deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-12841
Published: 2024-12-20
Description: A vulnerability was found in Emlog Pro up to 2.4.1. It has been classified as problematic. This affects an unknown part of the file /admin/tag.php. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/emlog/emlog/issues/305; https://vuldb.com/?ctiid.289077; https://vuldb.com/?id.289077
CVE: CVE-2024-37758
Published: 2024-12-20
Description: Improper access control in the endpoint /RoleMenuMapping/AddRoleMenu of Digiteam v4.21.0.0 allows authenticated attackers to escalate privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://medium.com/@hamzanadeem1337/unauthorized-full-vertical-privilege-escalation-in-digiteam-sales-gamification-portal-version-4-21-0-c3e3282e9053
CVE: CVE-2024-55342
Published: 2024-12-20
Description: A file upload functionality in Piranha CMS 11.1 allows authenticated remote attackers to upload a crafted PDF file to /manager/media. This PDF can contain malicious JavaScript code, which is executed when a victim user opens or interacts with the PDF in their web browser, leading to a XSS vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://github.com/PiranhaCMS/piranha.core; https://sec-fortress.github.io/posts/articles/posts/CVE-2024-55342.html
CVE: CVE-2024-12842
Published: 2024-12-20
Description: A vulnerability was found in Emlog Pro up to 2.4.1. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/user.php. The manipulation of the argument keyword leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/emlog/emlog/issues/305; https://vuldb.com/?ctiid.289078; https://vuldb.com/?id.289078
CVE: CVE-2024-12867
Published: 2024-12-20
Description: Server-Side Request Forgery in URL Mapper in Arctic Security's Arctic Hub versions 3.0.1764-5.6.1877 allows an unauthenticated remote attacker to exfiltrate and modify configurations and data.
CWE: CWE-918
References: https://www.arcticsecurity.com/security/vulnerability-note-2024-12-20
CVE: CVE-2024-55341
Published: 2024-12-20
Description: A stored cross-site scripting (XSS) vulnerability in Piranha CMS 11.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by creating a page via the /manager/pages and then adding a markdown content with the XSS payload.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://github.com/PiranhaCMS/piranha.core; https://sec-fortress.github.io/posts/articles/posts/CVE-2024-55341.html
CVE: CVE-2024-56329
Published: 2024-12-20
Description: Socialstream is a third-party package for Laravel Jetstream. It replaces the published authentication and profile scaffolding provided by Laravel Jetstream, with scaffolding that has support for Laravel Socialite. When linking a social account to an already authenticated user, the lack of a confirmation step introduces a security risk. This is exacerbated if ->stateless() is used in the Socialite configuration, bypassing state verification and making the exploit easier. Developers should ensure that users explicitly confirm account linking and avoid configurations that skip critical security checks. Socialstream v6.2 introduces a new custom route that requires a user to "Confirm" or "Deny" a request to link a social account. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CWE: CWE-287
References: https://github.com/joelbutcher/socialstream/commit/ae4dc3906f54fa792b296036d7b3dcea9a4d259b; https://github.com/joelbutcher/socialstream/security/advisories/GHSA-3q97-vjpp-c8rp
CVE: CVE-2024-56330
Published: 2024-12-20
Description: Stardust is a platform for streaming isolated desktop containers. With this exploit, inter container communication (ICC) is not disabled. This would allow users within a container to access another containers agent, therefore compromising access.The problem has been patched in any Stardust build past 12/20/24. Users are advised to upgrade. Users may also manually disable ICC if they are unable to upgrade.
