deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-36444
Published: 2024-08-22
Description: cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an unauthenticated attacker to gain access to device logs.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://www.swissphone.com/en-us/solutions/components/terminals/radio-data-module-dical-red/; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-040.txt; http://seclists.org/fulldisclosure/2024/Aug/34
CVE: CVE-2024-36445
Published: 2024-08-22
Description: Swissphone DiCal-RED 4009 devices allow a remote attacker to gain a root shell via TELNET without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.swissphone.com/en-us/solutions/components/terminals/radio-data-module-dical-red/; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-035.txt; http://seclists.org/fulldisclosure/2024/Aug/29
CVE: CVE-2024-43398
Published: 2024-08-22
Description: REXML is an XML toolkit for Ruby. The REXML gem before 3.3.6 has a DoS vulnerability when it parses an XML that has many deep elements that have same local name attributes. If you need to parse untrusted XMLs with tree parser API like REXML::Document.new, you may be impacted to this vulnerability. If you use other parser APIs such as stream parser API and SAX2 parser API, this vulnerability is not affected. The REXML gem 3.3.6 or later include the patch to fix the vulnerability.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-776
References: https://github.com/ruby/rexml/releases/tag/v3.3.6; https://github.com/ruby/rexml/security/advisories/GHSA-vmwr-mc7x-5vc3; https://lists.debian.org/debian-lts-announce/2025/01/msg00011.html
CVE: CVE-2024-43785
Published: 2024-08-22
Description: gitoxide An idiomatic, lean, fast & safe pure Rust implementation of Git. gitoxide-core, which provides most underlying functionality of the gix and ein commands, does not neutralize newlines, backspaces, or control characters—including those that form ANSI escape sequences—that appear in a repository's paths, author and committer names, commit messages, or other metadata. Such text may be written as part of the output of a command, as well as appearing in error messages when an operation fails. This sometimes allows an untrusted repository to misrepresent its contents and to alter or concoct error messages.
CVSS Score: 2.5 (LOW)
CWE: CWE-150
References: https://github.com/Byron/gitoxide/security/advisories/GHSA-88g2-r9rw-g55h
CVE: CVE-2024-43787
Published: 2024-08-22
Description: Hono is a Web application framework that provides support for any JavaScript runtime. Hono CSRF middleware can be bypassed using crafted Content-Type header. MIME types are case insensitive, but isRequestedByFormElementRe only matches lower-case. As a result, attacker can bypass csrf middleware using upper-case form-like MIME type. This vulnerability is fixed in 4.5.8.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-352
References: https://github.com/honojs/hono/blob/b0af71fbcc6dbe44140ea76f16d68dfdb32a99a0/src/middleware/csrf/index.ts#L16-L17; https://github.com/honojs/hono/commit/41ce[PII_REDACTED]10dee60c783142e05bb5a22449; https://github.com/honojs/hono/security/advisories/GHSA-rpfr-3m35-5vx5
CVE: CVE-2023-6452
Published: 2024-08-22
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Web Security (Transaction Viewer) allows Stored XSS.





The
 Forcepoint Web Security portal allows administrators to generate 
detailed reports on user requests made through the Web proxy. It has 
been determined that the "user agent" field in the Transaction Viewer is
 vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability, 
which can be exploited by any user who can route traffic through the 
Forcepoint Web proxy.

This 
vulnerability enables unauthorized attackers to execute JavaScript 
within the browser context of a Forcepoint administrator, thereby 
allowing them to perform actions on the administrator's behalf. Such a 
breach could lead to unauthorized access or modifications, posing a 
significant security risk.






This issue affects Web Security: before 8.5.6.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://support.forcepoint.com/s/article/000042212
CVE: CVE-2024-36441
Published: 2024-08-22
Description: Swissphone DiCal-RED 4009 devices allow an unauthenticated attacker use a port-2101 TCP connection to gain access to operation messages that are received by the device.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-284
References: https://www.swissphone.com/en-us/solutions/components/terminals/radio-data-module-dical-red/; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-042.txt; http://seclists.org/fulldisclosure/2024/Aug/36
CVE: CVE-2024-3127
Published: 2024-08-22
Description: An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 17.1.6, all versions starting from 17.2 before 17.2.4, all versions starting from 17.3 before 17.3.1. Under certain conditions it may be possible to bypass the IP restriction for groups through GraphQL allowing unauthorised users to perform some actions at the group level.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284, CWE-863
References: https://gitlab.com/gitlab-org/gitlab/-/issues/452640; https://hackerone.com/reports/2395169
CVE: CVE-2024-40884
Published: 2024-08-22
Description: Mattermost versions 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 fail to properly enforce permissions which allows a team admin user without "Add Team Members" permission to disable the invite URL.
