deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-37890
Published: 2024-06-17
Description: ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in ws@8.17.1 (e55e510) and backported to ws@7.5.10 (22c2876), ws@6.2.3 (eeb76d3), and ws@5.2.4 (4abd8f6). In vulnerable versions of ws, the issue can be mitigated in the following ways: 1. Reduce the maximum allowed length of the request headers using the --max-http-header-size=size and/or the maxHeaderSize options so that no more headers than the server.maxHeadersCount limit can be sent. 2. Set server.maxHeadersCount to 0 so that no limit is applied.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/websockets/ws/commit/22c28763234aa75a7e1b76f5c01c181260d7917f; https://github.com/websockets/ws/commit/4abd8f6de4b0b65ef80b3ff081989479ed93377e; https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c
CVE: CVE-2024-37891
Published: 2024-06-17
Description:  urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with `ProxyManager`, the `Proxy-Authorization` header is only sent to the configured proxy, as expected. However, when sending HTTP requests *without* using urllib3's proxy support, it's possible to accidentally configure the `Proxy-Authorization` header even though it won't have any effect as the request is not using a forwarding proxy or a tunneling proxy. In those cases, urllib3 doesn't treat the `Proxy-Authorization` HTTP header as one carrying authentication material and thus doesn't strip the header on cross-origin redirects. Because this is a highly unlikely scenario, we believe the severity of this vulnerability is low for almost all users. Out of an abundance of caution urllib3 will automatically strip the `Proxy-Authorization` header during cross-origin redirects to avoid the small chance that users are doing this on accident. Users should use urllib3's proxy support or disable automatic redirects to achieve safe processing of the `Proxy-Authorization` header, but we still decided to strip the header by default in order to further protect users who aren't using the correct approach. We believe the number of usages affected by this advisory is low. It requires all of the following to be true to be exploited: 1. Setting the `Proxy-Authorization` header without using urllib3's built-in proxy support. 2. Not disabling HTTP redirects. 3. Either not using an HTTPS origin server or for the proxy or target origin to redirect to a malicious origin. Users are advised to update to either version 1.26.19 or version 2.2.2. Users unable to upgrade may use the `Proxy-Authorization` header with urllib3's `ProxyManager`, disable HTTP redirects using `redirects=False` when sending requests, or not user the `Proxy-Authorization` header as mitigations.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-669
References: https://github.com/urllib3/urllib3/commit/accff72ecc2f6cf5a76d9570198a93ac7c90270e; https://github.com/urllib3/urllib3/security/advisories/GHSA-34jh-p97f-mpxf; https://github.com/urllib3/urllib3/commit/accff72ecc2f6cf5a76d9570198a93ac7c90270e
CVE: CVE-2024-37893
Published: 2024-06-17
Description: Firefly III is a free and open source personal finance manager. In affected versions an MFA bypass in the Firefly III OAuth flow may allow malicious users to bypass the MFA-check. This allows malicious users to use password spraying to gain access to Firefly III data using passwords stolen from other sources. As OAuth applications are easily enumerable using an incrementing id, an attacker could try sign an OAuth application up to a users profile quite easily if they have created one. The attacker would also need to know the victims username and password. This problem has been patched in Firefly III v6.1.17 and up. Users are advised to upgrade. Users unable to upgrade should Use a unique password for their Firefly III instance and store their password securely, i.e. in a password manager.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287, CWE-288
References: https://github.com/firefly-iii/firefly-iii/security/advisories/GHSA-4gm4-c4mh-4p7w; https://owasp.org/www-community/attacks/Password_Spraying_Attack; https://www.menlosecurity.com/what-is/highly-evasive-adaptive-threats-heat/mfa-bypass
CVE: CVE-2024-37895
Published: 2024-06-17
Description: Lobe Chat is an open-source LLMs/AI chat framework. In affected versions if an attacker can successfully authenticate through SSO/Access Code, they can obtain the real backend API Key by modifying the base URL to their own attack URL on the frontend and setting up a server-side request. This issue has been addressed in version 0.162.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-200
References: https://github.com/lobehub/lobe-chat/security/advisories/GHSA-p36r-qxgx-jq2v; https://github.com/lobehub/lobe-chat/security/advisories/GHSA-p36r-qxgx-jq2v
CVE: CVE-2024-37896
Published: 2024-06-17
