deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-47061
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU

If allocating a new instance of an I/O bus fails when unregistering a
device, wait to destroy the device until after all readers are guaranteed
to see the new null bus.  Destroying devices before the bus is nullified
could lead to use-after-free since readers expect the devices on their
reference of the bus to remain valid.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/03c6cccedd[PII_REDACTED]faa252a4da[PII_REDACTED]; https://git.kernel.org/stable/c/2ee3757424be7c1cd1d0bbfa6db29a7edd82a250; https://git.kernel.org/stable/c/30f46c6993731efb2a690c9197c0fd9ed425da2d
CVE: CVE-2021-47062
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs

Use the kvm_for_each_vcpu() helper to iterate over vCPUs when encrypting
VMSAs for SEV, which effectively switches to use online_vcpus instead of
created_vcpus.  This fixes a possible null-pointer dereference as
created_vcpus does not guarantee a vCPU exists, since it is updated at
the very beginning of KVM_CREATE_VCPU.  created_vcpus exists to allow the
bulk of vCPU creation to run in parallel, while still correctly
restricting the max number of max vCPUs.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/ba7bf5d6336aa9c0d977b161bfa420c56d46ee40; https://git.kernel.org/stable/c/bd0cced2ae93195668f983d443f7f17e8efd24d2; https://git.kernel.org/stable/c/c36b16d29f3af5f32fc1b2a3401bf48f71cabee1
CVE: CVE-2021-47063
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

drm: bridge/panel: Cleanup connector on bridge detach

If we don't call drm_connector_cleanup() manually in
panel_bridge_detach(), the connector will be cleaned up with the other
DRM objects in the call to drm_mode_config_cleanup(). However, since our
drm_connector is devm-allocated, by the time drm_mode_config_cleanup()
will be called, our connector will be long gone. Therefore, the
connector must be cleaned up when the bridge is detached to avoid
use-after-free conditions.

v2: Cleanup connector only if it was created

v3: Add FIXME

v4: (Use connector->dev) directly in if() block
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/18149b420c9bd93c443e8d1f48a063d71d9f6aa1; https://git.kernel.org/stable/c/4d906839d321c2efbf3fed4bc31ffd9ff55b75c0; https://git.kernel.org/stable/c/98d7d76a74e48ec3ddf2e23950adff7edcab9327
CVE: CVE-2021-47064
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

mt76: fix potential DMA mapping leak

With buf uninitialized in mt76_dma_tx_queue_skb_raw, its field skip_unmap
could potentially inherit a non-zero value from stack garbage.
If this happens, it will cause DMA mappings for MCU command frames to not be
unmapped after completion
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/91b9548d413fda488ea853cd1b9f59b572db3a0c; https://git.kernel.org/stable/c/9b68ce2856dadc0e1cb6fd21fbeb850da49efd08; https://git.kernel.org/stable/c/9fa26701cd1fc4d932d431971efc5746325bdfce
CVE: CVE-2021-47065
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

rtw88: Fix array overrun in rtw_get_tx_power_params()

Using a kernel with the Undefined Behaviour Sanity Checker (UBSAN) enabled, the
following array overrun is logged:

================================================================================
UBSAN: array-index-out-of-bounds in /home/finger/wireless-drivers-next/drivers/net/wireless/realtek/rtw88/phy.c:1789:34
index 5 is out of range for type 'u8 [5]'
CPU: 2 PID: 84 Comm: kworker/u16:3 Tainted: G           O      5.12.0-rc5-00086-gd88bba47038e-dirty #651
Hardware name: TOSHIBA TECRA A50-A/TECRA A50-A, BIOS Version 4.50   09/29/2014
Workqueue: phy0 ieee80211_scan_work [mac80211]
Call Trace:
 dump_stack+0x64/0x7c
 ubsan_epilogue+0x5/0x40
 __ubsan_handle_out_of_bounds.cold+0x43/0x48
 rtw_get_tx_power_params+0x83a/drivers/net/wireless/realtek/rtw88/0xad0 [rtw_core]
 ? rtw_pci_read16+0x20/0x20 [rtw_pci]
 ? check_hw_ready+0x50/0x90 [rtw_core]
 rtw_phy_get_tx_power_index+0x4d/0xd0 [rtw_core]
 rtw_phy_set_tx_power_level+0xee/0x1b0 [rtw_core]
 rtw_set_channel+0xab/0x110 [rtw_core]
 rtw_ops_config+0x87/0xc0 [rtw_core]
 ieee80211_hw_config+0x9d/0x130 [mac80211]
 ieee80211_scan_state_set_channel+0x81/0x170 [mac80211]
 ieee80211_scan_work+0x19f/0x2a0 [mac80211]
 process_one_work+0x1dd/0x3a0
 worker_thread+0x49/0x330
 ? rescuer_thread+0x3a0/0x3a0
 kthread+0x134/0x150
 ? kthread_create_worker_on_cpu+0x70/0x70
 ret_from_fork+0x22/0x30
================================================================================

The statement where an array is being overrun is shown in the following snippet:

	if (rate <= DESC_RATE11M)
		tx_power = pwr_idx_2g->cck_base[group];
	else
====>		tx_power = pwr_idx_2g->bw40_base[group];

The associated arrays are defined in main.h as follows:

struct rtw_2g_txpwr_idx {
	u8 cck_base[6];
	u8 bw40_base[5];
	struct rtw_2g_1s_pwr_idx_diff ht_1s_diff;
	struct rtw_2g_ns_pwr_idx_diff ht_2s_diff;
	struct rtw_2g_ns_pwr_idx_diff ht_3s_diff;
	struct rtw_2g_ns_pwr_idx_diff ht_4s_diff;
};

The problem arises because the value of group is 5 for channel 14. The trivial
increase in the dimension of bw40_base fails as this struct must match the layout of
efuse. The fix is to add the rate as an argument to rtw_get_channel_group() and set
the group for channel 14 to 4 if rate <= DESC_RATE11M.

This patch fixes commit fa6dfe6bff24 ("rtw88: resolve order of tx power setting routines")
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: https://git.kernel.org/stable/c/2ff25985ea9ccc6c9af2c77b0b49045adcc62e0e; https://git.kernel.org/stable/c/5f3dbced8eaa5c9ed7d6943f3fea99f235a6516a; https://git.kernel.org/stable/c/6b5aa0cf321c25f41e09a61c83ee4dc7ab9549cb
CVE: CVE-2021-47066
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

async_xor: increase src_offs when dropping destination page

Now we support sharing one page if PAGE_SIZE is not equal stripe size. To
support this, it needs to support calculating xor value with different
offsets for each r5dev. One offset array is used to record those offsets.

In RMW mode, parity page is used as a source page. It sets
ASYNC_TX_XOR_DROP_DST before calculating xor value in ops_run_prexor5.
So it needs to add src_list and src_offs at the same time. Now it only
needs src_list. So the xor value which is calculated is wrong. It can
cause data corruption problem.

I can reproduce this problem 100% on a POWER8 machine. The steps are:

  mdadm -CR /dev/md0 -l5 -n3 /dev/sdb1 /dev/sdc1 /dev/sdd1 --size=3G
  mkfs.xfs /dev/md0
  mount /dev/md0 /mnt/test
  mount: /mnt/test: mount(2) system call failed: Structure needs cleaning.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/29ffa50f33de824b5491f8239c88c4a0efdd03af; https://git.kernel.org/stable/c/53f8208e11abd6dde9480dfcb97fecdb1bc2ac18; https://git.kernel.org/stable/c/cab2e8e5997b592fdb7d02cf2387b4b8e3057174
CVE: CVE-2021-47067
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

