including, 3.0.0-beta.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with author privileges or higher to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/bigbluebutton/trunk/public/partials/bigbluebutton-join-display.php#L26; https://www.wordfence.com/threat-intel/vulnerabilities/id/5f829d21-5347-46ec-9218-2b3cbe7d7b95?source=cve
CVE: CVE-2024-45216
Published: 2024-10-16
Description: Improper Authentication vulnerability in Apache Solr.

Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass.
A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path.
This fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing.


This issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0.

Users are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-863
References: https://solr.apache.org/security.html#cve-2024-45216-apache-solr-authentication-bypass-possible-using-a-fake-url-path-ending; http://www.openwall.com/lists/oss-security/2024/10/15/8
CVE: CVE-2024-45217
Published: 2024-10-16
Description: Insecure Default Initialization of Resource vulnerability in Apache Solr.

New ConfigSets that are created via a Restore command, which copy a configSet from the backup and give it a new name, are created without setting the "trusted" metadata.
ConfigSets that do not contain the flag are trusted implicitly if the metadata is missing, therefore this leads to "trusted" ConfigSets that may not have been created with an Authenticated request.
"trusted" ConfigSets are able to load custom code into classloaders, therefore the flag is supposed to only be set when the request that uploads the ConfigSet is Authenticated & Authorized.

This issue affects Apache Solr: from 6.6.0 before 8.11.4, from 9.0.0 before 9.7.0. This issue does not affect Solr instances that are secured via Authentication/Authorization.

Users are primarily recommended to use Authentication and Authorization when running Solr. However, upgrading to version 9.7.0, or 8.11.4 will mitigate this issue otherwise.
CVSS Score: 8.1 (HIGH)
CWE: CWE-1188
References: https://solr.apache.org/security.html#cve-2024-45217-apache-solr-configsets-created-during-a-backup-restore-command-are-trusted-implicitly; http://www.openwall.com/lists/oss-security/2024/10/15/9
CVE: CVE-2024-45219
Published: 2024-10-16
Description: Account users in Apache CloudStack by default are allowed to upload and register templates for deploying instances and volumes for attaching them as data disks to their existing instances. Due to missing validation checks for KVM-compatible templates or volumes in CloudStack 4.0.0 through 4.18.2.3 and 4.19.0.0 through 4.19.1.1, an attacker that can upload or register templates and volumes, can use them to deploy malicious instances or attach uploaded volumes to their existing instances on KVM-based environments and exploit this to gain access to the host filesystems that could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of KVM-based infrastructure managed by CloudStack.


Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue. 

Additionally, all user-uploaded or registered KVM-compatible templates and volumes can be scanned and checked that they are flat files that should not be using any additional or unnecessary features. For example, operators can run this on their secondary storage(s) and inspect output. An empty output for the disk being validated means it has no references to the host filesystems; on the other hand, if the output for the disk being validated is not empty, it might indicate a compromised disk.


for file in $(find /path/to/storage/ -type f -regex [a-f0-9\-]*.*); do echo "Retrieving file [$file] info. If the output is not empty, that might indicate a compromised disk; check it carefully."; qemu-img info -U $file | grep file: ; printf "\n\n"; done
The command can also be run for the file-based primary storages; however, bear in mind that (i) volumes created from templates will have references for the templates at first and (ii) volumes can be consolidated while migrating, losing their references to the templates. Therefore, the command execution for the primary storages can show both false positives and false negatives.

For checking the whole template/volume features of each disk, operators can run the following command:


for file in $(find /path/to/storage/ -type f -regex [a-f0-9\-]*.*); do echo "Retrieving file [$file] info."; qemu-img info -U $file; printf "\n\n"; done
CVSS Score: 8.5 (HIGH)
CWE: CWE-20, CWE-116
References: https://cloudstack.apache.org/blog/security-release-advisory-4.18.2.4-4.19.1.2; https://lists.apache.org/thread/ktsfjcnj22x4kg49ctock3d9tq7jnvlo; https://www.shapeblue.com/shapeblue-security-advisory-apache-cloudstack-security-releases-4-18-2-4-and-4-19-1-2/
CVE: CVE-2024-45461
Published: 2024-10-16
Description: The CloudStack Quota feature allows cloud administrators to implement a quota or usage limit system for cloud resources, and is disabled by default. In environments where the feature is enabled, due to missing access check enforcements, non-administrative CloudStack user accounts are able to access and modify quota-related configurations and data. This issue affects Apache CloudStack from 4.7.0 through 4.18.2.3; and from 4.19.0.0 through 4.19.1.1, where the Quota feature is enabled.




Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue. Alternatively, users that do not use the Quota feature are advised to disabled the plugin by setting the global setting "quota.enable.service" to "false".
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://cloudstack.apache.org/blog/security-release-advisory-4.18.2.4-4.19.1.2; https://lists.apache.org/thread/ktsfjcnj22x4kg49ctock3d9tq7jnvlo; https://www.shapeblue.com/shapeblue-security-advisory-apache-cloudstack-security-releases-4-18-2-4-and-4-19-1-2/
CVE: CVE-2024-45462
Published: 2024-10-16
Description: The logout operation in the CloudStack web interface does not expire the user session completely which is valid until expiry by time or restart of the backend service. An attacker that has access to a user's browser can use an unexpired session to gain access to resources owned by the logged out user account. This issue affects Apache CloudStack from 4.15.1.0 through 4.18.2.3; and from 4.19.0.0 through 4.19.1.1.




Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-613
References: https://cloudstack.apache.org/blog/security-release-advisory-4.18.2.4-4.19.1.2; https://cloudstack.apache.org/blog/security-release-advisory-4.18.2.4-4.19.1.2; https://lists.apache.org/thread/ktsfjcnj22x4kg49ctock3d9tq7jnvlo
CVE: CVE-2024-45693
Published: 2024-10-16
Description: Users logged into the Apache CloudStack's web interface can be tricked to submit malicious CSRF requests due to missing validation of the origin of the requests. This can allow an attacker to gain privileges and access to resources of the authenticated users and may lead to account takeover, disruption, exposure of sensitive data and compromise integrity of the resources owned by the user account that are managed by the platform.

This issue affects Apache CloudStack from 4.15.1.0 through 4.18.2.3 and 4.19.0.0 through 4.19.1.1



Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: https://cloudstack.apache.org/blog/security-release-advisory-4.18.2.4-4.19.1.2; https://cloudstack.apache.org/blog/security-release-advisory-4.18.2.4-4.19.1.2; https://lists.apache.org/thread/ktsfjcnj22x4kg49ctock3d9tq7jnvlo
CVE: CVE-2024-45710
Published: 2024-10-16
Description: SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege account and local access to the affected node machine.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-45710
CVE: CVE-2024-45711
Published: 2024-10-16
Description: SolarWinds Serv-U is vulnerable  to a directory traversal  vulnerability where remote code execution is possible depending on privileges given to the authenticated user.  This issue requires a user to be authenticated and this is present when software environment variables are abused. Authentication is required for this vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-45711
CVE: CVE-2024-45714
Published: 2024-10-16
Description: Application is vulnerable to Cross Site Scripting (XSS) an authenticated attacker with users’ permissions can modify a variable with a payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-45714
CVE: CVE-2024-45715
Published: 2024-10-16
Description: The SolarWinds Platform was susceptible to a Cross-Site Scripting vulnerability when performing an edit function to existing elements.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-45715
CVE: CVE-2024-9061
Published: 2024-10-16
Description: The The WP Popup Builder – Popup Forms and Marketing Lead Generation plugin for WordPress is vulnerable to arbitrary shortcode execution via the wp_ajax_nopriv_shortcode_Api_Add AJAX action in all versions up to, and including, 1.3.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. NOTE: This vulnerability was partially fixed in version 1.3.5 with a nonce check, which effectively prevented access to the affected function. However, version 1.3.6 incorporates the correct authorization check to prevent unauthorized access.
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://plugins.trac.wordpress.org/changeset/3166506/wp-popup-builder; https://www.wordfence.com/threat-intel/vulnerabilities/id/0cac1dc0-87dc-43eb-9db1-638a91200b43?source=cve
CVE: CVE-2024-9540
Published: 2024-10-16
Description: The Sina Extension for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.7 via the render function in widgets/advanced/sina-modal-box.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft Elementor template data.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/changeset/3167197/sina-extension-for-elementor; https://www.wordfence.com/threat-intel/vulnerabilities/id/ab8659e1-5880-4738-99ed-e671449c6878?source=cve
CVE: CVE-2023-22650
Published: 2024-10-16
Description: A vulnerability has been identified in which Rancher does not automatically clean up a user which has been deleted from the configured authentication provider (AP). This characteristic also applies to disabled or revoked users, Rancher will not reflect these modifications which may leave the user’s tokens still usable.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287, CWE-306
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22650; https://github.com/rancher/rancher/security/advisories/GHSA-9ghh-mmcq-8phc
CVE: CVE-2023-32188
Published: 2024-10-16
Description: A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead to an RCE.
CWE: CWE-1270
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32188; https://github.com/neuvector/neuvector/security/advisories/GHSA-622h-h2p8-743x
CVE: CVE-2024-9858
Published: 2024-10-16
Description: There exists an insecure default user permission in Google Cloud Migrate to containers from version 1.1.0 to 1.2.2 Windows installs. A local "m2cuser" was greated with administrator privileges. This posed a security risk if the "analyze" or "generate" commands were interrupted or skipping the action to delete the local user “m2cuser”. We recommend upgrading to 1.2.3 or beyond
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://cloud.google.com/migrate/containers/docs/m2c-cli-relnotes#october_8_2024
CVE: CVE-2024-9444
Published: 2024-10-16
Description: The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/element-ready-lite/trunk/inc/helper_functions.php#L1559; https://plugins.trac.wordpress.org/changeset/3167864/; https://wordpress.org/plugins/element-ready-lite/#developers
CVE: CVE-2024-8921
Published: 2024-10-16
Description: The Zita Elementor Site Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/zita-site-library/trunk/importer/wxr-importer.php#L160; https://plugins.trac.wordpress.org/browser/zita-site-library/trunk/inc/importer.php#L148; https://plugins.trac.wordpress.org/changeset/3168327/
CVE: CVE-2023-32190
Published: 2024-10-16
Description: mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32190
CVE: CVE-2024-10021
Published: 2024-10-16
Description: A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /php/manage_purchase.php?action=search&tag=VOUCHER_NUMBER. The manipulation of the argument text leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://code-projects.org/; https://gist.github.com/higordiego/439f2af836c2c7d6075ba9de2e1169da; https://vuldb.com/?ctiid.280556
CVE: CVE-2024-10022
Published: 2024-10-16
Description: A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/manage_supplier.php?action=search. The manipulation of the argument text leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://code-projects.org/; https://gist.github.com/higordiego/2bd0a94e480906a60ce83b8a4ec26957; https://vuldb.com/?ctiid.280557
CVE: CVE-2024-6380
Published: 2024-10-16
Description: A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://www.3ds.com/vulnerability/advisories
CVE: CVE-2024-8040
Published: 2024-10-16