Description: Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin <= v2.6.5 has SQL injection vulnerability. The SQL injection vulnerabilities occur when a web application allows users to input data into SQL queries without sufficiently validating or sanitizing the input. Failing to properly enforce restrictions on user input could mean that even a basic form input field can be used to inject arbitrary and potentially dangerous SQL commands. This could lead to unauthorized access to the database, data leakage, data manipulation, or even complete compromise of the database server. This vulnerability has been addressed in commit `53d033821` which has been included in release version 2.6.6. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/flipped-aurora/gin-vue-admin/commit/53d[PII_REDACTED]8464ade489ab0713b54392d227f; https://github.com/flipped-aurora/gin-vue-admin/security/advisories/GHSA-gf3r-h744-mqgp; https://github.com/flipped-aurora/gin-vue-admin/commit/53d[PII_REDACTED]8464ade489ab0713b54392d227f
CVE: CVE-2024-37902
Published: 2024-06-17
Description: DeepJavaLibrary(DJL) is an Engine-Agnostic Deep Learning Framework in Java. DJL versions 0.1.0 through 0.27.0 do not prevent absolute path archived artifacts from inserting archived files directly into the system, overwriting system files. This is fixed in DJL 0.28.0 and patched in DJL Large Model Inference containers version 0.27.0. Users are advised to upgrade.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-22
References: https://github.com/deepjavalibrary/djl/releases/tag/v0.28.0; https://github.com/deepjavalibrary/djl/security/advisories/GHSA-w877-jfw7-46rj; https://github.com/deepjavalibrary/djl/releases/tag/v0.28.0
CVE: CVE-2024-6061
Published: 2024-06-17
Description: A vulnerability has been found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this vulnerability is the function isoffin_process of the file src/filters/isoffin_read.c of the component MP4Box. The manipulation leads to infinite loop. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is 20c0f29139a82779b86453ce7f68d0681ec7624c. It is recommended to apply a patch to fix this issue. The identifier VDB-268789 was assigned to this vulnerability.
CVSS Score: 3.3 (LOW)
CWE: CWE-835
References: https://github.com/gpac/gpac/commit/20c0f29139a82779b86453ce7f68d0681ec7624c; https://github.com/gpac/gpac/issues/2871; https://github.com/user-attachments/files/15801058/poc1.zip
CVE: CVE-2024-6062
Published: 2024-06-17
Description: A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this issue is the function swf_svg_add_iso_sample of the file src/filters/load_text.c of the component MP4Box. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as 31e499d310a48bd17c8b055a0bfe0fe35887a7cd. It is recommended to apply a patch to fix this issue. VDB-268790 is the identifier assigned to this vulnerability.
CVSS Score: 3.3 (LOW)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/31e499d310a48bd17c8b055a0bfe0fe35887a7cd; https://github.com/gpac/gpac/issues/2872; https://github.com/user-attachments/files/15801126/poc2.zip
CVE: CVE-2023-37057
Published: 2024-06-17
Description: An issue in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to execute arbitrary code via the router's authentication mechanism.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: http://jlink.com; http://www.unionman.com.cn/en/contact.html; https://github.com/ri5c/Jlink-Router-RCE
CVE: CVE-2023-37058
Published: 2024-06-17
Description: Insecure Permissions vulnerability in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to escalate privileges via a crafted command.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: http://jlink.com; https://github.com/ri5c/Jlink-Router-RCE; http://jlink.com
CVE: CVE-2024-34833
Published: 2024-06-17
Description: Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Users can upload images via the "save_settings" page. An unauthenticated attacker can leverage this functionality to upload a malicious PHP file instead. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as the user running the web server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/ShellUnease/payroll-management-system-rce; https://packetstormsecurity.com/files/179106/Payroll-Management-System-1.0-Remote-Code-Execution.html; https://github.com/ShellUnease/payroll-management-system-rce
CVE: CVE-2024-37798
Published: 2024-06-17
Description: Cross-site scripting (XSS) vulnerability in search-appointment.php in the Admin Panel in Phpgurukul Beauty Parlour Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the search input field.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://cyberxtron.com/blog/cve-2024-37798---cross-site-scripting-xss-in-beauty-parlour-management-system--5187; https://owasp.org/www-community/attacks/xss/; https://cyberxtron.com/blog/cve-2024-37798---cross-site-scripting-xss-in-beauty-parlour-management-system--5187
CVE: CVE-2024-37828
Published: 2024-06-17
Description: A stored cross-site scripting (XSS) in Vermeg Agile Reporter v23.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Message field under the Set Broadcast Message module.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://crashpark.weebly.com/blog/2-stored-xss-in-agilereporter-213-by-vermeg; https://www.vermeg.com/agile-reporter/; https://crashpark.weebly.com/blog/2-stored-xss-in-agilereporter-213-by-vermeg
CVE: CVE-2024-6063
Published: 2024-06-17
Description: A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been classified as problematic. This affects the function m2tsdmx_on_event of the file src/filters/dmx_m2ts.c of the component MP4Box. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named 8767ed0a77c4b02287db3723e92c2169f67c85d5. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-268791.
