deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-39349
Published: 2024-06-28
Description: A vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow') is found in the libjansson component and it does not affect the upstream library. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://www.synology.com/en-global/security/advisory/Synology_SA_23_15; https://www.synology.com/en-global/security/advisory/Synology_SA_23_15
CVE: CVE-2024-39351
Published: 2024-06-28
Description: A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the NTP configuration. This allows remote authenticated users with administrator privileges to execute arbitrary commands via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.synology.com/en-global/security/advisory/Synology_SA_23_15; https://www.synology.com/en-global/security/advisory/Synology_SA_23_15
CVE: CVE-2024-39352
Published: 2024-06-28
Description: A vulnerability regarding incorrect authorization is found in the firmware upgrade functionality. This allows remote authenticated users with administrator privileges to bypass firmware integrity check via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://www.synology.com/en-global/security/advisory/Synology_SA_23_15; https://www.synology.com/en-global/security/advisory/Synology_SA_23_15
CVE: CVE-2024-5570
Published: 2024-06-28
Description: The Simple Photoswipe WordPress plugin through 0.1 does not have authorisation check when updating its settings, which could allow any authenticated users, such as subscriber to update them
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/49b3a8cb-f606-4cf7-80ec-bfdafd74e848/; https://wpscan.com/vulnerability/49b3a8cb-f606-4cf7-80ec-bfdafd74e848/
CVE: CVE-2024-5727
Published: 2024-06-28
Description: The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/5f677863-2f4f-474f-ba48-f490f9d6e71c/; https://wpscan.com/vulnerability/5f677863-2f4f-474f-ba48-f490f9d6e71c/
CVE: CVE-2024-5728
Published: 2024-06-28
Description: The Animated AL List WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/287c4e8c-9092-4cb9-9642-e4f3d10f46fa/; https://wpscan.com/vulnerability/287c4e8c-9092-4cb9-9642-e4f3d10f46fa/
CVE: CVE-2024-5729
Published: 2024-06-28
Description: The Simple AL Slider WordPress plugin through 1.2.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/0352f6f5-cdfd-4cef-9ed5-fdc1cbcb368a/; https://wpscan.com/vulnerability/0352f6f5-cdfd-4cef-9ed5-fdc1cbcb368a/
CVE: CVE-2024-5730
Published: 2024-06-28
Description: The Pagerank tools WordPress plugin through 1.1.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/17482b2c-c9ba-480a-8000-879baf835af7/; https://wpscan.com/vulnerability/17482b2c-c9ba-480a-8000-879baf835af7/
CVE: CVE-2024-2795
Published: 2024-06-28
Description: The SEO SIMPLE PACK plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.2.1 via META description. This makes it possible for unauthenticated attackers to extract limited information about password protected posts.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3109539%40seo-simple-pack&new=3109539%40seo-simple-pack&sfp_email=&sfph_mail=; https://wordpress.org/plugins/seo-simple-pack/; https://www.wordfence.com/threat-intel/vulnerabilities/id/f62a9ca0-7077-410f-b005-175348acd133?source=cve
CVE: CVE-2024-30110
Published: 2024-06-28
Description: HCL DRYiCE
AEX product is impacted by lack of input validation vulnerability in a particular web application. A malicious script can be injected into a system which
can cause the system to behave in unexpected ways.
CVSS Score: 3.7 (LOW)
CWE: CWE-20
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193
CVE: CVE-2024-30111
Published: 2024-06-28
Description: HCL DRYiCE AEX product is impacted by Missing
Root Detection vulnerability in the mobile application. The  mobile app can be installed in the rooted
device due to which malicious users can gain unauthorized access to the rooted
devices, compromising security and potentially leading to data breaches or
other malicious activities.