CWE: CWE-284
References: https://github.com/spaceness/stardust/security/advisories/GHSA-h2c9-7j2r-m98p
CVE: CVE-2024-56331
Published: 2024-12-20
Description: Uptime Kuma is an open source, self-hosted monitoring tool. An **Improper URL Handling Vulnerability** allows an attacker to access sensitive local files on the server by exploiting the `file:///` protocol. This vulnerability is triggered via the **"real-browser"** request type, which takes a screenshot of the URL provided by the attacker. By supplying local file paths, such as `file:///etc/passwd`, an attacker can read sensitive data from the server. This vulnerability arises because the system does not properly validate or sanitize the user input for the URL field. Specifically: 1. The URL input (`<input data-v-5f5c86d7="" id="url" type="url" class="form-control" pattern="https?://.+" required="">`) allows users to input arbitrary file paths, including those using the `file:///` protocol, without server-side validation. 2. The server then uses the user-provided URL to make a request, passing it to a browser instance that performs the "real-browser" request, which takes a screenshot of the content at the given URL. If a local file path is entered (e.g., `file:///etc/passwd`), the browser fetches and captures the file’s content. Since the user input is not validated, an attacker can manipulate the URL to request local files (e.g., `file:///etc/passwd`), and the system will capture a screenshot of the file's content, potentially exposing sensitive data. Any **authenticated user** who can submit a URL in "real-browser" mode is at risk of exposing sensitive data through screenshots of these files. This issue has been addressed in version 1.23.16 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: https://github.com/louislam/uptime-kuma/commit/6cfae01a0d3727c517afe512fc8fec1d99acf875; https://github.com/louislam/uptime-kuma/security/advisories/GHSA-2qgm-m29m-cj2h
CVE: CVE-2024-56333
Published: 2024-12-20
Description: Onyxia is a web app that aims at being the glue between multiple open source backend technologies to provide a state of art working environment for data scientists. This critical vulnerability allows authenticated users to remotely execute code within the Onyxia-API, leading to potential consequences such as unauthorized access to other user environments and denial of service attacks. This issue has been patched in api versions 4.2.0, 3.1.1, and 2.8.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CWE: CWE-94
References: https://docs.onyxia.sh/vulnerability-disclosure/known-vulnerabilities/vulnerability-20241219; https://github.com/InseeFrLab/onyxia/security/advisories/GHSA-qmcw-h4f9-j3h3
CVE: CVE-2024-12843
Published: 2024-12-20
Description: A vulnerability was found in Emlog Pro up to 2.4.1. It has been rated as problematic. This issue affects some unknown processing of the file /admin/plugin.php. The manipulation of the argument filter leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/emlog/emlog/issues/305; https://vuldb.com/?ctiid.289079; https://vuldb.com/?id.289079
CVE: CVE-2024-12844
Published: 2024-12-20
Description: A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.1. Affected is an unknown function of the file /admin/store.php. The manipulation of the argument tag leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/emlog/emlog/issues/305; https://vuldb.com/?ctiid.289080; https://vuldb.com/?id.289080
CVE: CVE-2024-40875
Published: 2024-12-20
Description: There is a cross-site scripting vulnerability in the
management console of Absolute Secure Access prior to version 13.52. Attackers
with system administrator permissions can interfere with another system
administrator’s use of the management console when the second administrator logs
in. Attack complexity is high, attack requirements are present, privileges
required are high, user interaction required is none. The impact to
confidentiality is none, the impact to availability is low, and the impact to
system integrity is high.
CWE: CWE-79
References: https://www.absolute.com/platform/security-information/vulnerability-archive/secure-access-1352/
CVE: CVE-2024-55509
Published: 2024-12-20
Description: SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/prithivilakshmanan/CSV/blob/main/CVE-2024-55509.md; https://github.com/prithivilakshmanan/CSV/blob/main/CVE-2024-55509.md
CVE: CVE-2024-56334
Published: 2024-12-20
Description: systeminformation is a System and OS information library for node.js. In affected versions SSIDs are not sanitized when before they are passed as a parameter to cmd.exe in the `getWindowsIEEE8021x` function. This means that malicious content in the SSID can be executed as OS commands. This vulnerability may enable an attacker, depending on how the package is used, to perform remote code execution or local privilege escalation. This issue has been addressed in version 5.23.7 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://github.com/sebhildebrandt/systeminformation/commit/f7af0a67b78e7894335a6cad510566a25e06ae41; https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-cvv5-9h9w-qp2m; https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-cvv5-9h9w-qp2m
CVE: CVE-2024-56335
Published: 2024-12-20
Description: vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. In affected versions an attacker is capable of updating or deleting groups from an organization given a few conditions: 1. The attacker has a user account in the server. 2. The attacker's account has admin or owner permissions in an unrelated organization. 3. The attacker knows the target organization's UUID and the target group's UUID. Note that this vulnerability is related to group functionality and as such is only applicable for servers who have enabled the `ORG_GROUPS_ENABLED` setting, which is disabled by default. This attack can lead to different situations: 1. Denial of service, the attacker can limit users from accessing the organization's data by removing their membership from the group. 2. Privilege escalation, if the attacker is part of the victim organization, they can escalate their own privileges by joining a group they wouldn't normally have access to. For attackers that aren't part of the organization, this shouldn't lead to any possible plain-text data exfiltration as all the data is encrypted client side. This vulnerability is patched in Vaultwarden `1.32.7`, and users are recommended to update as soon as possible. If it's not possible to update to `1.32.7`,  some possible workarounds are: 1. Disabling `ORG_GROUPS_ENABLED`, which would disable groups functionality on the server. 2. Disabling `SIGNUPS_ALLOWED`, which would not allow an attacker to create new accounts on the server.
