deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-9008
Published: 2024-09-19
Description: A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affects unknown code of the file /news-details.php of the component Comment Section. The manipulation of the argument name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-News-Portal-Comment-Blind-SQLi.md; https://vuldb.com/?ctiid.278164; https://vuldb.com/?id.278164
CVE: CVE-2024-45806
Published: 2024-09-20
Description: Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external clients to manipulate Envoy headers, potentially leading to unauthorized access or other malicious actions within the mesh. This issue arises due to Envoy's default configuration of internal trust boundaries, which considers all RFC1918 private address ranges as internal. The default behavior for handling internal addresses in Envoy has been changed. Previously, RFC1918 IP addresses were automatically considered internal, even if the internal_address_config was empty.  The default configuration of Envoy will continue to trust internal addresses while in this release and it will not trust them by default in next release. If you have tooling such as probes on your private network which need to be treated as trusted (e.g. changing arbitrary x-envoy headers) please explicitly include those addresses or CIDR ranges into `internal_address_config`. Successful exploitation could allow attackers to bypass security controls, access sensitive data, or disrupt services within the mesh, like Istio. This issue has been addressed in versions 1.31.2, 1.30.6, 1.29.9, and 1.28.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-ffhv-fvxq-r6mf
CVE: CVE-2024-45807
Published: 2024-09-20
Description: Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's 1.31 is using `oghttp` as the default HTTP/2 codec, and there are potential bugs around stream management in the codec. To resolve this Envoy will switch off the `oghttp2` by default. The impact of this issue is that envoy will crash. This issue has been addressed in release version 1.31.2. All users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-670
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-qc52-r4x5-9w37
CVE: CVE-2024-45808
Published: 2024-09-20
Description: Envoy is a cloud-native high-performance edge/middle/service proxy. A vulnerability has been identified in Envoy that allows malicious attackers to inject unexpected content into access logs. This is achieved by exploiting the lack of validation for the `REQUESTED_SERVER_NAME` field for access loggers. This issue has been addressed in versions 1.31.2, 1.30.6, 1.29.9, and 1.28.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-117, CWE-116
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-p222-xhp9-39rc
CVE: CVE-2024-45809
Published: 2024-09-20
Description: Envoy is a cloud-native high-performance edge/middle/service proxy. Jwt filter will lead to an Envoy crash when clear route cache with remote JWKs. In the following case: 1. remote JWKs are used, which requires async header processing; 2. clear_route_cache is enabled on the provider; 3. header operations are enabled in JWT filter, e.g. header to claims feature; 4. the routing table is configured in a way that the JWT header operations modify requests to not match any route. When these conditions are met, a crash is triggered in the upstream code due to nullptr reference conversion from route(). The root cause is the ordering of continueDecoding and clearRouteCache. This issue has been addressed in versions 1.31.2, 1.30.6, and 1.29.9. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-476
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-wqr5-qmq7-3qw3
CVE: CVE-2024-45810
Published: 2024-09-20
Description: Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy will crash when the http async client is handling `sendLocalReply` under some circumstance, e.g., websocket upgrade, and requests mirroring. The http async client will crash during the `sendLocalReply()` in http async client, one reason is http async client is duplicating the status code, another one is the destroy of router is called at the destructor of the async stream, while the stream is deferred deleted at first. There will be problems that the stream decoder is destroyed but its reference is called in `router.onDestroy()`, causing segment fault. This will impact ext_authz if the `upgrade` and `connection` header are allowed, and request mirrorring. This issue has been addressed in versions 1.31.2, 1.30.6, 1.29.9, and 1.28.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-qm74-x36m-555q
CVE: CVE-2024-46999
Published: 2024-09-20
Description: Zitadel is an open source identity management platform. ZITADEL's user grants deactivation mechanism did not work correctly. Deactivated user grants were still provided in token, which could lead to unauthorized access to applications and resources. Additionally, the management and auth API always returned the state as active or did not provide any information about the state. Versions 2.62.1, 2.61.1, 2.60.2, 2.59.3, 2.58.5, 2.57.5, 2.56.6, 2.55.8, and 2.54.10 have been released which address this issue. Users are advised to upgrade. Users unable to upgrade may explicitly remove the user grants to make sure the user does not get access anymore.