CVSS Score: 3.3 (LOW)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/8767ed0a77c4b02287db3723e92c2169f67c85d5; https://github.com/gpac/gpac/issues/2873; https://github.com/user-attachments/files/15801157/poc.zip
CVE: CVE-2024-6064
Published: 2024-06-17
Description: A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been declared as problematic. This vulnerability affects the function xmt_node_end of the file src/scene_manager/loader_xmt.c of the component MP4Box. The manipulation leads to use after free. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The name of the patch is f4b3e4d2f91bc1749e7a924a8ab171af03a355a8/c1b9c794bad8f262c56f3cf690567980d96662f5. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-268792.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416
References: https://github.com/gpac/gpac/commit/c1b9c794bad8f262c56f3cf690567980d96662f5; https://github.com/gpac/gpac/issues/2874; https://github.com/user-attachments/files/15801189/poc.zip
CVE: CVE-2024-6065
Published: 2024-06-17
Description: A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument user_email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-268793 was assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/ppp-src/CVE/issues/4; https://vuldb.com/?ctiid.268793; https://vuldb.com/?id.268793
CVE: CVE-2024-6066
Published: 2024-06-17
Description: A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is an unknown function of the file payment_report.php. The manipulation of the argument month_of leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-268794 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/jadu101/CVE/blob/main/SourceCodester_House_Rental_Management_System_Sqli.md; https://vuldb.com/?ctiid.268794; https://vuldb.com/?id.268794
CVE: CVE-2024-6067
Published: 2024-06-17
Description: A vulnerability classified as critical was found in SourceCodester Music Class Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file /mces/?p=class/view_class. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268795.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/jadu101/CVE/blob/main/SourceCodester-Musical-Class-Enrollment-System-SQLi.md; https://vuldb.com/?ctiid.268795; https://vuldb.com/?id.268795
CVE: CVE-2024-6080
Published: 2024-06-17
Description: A vulnerability classified as critical was found in Intelbras InControl 2.21.56. This vulnerability affects unknown code of the component incontrolWebcam Service. The manipulation leads to unquoted search path. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 2.21.58 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early about this disclosure and plans to provide a solution within the next few weeks.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426, CWE-428
References: https://backend.intelbras.com/sites/default/files/2024-10/Aviso%20de%20Seguran%C3%A7a%20-%20Incontrol%202.21.56%20e%202.21.57.pdf; https://download.cronos.intelbras.com.br/download/INCONTROL/INCONTROL-WEB/prod/INCONTROL-WEB-2.21.58-233dfd1ac1e2ca3eabb71c854005c78b.exe; https://vuldb.com/?ctiid.268822
CVE: CVE-2024-6082
Published: 2024-06-17
Description: A vulnerability, which was classified as problematic, has been found in PHPVibe 11.0.46. This issue affects some unknown processing of the file functionalities.global.php of the component Global Options Page. The manipulation of the argument site-logo-text leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268823. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://github.com/WeikFu/PHPVibe-vulnerability-description/issues/1; https://vuldb.com/?ctiid.268823; https://vuldb.com/?id.268823
CVE: CVE-2024-6083
Published: 2024-06-18
Description: A vulnerability, which was classified as critical, was found in PHPVibe 11.0.46. Affected is an unknown function of the file /app/uploading/upload-mp3.php of the component Media Upload Page. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-268824. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://github.com/WeikFu/PHPVibe-vulnerability-description/issues/2; https://vuldb.com/?ctiid.268824; https://vuldb.com/?id.268824
CVE: CVE-2024-6084
Published: 2024-06-18
Description: A vulnerability has been found in itsourcecode Pool of Bethesda Online Reservation System up to 1.0 and classified as critical. Affected by this vulnerability is the function uploadImage of the file /admin/mod_room/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-268825 was assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-434
References: https://github.com/Laster-dev/CVE/issues/2; https://vuldb.com/?ctiid.268825; https://vuldb.com/?id.268825
CVE: CVE-2024-0845
Published: 2024-06-18