CVSS Score: 3.3 (LOW)
CWE: CWE-1326
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193
CVE: CVE-2024-39347
Published: 2024-06-28
Description: Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to access highly sensitive intranet resources via unspecified vectors.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-276
References: https://www.synology.com/en-global/security/advisory/Synology_SA_23_16; https://www.synology.com/en-global/security/advisory/Synology_SA_23_16
CVE: CVE-2024-39348
Published: 2024-06-28
Description: Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-494
References: https://www.synology.com/en-global/security/advisory/Synology_SA_23_16; https://www.synology.com/en-global/security/advisory/Synology_SA_23_16
CVE: CVE-2024-39350
Published: 2024-06-28
Description: A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-middle attackers to obtain privileges without consent via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.
CVSS Score: 7.5 (HIGH)
CWE: CWE-290
References: https://www.synology.com/en-global/security/advisory/Synology_SA_23_15; https://www.synology.com/en-global/security/advisory/Synology_SA_23_15
CVE: CVE-2024-5788
Published: 2024-06-28
Description: The Silesia theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ attribute within the theme's Button shortcode in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://themes.trac.wordpress.org/browser/silesia/1.0.6/functions/shortcodes.php#L128; https://www.wordfence.com/threat-intel/vulnerabilities/id/0183625a-611c-4353-9d2a-7a25ae12709a?source=cve; https://themes.trac.wordpress.org/browser/silesia/1.0.6/functions/shortcodes.php#L128
CVE: CVE-2024-5796
Published: 2024-06-28
Description: The Infinite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘project_url’ parameter in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://themes.trac.wordpress.org/browser/infinite/1.1.2/framework/metaboxes/metaboxes.php#L79; https://www.wordfence.com/threat-intel/vulnerabilities/id/673f0910-8121-4344-b756-2ed5418fdc6b?source=cve; https://themes.trac.wordpress.org/browser/infinite/1.1.2/framework/metaboxes/metaboxes.php#L79
CVE: CVE-2024-6288
Published: 2024-06-28
Description: The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tiktok_user_id’ parameter in all versions up to, and including, 7.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/enhanced-e-commerce-for-woocommerce-store/tags/7.1.0/admin/partials/wizard-productfeed-even.php?rev=3105213#L371; https://plugins.trac.wordpress.org/browser/enhanced-e-commerce-for-woocommerce-store/tags/7.1.0/admin/partials/wizard-productfeed-odd.php?rev=3105213#L368; https://plugins.trac.wordpress.org/changeset/3108037/
CVE: CVE-2024-30135
Published: 2024-06-28
Description: HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot is taken.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193
CVE: CVE-2024-5424
Published: 2024-06-28
Description: The Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘galleryID’ and 'className' parameters in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/simply-gallery-block/trunk/blocks/init.php#L127; https://plugins.trac.wordpress.org/browser/simply-gallery-block/trunk/blocks/init.php#L132; https://plugins.trac.wordpress.org/browser/simply-gallery-block/trunk/blocks/init.php#L70
CVE: CVE-2024-5662
Published: 2024-06-28
Description: The Ultimate Post Kit Addons For Elementor – (Post Grid, Post Carousel, Post Slider, Category List, Post Tabs, Timeline, Post Ticker, Tag Cloud) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the Social Count (Static) widget in all versions up to, and including, 3.11.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/ultimate-post-kit/tags/3.11.5/modules/static-social-count/widgets/static-social-count.php#L800; https://plugins.trac.wordpress.org/changeset/3106395/#file526; https://wordpress.org/plugins/ultimate-post-kit/#developers
CVE: CVE-2024-5922
Published: 2024-06-28
Description: The Scylla lite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Button shortcode in all versions up to, and including, 1.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://themes.trac.wordpress.org/browser/scylla-lite/1.8.3/lib/includes/shortcodes.php#L139; https://www.wordfence.com/threat-intel/vulnerabilities/id/c57bffc8-1ee5-4380-a78f-f4fc8c606861?source=cve; https://themes.trac.wordpress.org/browser/scylla-lite/1.8.3/lib/includes/shortcodes.php#L139
CVE: CVE-2024-5925
Published: 2024-06-28