CVSS Score: 7.3 (HIGH)
CWE: CWE-269
References: https://github.com/zitadel/zitadel/security/advisories/GHSA-2w5j-qfvw-2hf5
CVE: CVE-2024-47000
Published: 2024-09-20
Description: Zitadel is an open source identity management platform. ZITADEL's user account deactivation mechanism did not work correctly with service accounts. Deactivated service accounts retained the ability to request tokens, which could lead to unauthorized access to applications and resources. Versions 2.62.1, 2.61.1, 2.60.2, 2.59.3, 2.58.5, 2.57.5, 2.56.6, 2.55.8, and 2.54.10 have been released which address this issue. Users are advised t upgrade. Users unable to upgrade may instead of deactivating the service account, consider creating new credentials and replacing the old ones wherever they are used. This effectively prevents the deactivated service account from being utilized. Be sure to revoke all existing authentication keys associated with the service account and to rotate the service account's password.
CVSS Score: 8.1 (HIGH)
CWE: CWE-269
References: https://github.com/zitadel/zitadel/security/advisories/GHSA-qr2h-7pwm-h393
CVE: CVE-2024-47060
Published: 2024-09-20
Description: Zitadel is an open source identity management platform. In Zitadel, even after an organization is deactivated, associated projects, respectively their applications remain active. Users across other organizations can still log in and access through these applications, leading to unauthorized access. Additionally, if a project was deactivated access to applications was also still possible. The issue stems from the fact that when an organization is deactivated in Zitadel, the applications associated with it do not automatically deactivate. The application lifecycle is not tightly coupled with the organization's lifecycle, leading to a situation where the organization or project is marked as inactive, but its resources remain accessible. This vulnerability allows for unauthorized access to projects and their resources, which should have been restricted post-organization deactivation. Versions 2.62.1, 2.61.1, 2.60.2, 2.59.3, 2.58.5, 2.57.5, 2.56.6, 2.55.8, and 2.54.10 have been released which address this issue. Users are advised to upgrade. Users unable to upgrade may explicitly disable the application to make sure the client is not allowed anymore.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-863
References: https://github.com/zitadel/zitadel/security/advisories/GHSA-jj94-6f5c-65r8
CVE: CVE-2024-9009
Published: 2024-09-20
Description: A vulnerability, which was classified as critical, has been found in code-projects Online Quiz Site 1.0. This issue affects some unknown processing of the file showtest.php. The manipulation of the argument subid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://code-projects.org/; https://github.com/ZTurNA/cve/issues/1; https://vuldb.com/?ctiid.278165
CVE: CVE-2024-9011
Published: 2024-09-20
Description: A vulnerability, which was classified as critical, was found in code-projects Crud Operation System 1.0. Affected is an unknown function of the file updata.php. The manipulation of the argument sid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://code-projects.org/; https://github.com/ppp-src/a/issues/14; https://vuldb.com/?ctiid.278166
CVE: CVE-2024-41721
Published: 2024-09-20
Description: An insufficient boundary validation in the USB code could lead to an out-of-bounds read on the heap, which could potentially lead to an arbitrary write and remote code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://security.freebsd.org/advisories/FreeBSD-SA-24:15.bhyve.asc; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-8853
Published: 2024-09-20
Description: The Webo-facto plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.40 due to insufficient restriction on the 'doSsoAuthentification' function. This makes it possible for unauthenticated attackers to make themselves administrators by registering with a username that contains '-wfuser'.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://plugins.trac.wordpress.org/browser/webo-facto-connector/tags/1.40/WeboFacto/Sso.php#L78; https://plugins.trac.wordpress.org/changeset/3153062/webo-facto-connector; https://www.wordfence.com/threat-intel/vulnerabilities/id/c1280ceb-9ce8-47fc-8fd3-6af80015dea9?source=cve
CVE: CVE-2024-9043
Published: 2024-09-20
Description: Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process. Remote unauthenticated attackers can send crafted packets to crash the process, thereby bypassing authentication and obtaining system administrator privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://www.twcert.org.tw/en/cp-139-8103-b0568-2.html; https://www.twcert.org.tw/tw/cp-132-8102-b94a9-1.html