CVSS Score: 2.7 (LOW)
CWE: CWE-284
References: https://mattermost.com/security-updates
CVE: CVE-2024-42490
Published: 2024-08-22
Description: authentik is an open-source Identity Provider. Several API endpoints can be accessed by users without correct authentication/authorization. The main API endpoints affected by this are /api/v3/crypto/certificatekeypairs/<uuid>/view_certificate/, /api/v3/crypto/certificatekeypairs/<uuid>/view_private_key/, and /api/v3/.../used_by/. Note that all of the affected API endpoints require the knowledge of the ID of an object, which especially for certificates is not accessible to an unprivileged user. Additionally the IDs for most objects are UUIDv4, meaning they are not easily guessable/enumerable. authentik 2024.4.4, 2024.6.4 and 2024.8.0 fix this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-285
References: https://github.com/goauthentik/authentik/commit/19318d4c00bb02c4ec3c4f8f15ac2e1dbe8d846c; https://github.com/goauthentik/authentik/commit/359b343f51524342a5ca03828e7c975a1d654b11; https://github.com/goauthentik/authentik/security/advisories/GHSA-qxqc-27pr-wgc8
CVE: CVE-2024-42497
Published: 2024-08-22
Description: Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to properly enforce permissions which allows a user with systems manager role with read-only access to teams to perform write operations on teams.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-284
References: https://mattermost.com/security-updates
CVE: CVE-2024-42769
Published: 2024-08-22
Description: A Reflected Cross Site Scripting (XSS) vulnerability was found in "/core/signup_user.php " of Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via "user_fname" and "user_lname" parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/Reflected%20XSS%20-%20Sign%20UP.pdf; https://www.kashipara.com/
CVE: CVE-2024-42770
Published: 2024-08-22
Description: A Stored Cross Site Scripting (XSS) vulnerability was found in "/core/signup_user.php" of Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via the "user_email" parameter.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/Stored%20XSS%20-%20Sign%20UP.pdf; https://www.kashipara.com/
CVE: CVE-2024-42771
Published: 2024-08-22
Description: A Stored Cross Site Scripting (XSS) vulnerability was found in " /admin/edit_room_controller.php" of the Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via "room_name" parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/Stored%20XSS%20-%20Edit%20Room.pdf; https://www.kashipara.com/
CVE: CVE-2024-43780
Published: 2024-08-22
Description: Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.0, 9.8.x <= 9.8.2 fail to enforce permissions which allows a guest user with read access to upload files to a channel.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://mattermost.com/security-updates
CVE: CVE-2024-45191
Published: 2024-08-22
Description: An issue was discovered in Matrix libolm through 3.2.16. The AES implementation is vulnerable to cache-timing attacks due to use of S-boxes. This is related to software that uses a lookup table for the SubWord step. This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-208
References: https://gitlab.matrix.org/matrix-org/olm/; https://gitlab.matrix.org/matrix-org/olm/-/commit/6d4b5b07887821a95b144091c8497d09d377f985; https://news.ycombinator.com/item?id=41249371
CVE: CVE-2024-45192
Published: 2024-08-22
Description: An issue was discovered in Matrix libolm through 3.2.16. Cache-timing attacks can occur due to use of base64 when decoding group session keys. This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-385
References: https://gitlab.matrix.org/matrix-org/olm/; https://gitlab.matrix.org/matrix-org/olm/-/commit/6d4b5b07887821a95b144091c8497d09d377f985; https://news.ycombinator.com/item?id=41249371
CVE: CVE-2024-45193
Published: 2024-08-22
Description: An issue was discovered in Matrix libolm through 3.2.16. There is Ed25519 signature malleability due to lack of validation criteria (does not ensure that S < n). This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-327
References: https://gitlab.matrix.org/matrix-org/olm/; https://gitlab.matrix.org/matrix-org/olm/-/commit/6d4b5b07887821a95b144091c8497d09d377f985; https://news.ycombinator.com/item?id=41249371
CVE: CVE-2024-6502
Published: 2024-08-22
Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 8.2 prior to 17.1.6 starting from 17.2 prior to 17.2.4, and starting from 17.3 prior to 17.3.1, which allows an attacker to create a branch with the same name as a deleted tag.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-684
References: https://gitlab.com/gitlab-org/gitlab/-/issues/470647; https://hackerone.com/reports/2574561
CVE: CVE-2024-7110
Published: 2024-08-22
Description: An issue was discovered in GitLab EE affecting all versions starting 17.0 to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1 allows an attacker to execute arbitrary command in a victim's pipeline through prompt injection.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-77, CWE-77
References: https://gitlab.com/gitlab-org/gitlab/-/issues/472603
CVE: CVE-2024-8041
Published: 2024-08-22
Description: A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions prior to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1. A denial of service could occur upon importing a maliciously crafted repository using the GitHub importer.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://gitlab.com/gitlab-org/gitlab/-/issues/463092; https://hackerone.com/reports/2499070
CVE: CVE-2024-42768
Published: 2024-08-22
Description: A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Hotel Management System v1.0 via /admin/delete_room.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: https://cwe.mitre.org/data/definitions/352.html; https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/CSRF.pdf