Description: The PDF Viewer for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the render function in all versions up to, and including, 2.9.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/pdf-viewer-for-elementor/trunk/widgets/pdf-viewer.php#L256; https://plugins.trac.wordpress.org/browser/pdf-viewer-for-elementor/trunk/widgets/pdf-viewer.php#L260; https://plugins.trac.wordpress.org/browser/pdf-viewer-for-elementor/trunk/widgets/pdfjs-viewer.php#L215
CVE: CVE-2024-1634
Published: 2024-06-18
Description: The Scheduling Plugin – Online Booking for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'cbsb_disconnect_settings' function in all versions up to, and including, 3.5.10. This makes it possible for unauthenticated attackers to disconnect the plugin from the startbooking service and remove connection data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://wordpress.org/plugins/calendar-booking/; https://www.wordfence.com/threat-intel/vulnerabilities/id/60e642f9-74ff-47f1-a49d-99c8fdb26f4a?source=cve; https://wordpress.org/plugins/calendar-booking/
CVE: CVE-2024-4375
Published: 2024-06-18
Description: The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ms_layer' shortcode in all versions up to, and including, 3.9.10 due to insufficient input sanitization and output escaping on the 'css_id' user supplied attribute. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. e	CVE-2024-37222 may be a duplicate of this issue.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/master-slider/trunk/includes/msp-shortcodes.php#L817; https://plugins.trac.wordpress.org/changeset/3138224/master-slider/trunk/includes/msp-shortcodes.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/35ead2b5-8b50-40e1-9b4a-547d97f34c4e?source=cve
CVE: CVE-2024-5541
Published: 2024-06-18
Description: The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ibtana_visual_editor_register_ajax_json_endpont' function in all versions up to, and including, 1.2.3.3. This makes it possible for unauthenticated attackers to update option values for reCAPTCHA keys on the WordPress site. This can be leveraged to bypass reCAPTCHA on the site. CVE-2024-37123 is likely a duplicate of this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/ibtana-visual-editor/trunk/admin/settings.php#L9; https://plugins.trac.wordpress.org/browser/ibtana-visual-editor/trunk/dist/blocks.build.js; https://plugins.trac.wordpress.org/changeset/3103454/ibtana-visual-editor/trunk/admin/settings.php
CVE: CVE-2024-5860
Published: 2024-06-18
Description: The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the tc_dl_delete_tickets AJAX action in all versions up to, and including, 3.5.2.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete all tickets associated with events.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-863
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3103413%40tickera-event-ticketing-system&new=3103413%40tickera-event-ticketing-system&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/d86aa41c-24df-49ec-b273-7bb57addddde?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3103413%40tickera-event-ticketing-system&new=3103413%40tickera-event-ticketing-system&sfp_email=&sfph_mail=
CVE: CVE-2023-5527
Published: 2024-06-18
Description: The Business Directory Plugin plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 6.4.3 via the class-csv-exporter.php file. This allows authenticated attackers, with author-level permissions and above, to embed untrusted input into CSV files exported by administrators, which can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration.
CVSS Score: 7.4 (HIGH)
CWE: CWE-1236, CWE-1236
References: https://plugins.trac.wordpress.org/browser/business-directory-plugin/trunk/includes/admin/class-csv-exporter.php; https://plugins.trac.wordpress.org/browser/business-directory-plugin/trunk/includes/admin/helpers/csv/class-csv-exporter.php; https://plugins.trac.wordpress.org/changeset/3102475/business-directory-plugin/trunk/includes/admin/helpers/csv/class-csv-exporter.php
CVE: CVE-2024-0066
Published: 2024-06-18
Description: Johan Fagerström, member of the AXIS OS Bug Bounty Program, has found that a O3C feature may expose sensitive traffic between the client (Axis device) and (O3C) server. If O3C is not being used this flaw does not apply. 
Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-319
References: https://www.axis.com/dam/public/03/49/2c/cve-2024-0066-en-US-442553.pdf; https://www.axis.com/dam/public/03/49/2c/cve-2024-0066-en-US-442553.pdf
CVE: CVE-2024-33620
Published: 2024-06-18
Description: Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.
CVSS Score: 8.6 (HIGH)
CWE: CWE-36
References: https://jvn.jp/en/jp/JVN65171386/; https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html; https://jvn.jp/en/jp/JVN65171386/