CVSS Score: 7.6 (HIGH)
CWE: CWE-269, CWE-284, CWE-285, CWE-287
References: https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-g65h-982x-4m5m
CVE: CVE-2024-56357
Published: 2024-12-20
Description: grist-core is a spreadsheet hosting server. A user visiting a malicious document or submitting a malicious form could have their account compromised, because it was possible to use the `javascript:` scheme with custom widget URLs and form redirect URLs. This issue has been patched in version 1.3.1. Users are advised to upgrade. Users unable to upgrade should avoid visiting documents or forms prepared by people they do not trust.
CVSS Score: 8.1 (HIGH)
CWE: CWE-79
References: https://github.com/gristlabs/grist-core/commit/10b069005ec8d5f511e6554a56111d8f257f029e; https://github.com/gristlabs/grist-core/security/advisories/GHSA-cq5q-cqr7-vmf6
CVE: CVE-2024-56358
Published: 2024-12-20
Description: grist-core is a spreadsheet hosting server. A user visiting a malicious document and previewing an attachment could have their account compromised, because JavaScript in an SVG file would be evaluated in the context of their current page. This issue has been patched in version 1.3.2. Users are advised to upgrade. Users unable to upgrade should avoid previewing attachments in documents prepared by people they do not trust.
CVSS Score: 8.1 (HIGH)
CWE: CWE-79
References: https://github.com/gristlabs/grist-core/commit/a792bdc43b456dbdd6fdc50d8747f4c349fab2f4; https://github.com/gristlabs/grist-core/security/advisories/GHSA-jvfm-gf4f-33q3
CVE: CVE-2024-56359
Published: 2024-12-20
Description: grist-core is a spreadsheet hosting server. A user visiting a malicious document and clicking on a link in a HyperLink cell using a control modifier (meaning for example Ctrl+click) could have their account compromised, since the link could use the javascript: scheme and be evaluated in the context of their current page. This issue has been patched in version 1.3.2. Users are advised to upgrade. Users unable to upgrade should avoid clicking on HyperLink cell links using a control modifier in documents prepared by people they do not trust.
CVSS Score: 8.1 (HIGH)
CWE: CWE-79
References: https://github.com/gristlabs/grist-core/commit/a792bdc43b456dbdd6fdc50d8747f4c349fab2f4; https://github.com/gristlabs/grist-core/security/advisories/GHSA-qv69-5cj2-53r9
CVE: CVE-2020-13712
Published: 2024-12-20
Description: A command injection is possible through the user interface, allowing arbitrary command execution as 
the root user. oMG2000 running MGOS 3.15.1 or earlier is affected. 

MG90 running MGOS 4.2.1 or earlier is affected.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78, CWE-77
References: https://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2020-006---mgos-security-update.ashx
CVE: CVE-2021-40959
Published: 2024-12-20
Description: A reflected cross-site scripting vulnerability in MONITORAPP Application Insight Web Application Firewall (AIWAF) <= 4.1.6 and <=5.0 was identified on the subpage `/process_management/process_status.xhr.php`. This vulnerability allows an attacker to inject malicious scripts that execute in the context of the victim's session.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://rubiya.kr/CVE-2021-40959/
CVE: CVE-2024-12845
Published: 2024-12-20
Description: A vulnerability classified as problematic was found in Emlog Pro up to 2.4.1. Affected by this vulnerability is an unknown functionality in the library /include/lib/common.php. The manipulation of the argument msg leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/emlog/emlog/issues/306; https://vuldb.com/?ctiid.289081; https://vuldb.com/?id.289081
CVE: CVE-2024-11811
Published: 2024-12-20
Description: The Feedify – Web Push Notifications plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'platform', 'phone', 'email', and 'store_url' parameters. in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3209183%40push-notification-by-feedify%2Ftrunk&old=3177773%40push-notification-by-feedify%2Ftrunk&sfp_email=&sfph_mail=#file15; https://www.wordfence.com/threat-intel/vulnerabilities/id/7a5a33fd-ecc6-40bf-93a5-10ead1c4c1f5?source=cve
CVE: CVE-2023-31279
Published: 2024-12-21
Description: The AirVantage platform is vulnerable to an unauthorized attacker registering previously unregistered 
devices on the AirVantage platform when the owner has not disabled the AirVantage Management 