Description: An authorization bypass through user-controlled key vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x allows an authenticated attacker to access some unauthorized data.
CVSS Score: 7.7 (HIGH)
CWE: CWE-639
References: https://www.3ds.com/vulnerability/advisories
CVE: CVE-2020-36841
Published: 2024-10-16
Description: The WooCommerce Smart Coupons plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the woocommerce_coupon_admin_init function in versions up to, and including, 4.6.0. This makes it possible for unauthenticated attackers to send themselves gift certificates of any value, which could be redeemed for products sold on the victim’s storefront.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-285
References: https://www.wordfence.com/blog/2020/03/coupon-creation-vulnerability-patched-in-woocommerce-smart-coupons/; https://www.wordfence.com/threat-intel/vulnerabilities/id/eeeb03f7-5f78-4462-b0b4-5080bbc419a3?source=cve
CVE: CVE-2023-32191
Published: 2024-10-16
Description: When RKE provisions a cluster, it stores the cluster state in a configmap called `full-cluster-state` inside the `kube-system` namespace of the cluster itself. The information available in there allows non-admin users to escalate to admin.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-922
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32191; https://github.com/rancher/rke/security/advisories/GHSA-6gr4-52w6-vmqx
CVE: CVE-2023-32192
Published: 2024-10-16
Description: A vulnerability has been identified in which unauthenticated cross-site 
scripting (XSS) in the API Server's public API endpoint can be 
exploited, allowing an attacker to execute arbitrary JavaScript code in the victim browser
CVSS Score: 8.3 (HIGH)
CWE: CWE-80
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32192; https://github.com/rancher/apiserver/security/advisories/GHSA-833m-37f7-jq55
CVE: CVE-2023-32193
Published: 2024-10-16
Description: A vulnerability has been identified in which unauthenticated cross-site 
scripting (XSS) in Norman's public API endpoint can be exploited. This 
can lead to an attacker exploiting the vulnerability to trigger 
JavaScript code and execute commands remotely.
CVSS Score: 8.3 (HIGH)
CWE: CWE-80
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32193; https://github.com/rancher/norman/security/advisories/GHSA-r8f4-hv23-6qp6
CVE: CVE-2023-32194
Published: 2024-10-16
Description: A vulnerability has been identified when granting a create or * global role for a resource type of "namespaces"; no matter the API group, the subject will receive *
 permissions for core namespaces. This can lead to someone being capable
 of accessing, creating, updating, or deleting a namespace in the 
project.
CVSS Score: 7.2 (HIGH)
CWE: CWE-269
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32194; https://github.com/rancher/rancher/security/advisories/GHSA-c85r-fwc7-45vc
CVE: CVE-2023-32196
Published: 2024-10-16
Description: A vulnerability has been identified whereby privilege escalation checks are not properly enforced for RoleTemplateobjects when external=true, which in specific scenarios can lead to privilege escalation.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-269
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32196; https://github.com/rancher/rancher/security/advisories/GHSA-64jq-m7rq-768h
CVE: CVE-2024-10023
Published: 2024-10-16
Description: A vulnerability classified as critical was found in code-projects Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /php/add_new_medicine.php. The manipulation of the argument name/packing/generic_name/suppliers_name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://code-projects.org/; https://gist.github.com/higordiego/01a35a20a4e20e937d384b677c000921; https://vuldb.com/?ctiid.280558
CVE: CVE-2024-10024
Published: 2024-10-16
Description: A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System 1.0. This issue affects some unknown processing of the file /php/manage_medicine_stock.php. The manipulation of the argument name/packing/generic_name/suppliers_name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://code-projects.org/; https://gist.github.com/higordiego/b0083f7f12dee245c2fbe7102e31d9a4; https://vuldb.com/?ctiid.280559
CVE: CVE-2024-48042
Published: 2024-10-16
Description: Deserialization of Untrusted Data vulnerability in supsystic Contact Form by Supsystic contact-form-by-supsystic allows Command Injection.This issue affects Contact Form by Supsystic: from n/a through <= 1.7.28.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-82
References: https://patchstack.com/database/Wordpress/Plugin/contact-form-by-supsystic/vulnerability/wordpress-contact-form-by-supsystic-plugin-1-7-28-remote-code-execution-rce-vulnerability?_s_id=cve
CVE: CVE-2024-49247
Published: 2024-10-16
Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in SK BuddyPress Better Registration better-bp-registration allows Authentication Bypass.This issue affects BuddyPress Better Registration: from n/a through <= 1.6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://patchstack.com/database/Wordpress/Plugin/better-bp-registration/vulnerability/wordpress-buddypress-better-registration-plugin-1-6-broken-authentication-vulnerability?_s_id=cve
CVE: CVE-2024-49257
Published: 2024-10-16
Description: Unrestricted Upload of File with Dangerous Type vulnerability in Denis Azz Anonim Posting azz-anonim-posting allows Upload a Web Shell to a Web Server.This issue affects Azz Anonim Posting: from n/a through <= 0.9.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-434
References: https://patchstack.com/database/Wordpress/Plugin/azz-anonim-posting/vulnerability/wordpress-azz-anonim-posting-plugin-0-9-arbitrary-file-upload-vulnerability?_s_id=cve