CVE: CVE-2024-9030
Published: 2024-09-20
Description: A vulnerability classified as problematic was found in CodeCanyon CRMGo SaaS 7.2. This vulnerability affects unknown code of the file /deal/{note_id}/note. The manipulation of the argument notes leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://bytium.com/stored-xss-vulnerabilities-in-crmgo-sass-version-7-2/; https://vuldb.com/?ctiid.278200; https://vuldb.com/?id.278200
CVE: CVE-2024-9031
Published: 2024-09-20
Description: A vulnerability, which was classified as problematic, has been found in CodeCanyon CRMGo SaaS up to 7.2. This issue affects some unknown processing of the file /project/task/{task_id}/show. The manipulation of the argument comment leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://bytium.com/stored-xss-vulnerabilities-in-crmgo-sass-version-7-2/; https://vuldb.com/?ctiid.278201; https://vuldb.com/?id.278201
CVE: CVE-2024-9032
Published: 2024-09-20
Description: A vulnerability, which was classified as critical, was found in SourceCodester Simple Forum-Discussion System 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument page leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22
References: https://vuldb.com/?ctiid.278202; https://vuldb.com/?id.278202; https://vuldb.com/?submit.410976
CVE: CVE-2024-9033
Published: 2024-09-20
Description: A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=save_category. The manipulation of the argument name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/para-paradise/webray.com.cn/blob/main/Best%20house%20rental%20management%20system%20project%20in%20php/Best%20house%20rental%20management%20system%20project%20in%20php%20Stored%20Cross-Site%20Scripting(XSS)%20vulnerability.md; https://vuldb.com/?ctiid.278203; https://vuldb.com/?id.278203
CVE: CVE-2024-9034
Published: 2024-09-20
Description: A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://code-projects.org/; https://github.com/keepgoing2077/cve/issues/1; https://vuldb.com/?ctiid.278204
CVE: CVE-2024-9035
Published: 2024-09-20
Description: A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/login.php of the component Admin Login. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://code-projects.org/; https://github.com/Kinsomnia/cve/blob/main/sql/sql.md; https://vuldb.com/?ctiid.278205
CVE: CVE-2024-46652
Published: 2024-09-20
Description: Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability in the fromAdvSetMacMtuWan function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-120
References: https://github.com/zp9080/Tenda/blob/main/Tenda-AC8v4%20V16.03.34.06-fromAdvSetMacMtuWan/overview.md
CVE: CVE-2024-9036
Published: 2024-09-20
Description: A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin_add.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/Kinsomnia/cve/blob/main/upload/upload.md; https://itsourcecode.com/; https://vuldb.com/?ctiid.278207
CVE: CVE-2024-9037
Published: 2024-09-20
Description: A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/L1OudFd8cl09/CVE/blob/main/20_09_2024_a.md; https://vuldb.com/?ctiid.278208; https://vuldb.com/?id.278208
CVE: CVE-2024-9038
Published: 2024-09-20
Description: A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation of the argument productimage1/productimage2/productimage3 leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/L1OudFd8cl09/CVE/blob/main/20_09_2024_b.md; https://vuldb.com/?ctiid.278209; https://vuldb.com/?id.278209
CVE: CVE-2024-9039
Published: 2024-09-20
Description: A vulnerability, which was classified as critical, has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=signup. The manipulation of the argument firstname/lastname/email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/para-paradise/webray.com.cn/blob/main/Best%20house%20rental%20management%20system%20project%20in%20php/Best%20house%20rental%20management%20system%20signup%20time-based%20SQL%20Injection%20Vulnerability.md; https://vuldb.com/?ctiid.278210; https://vuldb.com/?id.278210
CVE: CVE-2023-47480
Published: 2024-09-20
Description: An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the set*id () function.
CVSS Score: 8.4 (HIGH)
CWE: CWE-252
References: https://github.com/pure-data/pure-data/commit/0b5e467b8728b3ed56e1a8ee5b367ce78e7e6e5d; https://github.com/pure-data/pure-data/issues/2063; https://puredata.info/
CVE: CVE-2024-37879
Published: 2024-09-20
Description: Improper input validation in /admin/config/save in User-friendly SVN (USVN) before v1.0.12 and below allows administrators to execute arbitrary code via the fields "siteTitle", "siteIco" and "siteLogo".
