deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-13204
Published: 2025-01-09
Description: A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /blog-details.php. The manipulation of the argument blog_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://vuldb.com/?ctiid.290797; https://vuldb.com/?id.290797; https://www.websecurityinsights.my.id/2024/12/ecommerce-php-by-kurniaramadhan-sql.html?m=1
CVE: CVE-2024-13205
Published: 2025-01-09
Description: A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/create_product.php of the component Create Product Page. The manipulation of the argument Name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94
References: https://vuldb.com/?ctiid.290798; https://vuldb.com/?id.290798; https://vuldb.com/?submit.471233
CVE: CVE-2024-13206
Published: 2025-01-09
Description: A vulnerability classified as critical has been found in REVE Antivirus 1.0.0.0 on Linux. This affects an unknown part of the file /usr/local/reveantivirus/tmp/reveinstall. The manipulation leads to incorrect default permissions. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.8 (HIGH)
CWE: CWE-266, CWE-276
References: https://github.com/hawkteam404/RnD_Public/blob/main/reve_av_multiple_vuln.md; https://vuldb.com/?ctiid.290799; https://vuldb.com/?id.290799
CVE: CVE-2024-13209
Published: 2025-01-09
Description: A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown function of the file /index.php?page=structure&category_id=1&article_id=1&clang=1&function=edit_art&artstart=0 of the component Structure Management Page. The manipulation of the argument Article Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94
References: https://geochen.medium.com/redaxo-cms-5-18-1-cross-site-scripting-7c9a872c72f6; https://vuldb.com/?ctiid.290814; https://vuldb.com/?id.290814
CVE: CVE-2024-13210
Published: 2025-01-09
Description: A vulnerability was found in donglight bookstore电商书城系统说明 1.0. It has been declared as critical. Affected by this vulnerability is the function uploadPicture of the file src/main/java/org/zdd/bookstore/web/controller/admin/AdminBookController. java. The manipulation of the argument pictureFile leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-284, CWE-434, CWE-434
References: https://github.com/donglight/bookstore/issues/10; https://github.com/donglight/bookstore/issues/10#issue[PII_REDACTED]; https://vuldb.com/?ctiid.290815
CVE: CVE-2024-13211
Published: 2025-01-09
Description: A vulnerability was found in SingMR HouseRent 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file src/main/java/com/house/wym/controller/AdminController.java. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-284
References: https://github.com/SingMR/HouseRent/issues/12; https://github.com/SingMR/HouseRent/issues/12#issue[PII_REDACTED]; https://vuldb.com/?ctiid.290816
CVE: CVE-2024-13212
Published: 2025-01-09
Description: A vulnerability classified as critical has been found in SingMR HouseRent 1.0. This affects the function singleUpload/upload of the file src/main/java/com/house/wym/controller/AddHouseController.java. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434
References: https://github.com/SingMR/HouseRent/issues/13; https://github.com/SingMR/HouseRent/issues/13#issue[PII_REDACTED]; https://vuldb.com/?ctiid.290817
CVE: CVE-2024-13213
Published: 2025-01-09
Description: A vulnerability classified as problematic was found in SingMR HouseRent 1.0. This vulnerability affects unknown code of the file /toAdminUpdateHousePage?hID=30. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/SingMR/HouseRent/issues/15; https://github.com/SingMR/HouseRent/issues/15#issue[PII_REDACTED]; https://vuldb.com/?ctiid.290818
CVE: CVE-2024-56826
Published: 2025-01-09
Description: A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility.  This can lead to an application crash or other undefined behavior.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-122
References: https://access.redhat.com/errata/RHSA-2025:7309; https://access.redhat.com/security/cve/CVE-2024-56826; https://bugzilla.redhat.com/show_bug.cgi?id=2335172
CVE: CVE-2024-56827
Published: 2025-01-09
Description: A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility.  This can lead to an application crash or other undefined behavior.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-122
References: https://access.redhat.com/errata/RHSA-2025:7309; https://access.redhat.com/security/cve/CVE-2024-56827; https://bugzilla.redhat.com/show_bug.cgi?id=2335174
CVE: CVE-2025-0306
Published: 2025-01-09
Description: A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service.
CVSS Score: 7.4 (HIGH)
CWE: CWE-385
References: https://access.redhat.com/security/cve/CVE-2025-0306; https://bugzilla.redhat.com/show_bug.cgi?id=2336100; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2025-0328
Published: 2025-01-09
Description: A vulnerability, which was classified as critical, has been found in KaiYuanTong ECT Platform up to 2.0.0. Affected by this issue is some unknown functionality of the file /public/server/runCode.php of the component HTTP POST Request Handler. The manipulation of the argument code leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-77
References: https://note.zhaoj.in/share/ASPsoVCrLqKK; https://vuldb.com/?ctiid.290792; https://vuldb.com/?id.290792
CVE: CVE-2025-0331
Published: 2025-01-09
Description: A vulnerability, which was classified as critical, has been found in YunzMall up to 2.4.2. This issue affects the function changePwd of the file /app/platform/controllers/ResetpwdController.php of the component HTTP POST Request Handler. The manipulation of the argument pwd leads to weak password recovery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-640
References: https://note.zhaoj.in/share/DsijzdQDJSAp; https://vuldb.com/?ctiid.290819; https://vuldb.com/?id.290819
CVE: CVE-2025-0333
Published: 2025-01-09
Description: A vulnerability, which was classified as critical, was found in leiyuxi cy-fast 1.0. Affected is the function listData of the file /sys/role/listData. The manipulation of the argument order leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/d3do-23/cvelist/blob/main/cy-fast/sqli1.md; https://vuldb.com/?ctiid.290820; https://vuldb.com/?id.290820
CVE: CVE-2024-10815
Published: 2025-01-09
Description: The PostLists WordPress plugin through 2.0.2 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/309a445a-6261-4bd1-bac0-a78096d0c12b/; https://wpscan.com/vulnerability/309a445a-6261-4bd1-bac0-a78096d0c12b/
CVE: CVE-2024-12714
Published: 2025-01-09