Service on the devices or registered the device. This could enable an attacker to configure, manage, 
and execute AT commands on an unsuspecting user’s devices.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-002/
CVE: CVE-2023-31280
Published: 2024-12-21
Description: An AirVantage online Warranty Checker tool vulnerability could allow an attacker to 
perform bulk enumeration of IMEI and Serial Numbers pairs. The AirVantage Warranty Checker is updated to no longer return the IMEI and Serial 
Number in addition to the warranty status when the Serial Number or IMEI is used to look up 
warranty status.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-002/
CVE: CVE-2024-11349
Published: 2024-12-21
Description: The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the sb_login_user_with_otp_fun() function. This makes it possible for unauthenticated attackers to log in as arbitrary users, including administrators.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://themeforest.net/item/adforest-classified-wordpress-theme/19481695; https://www.wordfence.com/threat-intel/vulnerabilities/id/f374b3d1-820b-473f-8d2b-c3267e6d23d9?source=cve
CVE: CVE-2024-12846
Published: 2024-12-21
Description: A vulnerability, which was classified as problematic, has been found in Emlog Pro up to 2.4.1. Affected by this issue is some unknown functionality of the file /admin/link.php. The manipulation of the argument siteurl/icon leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/emlog/emlog/issues/307; https://vuldb.com/?ctiid.289082; https://vuldb.com/?id.289082
CVE: CVE-2024-11607
Published: 2024-12-21
Description: The GTPayment Donations WordPress plugin through 1.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/132b5193-156b-40b8-b5c7-08646e1f6866/
CVE: CVE-2024-11977
Published: 2024-12-21
Description: The The kk Star Ratings – Rate Post & Collect User Feedbacks plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.4.10. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
Note: This vulnerability was only partially patched in version 5.4.10.1, and fully patched in 5.4.10.2
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://plugins.trac.wordpress.org/browser/kk-star-ratings/tags/5.4.9/src/core/wp/actions/wp_ajax_kk-star-ratings.php#L84; https://www.wordfence.com/threat-intel/vulnerabilities/id/5dea49fb-2703-4754-9abd-5f4e526d5570?source=cve
CVE: CVE-2024-11196
Published: 2024-12-21
Description: The Multi-column Tag Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mctagmap shortcode in all versions up to, and including, 17.0.33 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/multi-column-tag-map/tags/17.0.33/mctagmap_functions.php#L1176; https://plugins.trac.wordpress.org/browser/multi-column-tag-map/tags/17.0.33/mctagmap_functions.php#L1179; https://plugins.trac.wordpress.org/browser/multi-column-tag-map/tags/17.0.33/mctagmap_functions.php#L135
CVE: CVE-2024-11287
Published: 2024-12-21
Description: The Ebook Store plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 5.8001. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/ebook-store/trunk/functions.php#L827; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3258481%40ebook-store%2Ftrunk&old=3051174%40ebook-store%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/001289a3-a1a9-441f-b399-e9b699094e1a?source=cve
CVE: CVE-2024-11682
Published: 2024-12-21
Description: The G Web Pro Store Locator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'q' parameter in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/gwebpro-store-locator/trunk/gwebpro-store-locator-frontend.php#L452; https://www.wordfence.com/threat-intel/vulnerabilities/id/cb84b71e-7d4d-4bd7-88cb-1b86d7023edb?source=cve
CVE: CVE-2024-11938
Published: 2024-12-21
Description: The One Click Upsell Funnel for WooCommerce –  Funnel Builder for WordPress, Create WooCommerce Upsell, Post-Purchase Upsell & Cross Sell Offers that Boost Sales & Increase Profits with Sales Funnel Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wps_wocuf_pro_yes shortcode in all versions up to, and including, 3.4.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/woo-one-click-upsell-funnel/tags/3.4.9/public/class-woocommerce-one-click-upsell-funnel-public.php; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3212244%40woo-one-click-upsell-funnel&new=3212244%40woo-one-click-upsell-funnel&sfp_email=&sfph_mail=; https://wordpress.org/plugins/woo-one-click-upsell-funnel/#developers