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/usvn/usvn/commit/6b4678954fca[PII_REDACTED]b95ff9c8947cf5f46f; https://github.com/usvn/usvn/releases/tag/1.0.12; https://www.usvn.info/2024/06/09/usvn-1.0.12
CVE: CVE-2024-45489
Published: 2024-09-20
Description: Arc before 2024-08-26 allows remote code execution in JavaScript boosts. Boosts that run JavaScript cannot be shared by default; however (because of misconfigured Firebase ACLs), it is possible to create or update a boost using another user's ID. This installs the boost in the victim's browser and runs arbitrary Javascript on that browser in a privileged context. NOTE: this is a no-action cloud vulnerability with zero affected users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://arc.net/blog/CVE-2024-45489-incident-response; https://kibty.town/blog/arc/; https://news.ycombinator.com/item?id=41597250
CVE: CVE-2024-9040
Published: 2024-09-20
Description: A vulnerability, which was classified as problematic, was found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the component Password Handler. The manipulation leads to cleartext storage in a file or on disk. An attack has to be approached locally.
CVSS Score: 2.3 (LOW)
CWE: CWE-313, CWE-312
References: https://code-projects.org/; https://vuldb.com/?ctiid.278211; https://vuldb.com/?id.278211
CVE: CVE-2024-9041
Published: 2024-09-20
Description: A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=update_account. The manipulation of the argument firstname/lastname/email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/para-paradise/webray.com.cn/blob/main/Best%20house%20rental%20management%20system%20project%20in%20php/Best%20house%20rental%20management%20system%20update_account%20time-based%20SQL%20Injection%20Vulnerability.md; https://vuldb.com/?ctiid.278212; https://vuldb.com/?id.278212
CVE: CVE-2024-42697
Published: 2024-09-20
Description: Cross Site Scripting vulnerability in Leotheme Leo Product Search Module v.2.1.6 and earlier allows a remote attacker to execute arbitrary code via the q parameter of the product search function.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/JustDinooo/CVEs/blob/main/CVE-2024-42697/poc.txt
CVE: CVE-2024-8612
Published: 2024-09-20
Description: A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueue_push as set in virtio_scsi_complete_req / virtio_blk_req_complete / virito_crypto_req_complete could be larger than the true size of the data which has been sent to guest. Once virtqueue_push() finally calls dma_memory_unmap to ummap the in_iov, it may call the address_space_write function to write back the data. Some uninitialized data may exist in the bounce.buffer, leading to an information leak.
CVSS Score: 3.8 (LOW)
CWE: CWE-200
References: https://access.redhat.com/security/cve/CVE-2024-8612; https://bugzilla.redhat.com/show_bug.cgi?id=2313760; https://gitlab.com/qemu-project/qemu/-/commit/637b0aa139565cb82a7b9269e62214f87082635c
CVE: CVE-2024-42346
Published: 2024-09-20
Description: Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. The editor visualization, /visualizations endpoint, can be used to store HTML tags and trigger javascript execution upon edit operation. All supported branches of Galaxy (and more back to release_20.05) were amended with the supplied patches. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79
References: https://github.com/galaxyproject/galaxy/security/advisories/GHSA-x6w7-3gwf-qr9r
CVE: CVE-2024-42351
Published: 2024-09-20
Description: Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. An attacker can potentially replace the contents of public datasets resulting in data loss or tampering. All supported branches of Galaxy (and more back to release_21.05) were amended with the below patch. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://depot.galaxyproject.org/patch/GX-2024-0001/022da344a02bafd604402ac8e253e0014f6e2e08.patch; https://depot.galaxyproject.org/patch/GX-2024-0001/15060a6cb222f2fcfc687d0f0260f1eb1b9c757b.patch; https://depot.galaxyproject.org/patch/GX-2024-0001/235f1d8b[PII_REDACTED]32b9dda788c919ebf3bb80.patch