Description: The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f7fb2aef-16ce-4ae7-927c-2ffbc45fbda5/
CVE: CVE-2024-12715
Published: 2025-01-09
Description: The Asgard Security Scanner WordPress plugin through 0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e1456295-75ba-4dc2-9b1a-dc16a2000db2/
CVE: CVE-2024-12717
Published: 2025-01-09
Description: The Aklamator INfeed WordPress plugin through 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/5564926a-6b1d-43f4-8147-128472f6b93a/
CVE: CVE-2024-12731
Published: 2025-01-09
Description: The Aklamator INfeed WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e1c3754f-60e0-4a89-b4fc-89056dba3616/
CVE: CVE-2024-12736
Published: 2025-01-09
Description: The BU Section Editing WordPress plugin through 0.9.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d3c6a4c1-8358-4f8b-b58d-3f712052668f/
CVE: CVE-2024-6324
Published: 2025-01-09
Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. It was possible to trigger a DoS by creating cyclic references between epics.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-407
References: https://about.gitlab.com/releases/2025/01/08/patch-release-gitlab-17-7-1-released/#cyclic-reference-of-epics-leads-resource-exhaustion; https://gitlab.com/gitlab-org/gitlab/-/issues/468914; https://hackerone.com/reports/2553716
CVE: CVE-2025-0334
Published: 2025-01-09
Description: A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the function listData of the file /sys/user/listData. The manipulation of the argument order leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/d3do-23/cvelist/blob/main/cy-fast/sqli2.md; https://vuldb.com/?ctiid.290821; https://vuldb.com/?id.290821
CVE: CVE-2025-0335
Published: 2025-01-09
Description: A vulnerability was found in code-projects Online Bike Rental System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the component Change Image Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other endpoints might be affected as well.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434, CWE-434
References: https://code-projects.org/; https://github.com/Huandtx/cve/blob/main/cve/Online%20Bike%20Rental%20System/File_upload1.md; https://vuldb.com/?ctiid.290822
CVE: CVE-2024-13041
Published: 2025-01-09
Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. When a user is created via the SAML provider, the external groups setting overrides the external provider configuration. As a result, the user may not be marked as external thereby giving those users access to internal projects or groups.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-286
References: https://about.gitlab.com/releases/2025/01/08/patch-release-gitlab-17-7-1-released/#instance-saml-does-not-respect-external_provider-configuration; https://gitlab.com/gitlab-org/gitlab/-/issues/479165
CVE: CVE-2024-40762
Published: 2025-01-09
Description: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting in authentication bypass.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-338
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003
CVE: CVE-2024-53704
Published: 2025-01-09
Description: An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-53704
CVE: CVE-2024-53705
Published: 2025-01-09
Description: A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection to an IP address on any port when the user is logged in to the firewall.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003
CVE: CVE-2024-53706
Published: 2025-01-09
Description: A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to elevate privileges to `root` and potentially lead to code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003
CVE: CVE-2025-0336
Published: 2025-01-09
Description: A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/forms/teacher.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/fuulof/CVE/issues/1; https://vuldb.com/?ctiid.290823; https://vuldb.com/?id.290823
CVE: CVE-2025-0339
Published: 2025-01-09
Description: A vulnerability classified as problematic has been found in code-projects Online Bike Rental 1.0. Affected is an unknown function of the file /vehical-details.php of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://code-projects.org/; https://vuldb.com/?ctiid.290826; https://vuldb.com/?id.290826
CVE: CVE-2025-0340
Published: 2025-01-09
Description: A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://vuldb.com/?ctiid.290827; https://vuldb.com/?id.290827
CVE: CVE-2025-20033
Published: 2025-01-09
Description: Mattermost versions 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x <= 10.1.3 fail to properly validate post types, which allows attackers to deny service to users with the sysconsole_read_plugins permission via creating a post with the custom_pl_notification type and specific props.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1287
References: https://mattermost.com/security-updates
CVE: CVE-2025-22445
Published: 2025-01-09
Description: Mattermost versions 10.x <= 10.2 fail to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting.
CVSS Score: 3.5 (LOW)
CWE: CWE-754
References: https://mattermost.com/security-updates
CVE: CVE-2025-22449
Published: 2025-01-09
Description: Mattermost versions 9.11.x <= 9.11.5 fail to enforce invite permissions, which allows team admins, with no permission to invite users to their team, to invite users by updating the "allow_open_invite" field via making their team public.
CVSS Score: 3.8 (LOW)
CWE: CWE-863
References: https://mattermost.com/security-updates
CVE: CVE-2023-1907
Published: 2025-01-09
Description: A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously.
CVSS Score: 8.0 (HIGH)
CWE: CWE-488, CWE-276
References: https://access.redhat.com/security/cve/CVE-2023-1907; https://bugzilla.redhat.com/show_bug.cgi?id=2218384
CVE: CVE-2024-12803
Published: 2025-01-09
Description: A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0004
CVE: CVE-2024-12805
Published: 2025-01-09
Description: A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-134
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0004
CVE: CVE-2024-12806
Published: 2025-01-09
Description: A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-37
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0004
CVE: CVE-2024-40765
Published: 2025-01-09
Description: An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a specially crafted IKEv2 payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0013
CVE: CVE-2024-43648
Published: 2025-01-09
Description: Command injection in the <redacted> parameter of a <redacted>.exe request leads to remote code execution as the root user.