Description: The Theron Lite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Button shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://themes.trac.wordpress.org/browser/theron-lite/2.0/lib/includes/shortcodes.php#L76; https://www.wordfence.com/threat-intel/vulnerabilities/id/b4737bb2-1bb4-4986-9df5-5978fc46f2ec?source=cve; https://themes.trac.wordpress.org/browser/theron-lite/2.0/lib/includes/shortcodes.php#L76
CVE: CVE-2024-5735
Published: 2024-06-28
Description: Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder. This issue affects AdmirorFrames: before 5.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-497
References: https://cert.pl/en/posts/2024/06/CVE-2024-5735/; https://cert.pl/posts/2024/06/CVE-2024-5735/; https://github.com/afine-com/CVE-2024-5735
CVE: CVE-2024-5736
Published: 2024-06-28
Description: Server Side Request Forgery (SSRF) vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to access local files or server pages available only from localhost. This issue affects AdmirorFrames: before 5.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918, CWE-918
References: https://cert.pl/en/posts/2024/06/CVE-2024-5735/; https://cert.pl/posts/2024/06/CVE-2024-5735/; https://github.com/afine-com/CVE-2024-5736
CVE: CVE-2024-5737
Published: 2024-06-28
Description: Script afGdStream.php in AdmirorFrames Joomla! extension doesn’t specify a content type and as a result default (text/html) is used. An attacker may embed HTML tags directly in image data which is rendered by a webpage as HTML. This issue affects AdmirorFrames: before 5.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://cert.pl/en/posts/2024/06/CVE-2024-5735/; https://cert.pl/posts/2024/06/CVE-2024-5735/; https://github.com/afine-com/CVE-2024-5737
CVE: CVE-2024-37741
Published: 2024-06-28
Description: OpenPLC 3 through 9cd8f1b allows XSS via an SVG document as a profile picture.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://1d8.github.io/cves/cve_2024_37741/; https://github.com/thiagoralves/OpenPLC_v3/blob/9cd8f1b53a50f9d38708096bfc72bcbb1ef47343/webserver/pages.py#L992; https://github.com/thiagoralves/OpenPLC_v3/issues/242
CVE: CVE-2024-39704
Published: 2024-06-28
Description: Soft Circle French-Bread Melty Blood: Actress Again: Current Code through 1.07 Rev. 1.4.0 allows a remote attacker to execute arbitrary code on a client's machine via a crafted packet on TCP port 46318.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74, CWE-74
References: https://github.com/MikeIsAStar/Melty-Blood-Actress-Again-Current-Code-Remote-Code-Execution; https://pastebin.com/agpnQmhu; https://github.com/MikeIsAStar/Melty-Blood-Actress-Again-Current-Code-Remote-Code-Execution
CVE: CVE-2024-3800
Published: 2024-06-28
Description: Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in requested file names. 
Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://cert.pl/en/posts/2024/06/CVE-2024-3800; https://cert.pl/posts/2024/06/CVE-2024-3800; https://cert.pl/en/posts/2024/06/CVE-2024-3800
CVE: CVE-2024-3801
Published: 2024-06-28
Description: Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in one of GET header parameters. 
Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://cert.pl/en/posts/2024/06/CVE-2024-3800; https://cert.pl/posts/2024/06/CVE-2024-3800; https://cert.pl/en/posts/2024/06/CVE-2024-3800
CVE: CVE-2024-3816
Published: 2024-06-28
Description: Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to a blind SQL Injection executed using the search bar. 
Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://cert.pl/en/posts/2024/06/CVE-2024-3800; https://cert.pl/posts/2024/06/CVE-2024-3800; https://cert.pl/en/posts/2024/06/CVE-2024-3800
CVE: CVE-2024-29038
Published: 2024-06-28
Description: tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data which is not detected by `tpm2 checkquote`. This issue was patched in version 5.7.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1283, CWE-1390
References: https://github.com/tpm2-software/tpm2-tools/releases/tag/5.7; https://github.com/tpm2-software/tpm2-tools/security/advisories/GHSA-5495-c38w-gr6f; https://github.com/tpm2-software/tpm2-tools/releases/tag/5.7
CVE: CVE-2024-38531
Published: 2024-06-28
Description: Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible. A build process has access to and can change the permissions of the build directory. After creating a setuid binary in a globally accessible location, a malicious local user can assume the permissions of a Nix daemon worker and hijack all future builds. This issue was patched in version(s) 2.23.1, 2.22.2, 2.21.3, 2.20.7, 2.19.5 and 2.18.4.