soc/tegra: regulators: Fix locking up when voltage-spread is out of range

Fix voltage coupler lockup which happens when voltage-spread is out
of range due to a bug in the code. The max-spread requirement shall be
accounted when CPU regulator doesn't have consumers. This problem is
observed on Tegra30 Ouya game console once system-wide DVFS is enabled
in a device-tree.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-667
References: https://git.kernel.org/stable/c/a1ad124c836816fac8bd5e461d36eaf33cee4e24; https://git.kernel.org/stable/c/dc[PII_REDACTED]fa94589b382740952b58aa1c3e6c; https://git.kernel.org/stable/c/ef85bb582c41524e9e68dfdbde48e519dac4ab3d
CVE: CVE-2021-47068
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

net/nfc: fix use-after-free llcp_sock_bind/connect

Commits 8a4cd82d ("nfc: fix refcount leak in llcp_sock_connect()")
and c33b1cc62 ("nfc: fix refcount leak in llcp_sock_bind()")
fixed a refcount leak bug in bind/connect but introduced a
use-after-free if the same local is assigned to 2 different sockets.

This can be triggered by the following simple program:
    int sock1 = socket( AF_NFC, SOCK_STREAM, NFC_SOCKPROTO_LLCP );
    int sock2 = socket( AF_NFC, SOCK_STREAM, NFC_SOCKPROTO_LLCP );
    memset( &addr, 0, sizeof(struct sockaddr_nfc_llcp) );
    addr.sa_family = AF_NFC;
    addr.nfc_protocol = NFC_PROTO_NFC_DEP;
    bind( sock1, (struct sockaddr*) &addr, sizeof(struct sockaddr_nfc_llcp) )
    bind( sock2, (struct sockaddr*) &addr, sizeof(struct sockaddr_nfc_llcp) )
    close(sock1);
    close(sock2);

Fix this by assigning NULL to llcp_sock->local after calling
nfc_llcp_local_put.

This addresses CVE-2021-23134.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://git.kernel.org/stable/c/18175fe17ae043a0b81e5d511f[PII_REDACTED]c299; https://git.kernel.org/stable/c/18ae4a192a4496e48a5490b52812645d2413307c; https://git.kernel.org/stable/c/26157c82ba756767b2bd66d28a71b1bc454447f6
CVE: CVE-2024-27294
Published: 2024-02-29
Description: dp-golang is a Puppet module for Go installations.  Prior to 1.2.7, dp-golang could install files — including the compiler binary — with the wrong ownership when Puppet was run as root and the installed package was On macOS: Go version 1.4.3 through 1.21rc3, inclusive, go1.4-bootstrap-20170518.tar.gz, or go1.4-bootstrap-20170531.tar.gz. The user and group specified in Puppet code were ignored for files within the archive. dp-puppet version 1.2.7 will recreate installations if the owner or group of any file or directory within that installation does not match the requested owner or group
CVSS Score: 7.3 (HIGH)
CWE: CWE-732, CWE-732
References: https://github.com/danielparks/puppet-golang/commit/1d0865b24071cb1c00d2fd8cb755d444e6e8f888; https://github.com/danielparks/puppet-golang/commit/870724a7fef50208515da7bbfa9dfd5d6950e7f5; https://github.com/danielparks/puppet-golang/security/advisories/GHSA-8h8m-h98f-vv84
CVE: CVE-2024-0403
Published: 2024-03-01
Description: Recipes version 1.5.10 allows arbitrary HTTP requests to be made

through the server. This is possible because the application is

vulnerable to SSRF.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://fluidattacks.com/advisories/harris/; https://github.com/TandoorRecipes/recipes/; https://fluidattacks.com/advisories/harris/
CVE: CVE-2024-2021
Published: 2024-03-01
Description: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. Affected is an unknown function of the file /admin/list_localuser.php. The manipulation of the argument ResId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-255300. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/dtxharry/cve/blob/main/cve.md; https://vuldb.com/?ctiid.255300; https://vuldb.com/?id.255300
CVE: CVE-2024-2022
Published: 2024-03-01
Description: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/list_ipAddressPolicy.php. The manipulation of the argument GroupId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-255301 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/zouzuo1994321/cve/blob/main/cve.md; https://vuldb.com/?ctiid.255301; https://vuldb.com/?id.255301
CVE: CVE-2024-2045
Published: 2024-03-01
Description: Session version 1.17.5 allows obtaining internal application files and public

files from the user's device without the user's consent. This is possible

because the application is vulnerable to Local File Read via chat attachments.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://fluidattacks.com/advisories/newman/; https://github.com/oxen-io/session-android/; https://fluidattacks.com/advisories/newman/
CVE: CVE-2024-1941
Published: 2024-03-01
Description: 
Delta Electronics CNCSoft-B versions 1.0.0.4 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.


CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-060-01; https://www.cisa.gov/news-events/ics-advisories/icsa-24-060-01
CVE: CVE-2024-22100
Published: 2024-03-01
Description: 




MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior are affected by a heap-based buffer overflow vulnerability, which could allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. A user must open a malicious DCM file in order to exploit the vulnerability.






CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-060-01; https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-060-01
CVE: CVE-2024-25578
Published: 2024-03-01
Description: 


MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior contain a lack of proper validation of user-supplied data, which could result in memory corruption within the application.




CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-060-01; https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-060-01
CVE: CVE-2023-28525
Published: 2024-03-01
Description: IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  251052.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/251052; https://www.ibm.com/support/pages/node/7124058; https://exchange.xforce.ibmcloud.com/vulnerabilities/251052
CVE: CVE-2023-28949
Published: 2024-03-01
Description: IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.  IBM X-Force ID:  251216.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/251216; https://www.ibm.com/support/pages/node/7124058; https://exchange.xforce.ibmcloud.com/vulnerabilities/251216
CVE: CVE-2023-50305
Published: 2024-03-01
Description: IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.  IBM X-Force ID:  273336.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-521
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/273336; https://www.ibm.com/support/pages/node/7124058; https://exchange.xforce.ibmcloud.com/vulnerabilities/273336
CVE: CVE-2023-50324
Published: 2024-03-01
Description: IBM Cognos Command Center 10.2.4.1 and 10.2.5 exposes details the X-AspNet-Version Response Header that could allow an attacker to obtain information of the application environment to conduct further attacks.  IBM X-Force ID:  275038.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/275038; https://www.ibm.com/support/pages/node/7112504; https://exchange.xforce.ibmcloud.com/vulnerabilities/275038
CVE: CVE-2023-38366
Published: 2024-03-01
Description: IBM Filenet Content Manager Component 5.5.8.0, 5.5.10.0, and 5.5.11.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.  IBM X-Force ID:  261115.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/261115; https://www.ibm.com/support/pages/node/7039783; https://exchange.xforce.ibmcloud.com/vulnerabilities/261115
CVE: CVE-2023-47716
Published: 2024-03-01
Description: IBM CP4BA - Filenet Content Manager Component 5.5.8.0, 5.5.10.0, and 5.5.11.0 could allow a user to gain the privileges of another user under unusual circumstances.  IBM X-Force ID:  271656.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-863
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/271656; https://www.ibm.com/support/pages/node/7078780; https://exchange.xforce.ibmcloud.com/vulnerabilities/271656
CVE: CVE-2023-50312
Published: 2024-03-01
Description: IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.2 could provide weaker than expected security for outbound TLS connections caused by a failure to honor user configuration.  IBM X-Force ID:  274711.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-327, CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/274711; https://www.ibm.com/support/pages/node/7125527; https://exchange.xforce.ibmcloud.com/vulnerabilities/274711
CVE: CVE-2024-22891
Published: 2024-03-01
Description: Nteract v.0.28.0 was discovered to contain a remote code execution (RCE) vulnerability via the Markdown link.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-601
References: https://github.com/EQSTLab/PoC/tree/main/2024/RCE/CVE-2024-22891; https://github.com/EQSTLab/PoC/tree/main/2024/RCE/CVE-2024-22891
CVE: CVE-2024-25293
Published: 2024-03-01
Description: mjml-app versions 3.0.4 and 3.1.0-beta were discovered to contain a remote code execution (RCE) via the href attribute.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-94
References: https://github.com/EQSTLab/PoC/tree/main/2024/LCE/CVE-2024-25293; https://github.com/EQSTLab/PoC/tree/main/2024/LCE/CVE-2024-25293
CVE: CVE-2024-25386
Published: 2024-03-01