This issue affects Iocharger firmware for AC models before version 24120701.

Likelihood: Moderate – This action is not a common place for command injection vulnerabilities to occur. Thus, an attacker will likely only be able to find this vulnerability by reverse-engineering the firmware or trying it on all <redacted> fields. The attacker will also need a (low privilege) account to gain access to the <redacted> binary, or convince a user with such access to execute a payload.

Impact: Critical – The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and delete files and services.

CVSS clarification. The attack can be executed over any network connection the station is listening to and serves the web interface (AV:N), and there are no additional security measure sin place that need to be circumvented (AC:L), the attack does not rely on preconditions (AT:N). The attack does require authentication, but the level of authentication is irrelevant (PR:L), it does not require user interaction (UI:N). If is a full system compromise, potentially fully compromising confidentiality, integrity and availability of the devicer (VC:H/VI:H/VA:H).  A compromised charger can be used to "pivot" onto networks that should otherwise be closed, cause a low confidentiality and interity impact on subsequent systems. (SC:L/SI:L/SA:H). Because this device is an EV charger handing significant amounts of power, we suspect this vulnerability can have a safety impact (S:P). The attack can be automated (AU:Y).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-250
References: https://csirt.divd.nl/CVE-2024-43648/; https://csirt.divd.nl/DIVD-2024-00035/; https://iocharger.com
CVE: CVE-2024-43649
Published: 2025-01-09
Description: Authenticated command injection in the filename of a <redacted>.exe request leads to remote code execution as the root user.

This issue affects Iocharger firmware for AC models before version 24120701.

Likelihood: Moderate – This action is not a common place for command injection vulnerabilities to occur. Thus, an attacker will likely only be able to find this vulnerability by reverse-engineering the firmware or trying it on all <redacted> fields. The attacker will also need a (low privilege) account to gain access to the <redacted> binary, or convince a user with such access to execute a payload.

Impact: Critical – The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and delete files and services.

CVSS clarification: This attack can be performed over any network conenction serving the web interfacr (AV:N), and there are not additional mitigating measures that need to be circumvented (AC:L) or other prerequisites (AT:N). The attack does require privileges, but the level does not matter (PR:L), there is no user interaction required (UI:N). The attack leeds to a full compromised of the charger (VC:H/VI:H/VA:H) and a compromised charger can be used to "pivot" to networks that should normally not be reachable (SC:L/SI:L/SA:H). Because this is an EV chargers with significant pwoer, there is a potential safety imp0act (S:P). THis attack can be automated (AU:Y).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-250
References: https://csirt.divd.nl/CVE-2024-43649/; https://csirt.divd.nl/DIVD-2024-00035/; https://iocharger.com