CVSS Score: 3.6 (LOW)
CWE: CWE-278
References: https://github.com/NixOS/nix/pull/10501; https://github.com/NixOS/nix/security/advisories/GHSA-q82p-44mg-mgh5; https://github.com/NixOS/nix/pull/10501
CVE: CVE-2024-29039
Published: 2024-06-28
Description: tpm2 is the source repository for the Trusted Platform Module (TPM2.0) tools. This vulnerability allows attackers to manipulate tpm2_checkquote outputs by altering the TPML_PCR_SELECTION in the PCR input file.  As a result, digest values are incorrectly mapped to PCR slots and banks, providing a misleading picture of the TPM state. This issue has been patched in version 5.7.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-807
References: https://github.com/tpm2-software/tpm2-tools/releases/tag/5.7; https://github.com/tpm2-software/tpm2-tools/security/advisories/GHSA-8rjm-5f5f-h4q6; https://github.com/tpm2-software/tpm2-tools/releases/tag/5.7
CVE: CVE-2024-35137
Published: 2024-06-28
Description: IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed.   IBM X-Force ID:  292413.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-258, CWE-521
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/292413; https://www.ibm.com/support/pages/node/7158790; http://seclists.org/fulldisclosure/2024/Nov/0
CVE: CVE-2024-35139
Published: 2024-06-28
Description: IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from the container due to incorrect default permissions.  IBM X-Force ID:  292415.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-276
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/292415; https://www.ibm.com/support/pages/node/7158790; http://seclists.org/fulldisclosure/2024/Nov/0
CVE: CVE-2024-38521
Published: 2024-06-28
Description: Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. There is a stored XSS in the Inbox. The input is displayed using the `safe` Jinja2 attribute, and thus not sanitized upon display. This issue has been patched in version 0.1.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/scidsg/hushline/security/advisories/GHSA-4v8c-r6h2-fhh3; https://github.com/scidsg/hushline/security/advisories/GHSA-4v8c-r6h2-fhh3
CVE: CVE-2024-38522
Published: 2024-06-28
Description: Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. The CSP policy applied on the `tips.hushline.app` website and bundled by default in this repository is trivial to bypass. This vulnerability has been patched in version 0.1.0.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-183, CWE-697
References: https://github.com/scidsg/hushline/commit/2bbeae78a24ca2cd893f32a1812f5f6634cb21b6; https://github.com/scidsg/hushline/security/advisories/GHSA-r85c-95x7-4h7q; https://github.com/scidsg/hushline/commit/2bbeae78a24ca2cd893f32a1812f5f6634cb21b6
CVE: CVE-2024-6402
Published: 2024-06-28
Description: A vulnerability classified as critical was found in Tenda A301 15.13.08.12. Affected by this vulnerability is the function fromSetWirelessRepeat of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269947. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://github.com/General-Offensive/iot_vuldb/blob/main/Tenda/A301/formSetDeviceName_devName.md; https://vuldb.com/?ctiid.269947; https://vuldb.com/?id.269947
CVE: CVE-2024-6403
Published: 2024-06-28
Description: A vulnerability, which was classified as critical, has been found in Tenda A301 15.13.08.12. Affected by this issue is the function formWifiBasicSet of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269948. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://github.com/General-Offensive/iot_vuldb/blob/main/Tenda/A301/formSetDeviceName_devName.md; https://vuldb.com/?ctiid.269948; https://vuldb.com/?id.269948
CVE: CVE-2024-31912
Published: 2024-06-28
Description: IBM MQ 9.3 LTS and 9.3 CD could allow an authenticated user to escalate their privileges under certain configurations due to incorrect privilege assignment.  IBM X-Force ID:  289894.
CVSS Score: 7.5 (HIGH)
CWE: CWE-266
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/289894; https://www.ibm.com/support/pages/node/7158072; https://exchange.xforce.ibmcloud.com/vulnerabilities/289894