Description: Directory Traversal vulnerability in DICOM® Connectivity Framework by laurelbridge before v.2.7.6b allows a remote attacker to execute arbitrary code via the format_logfile.pl file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://gist.github.com/Shulelk/15c9ba8d6b54dd4256a50a24ac7dd0a2; https://laurelbridge.com/security-notice-cve-2024-25386-potential-vulnerability/; https://sec.1i6w31fen9.top/2024/02/02/dcf-operations-window-remote-command-execute/
CVE: CVE-2024-1859
Published: 2024-03-01
Description: The Slider Responsive Slideshow – Image slider, Gallery slideshow plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.8 via deserialization of untrusted input to the awl_slider_responsive_shortcode function. This makes it possible for authenticated attackers, with contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3041884%40slider-responsive-slideshow&new=3041884%40slider-responsive-slideshow&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/d35266cd-41e6-4358-afaa-bc008962f2e1?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3041884%40slider-responsive-slideshow&new=3041884%40slider-responsive-slideshow&sfp_email=&sfph_mail=
CVE: CVE-2023-52555
Published: 2024-03-01
Description: In mongo-express 1.0.2, /admin allows CSRF, as demonstrated by deletion of a Collection.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://github.com/mongo-express/mongo-express/issues/1338; https://github.com/mongo-express/mongo-express/issues/1338
CVE: CVE-2024-25552
Published: 2024-03-01
Description: A local attacker can gain administrative privileges by inserting an executable file in the path of the affected product.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://cert.vde.com/en/advisories/VDE-2024-018; https://cert.vde.com/en/advisories/VDE-2024-018
CVE: CVE-2024-25553
Published: 2024-03-01
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-25554
Published: 2024-03-01
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-27949
Published: 2024-03-01
Description: Server-Side Request Forgery (SSRF) vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through <= 7.2.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://patchstack.com/database/Wordpress/Plugin/sirv/vulnerability/wordpress-sirv-plugin-7-2-0-server-side-request-forgery-ssrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/sirv/wordpress-sirv-plugin-7-2-0-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE: CVE-2024-27950
Published: 2024-03-01
Description: Missing Authorization vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through <= 7.2.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/sirv/vulnerability/wordpress-sirv-plugin-7-2-0-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/sirv/wordpress-sirv-plugin-7-2-0-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-0692
Published: 2024-03-01
Description: The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2023-4-1_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-0692; https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2023-4-1_release_notes.htm
CVE: CVE-2024-25091
Published: 2024-03-01
Description: Protection mechanism failure issue exists in RevoWorks SCVX prior to scvimage4.10.21_1013 (when using 'VirusChecker' or 'ThreatChecker' feature) and RevoWorks Browser prior to 2.2.95 (when using 'VirusChecker' or 'ThreatChecker' feature).  If data containing malware is saved in a specific file format (eml, dmg, vhd, iso, msi), malware may be taken outside the sandboxed environment.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-693
References: https://jscom.jp/news-20240229/; https://jvn.jp/en/jp/JVN35928117/; https://jscom.jp/news-20240229/
CVE: CVE-2024-1120
Published: 2024-03-01
Description: The NextMove Lite – Thank You Page for WooCommerce and Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugins for WordPress are vulnerable to unauthorized access of data due to a missing capability check on the download_tools_settings() function in all versions up to, and including, 2.17.0. This makes it possible for unauthenticated attackers to export system information that can aid attackers in an attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/finale-woocommerce-sales-countdown-timer-discount/trunk/includes/wcct-xl-support.php#L710; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3042127%40finale-woocommerce-sales-countdown-timer-discount&new=3042127%40finale-woocommerce-sales-countdown-timer-discount&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/3d9332be-2cf0-46cd-81e4-6436aeec0f83?source=cve