CVE: CVE-2024-42772
Published: 2024-08-22
Description: An Incorrect Access Control vulnerability was found in /admin/rooms.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to view valid hotel room entries in administrator section.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/Broken%20Access%20Control%20-%20View%20Room%20Entry.pdf; https://www.kashipara.com/
CVE: CVE-2024-42774
Published: 2024-08-22
Description: An Incorrect Access Control vulnerability was found in /admin/delete_room.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to delete valid hotel room entries in the administrator section.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269
References: https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/Broken%20Access%20Control%20-%20Delete%20Room%20Entry.pdf; https://www.kashipara.com/
CVE: CVE-2024-42775
Published: 2024-08-22
Description: An Incorrect Access Control vulnerability was found in /admin/add_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to add the valid hotel room entries in the administrator section via the direct URL access.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284
References: https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/Broken%20Access%20Control%20-%20Add%20New%20Room%20Entry.pdf; https://www.kashipara.com/
CVE: CVE-2024-42776
Published: 2024-08-22
Description: Kashipara Hotel Management System v1.0 is vulnerable to Incorrect Access Control via /admin/users.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-284
References: https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/Broken%20Access%20Control%20-%20View%20User%20Data.pdf; https://www.kashipara.com/
CVE: CVE-2024-42767
Published: 2024-08-22
Description: Kashipara Hotel Management System v1.0 is vulnerable to Unrestricted File Upload RCE via /admin/add_room_controller.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://cwe.mitre.org/data/definitions/434.html; https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/Unrestricted%20File%20Upload.pdf
CVE: CVE-2024-42773
Published: 2024-08-22
Description: An Incorrect Access Control vulnerability was found in /admin/edit_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to edit the valid hotel room entries in the administrator section.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-863
References: https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/Broken%20Access%20Control%20-%20Edit%20Room%20Entry.pdf; https://www.kashipara.com/
CVE: CVE-2024-7634
Published: 2024-08-22
Description: NGINX Agent's "config_dirs" restriction feature allows a highly privileged attacker to gain the ability to write/overwrite files outside of the designated secure directory.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://my.f5.com/manage/s/article/K000140630
CVE: CVE-2024-39717
Published: 2024-08-22
Description: The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only available for a user logged with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin. (Tenant level users do not have this privilege). The “Change Favicon” (Favorite Icon) option can be mis-used to upload a malicious file ending with .png extension to masquerade as image file. This is possible only after a user with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin has successfully authenticated and logged in.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://versa-networks.com/blog/versa-security-bulletin-update-on-cve-2024-39717-versa-director-dangerous-file-type-upload-vulnerability/; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-39717
CVE: CVE-2024-8088
Published: 2024-08-22
Description: There is a HIGH severity vulnerability affecting the CPython "zipfile"
module affecting "zipfile.Path". Note that the more common API "zipfile.ZipFile" class is unaffected.





When iterating over names of entries in a zip archive (for example, methods
of "zipfile.Path" like "namelist()", "iterdir()", etc)
the process can be put into an infinite loop with a maliciously crafted
zip archive. This defect applies when reading only metadata or extracting
the contents of the zip archive. Programs that are not handling
user-controlled zip archives are not affected.
CWE: CWE-835
References: https://github.com/python/cpython/commit/0aa1ee22ab6e204e9d3d0e9dd63ea648ed691ef1; https://github.com/python/cpython/commit/2231286d78d328c2f575e0b05b16fe447d1656d6; https://github.com/python/cpython/commit/795f2597a4be988e2bb19b69ff9958e981cb894e
CVE: CVE-2024-39776
Published: 2024-08-22
Description: Avtec Outpost stores sensitive information in an insecure location without proper access controls in place.
CVSS Score: 7.5 (HIGH)
CWE: CWE-219
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-235-04
CVE: CVE-2024-42418
Published: 2024-08-22
Description: Avtec Outpost uses a default cryptographic key that can be used to decrypt sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-321
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-235-04
CVE: CVE-2024-42599
Published: 2024-08-22
Description: SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admin_files.php imposes restrictions on edited files, attackers can still bypass these restrictions and write code, allowing authenticated attackers to exploit the vulnerability to execute arbitrary commands and gain system privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://gitee.com/fushuling/cve/blob/master/CVE-2024-42599.md; https://gitee.com/fushuling/cve/blob/master/SeaCMS%20V13%20admin_files.php%20code%20injection.md
CVE: CVE-2024-45201
Published: 2024-08-22
Description: An issue was discovered in llama_index before 0.10.38. download/integration.py includes an exec call for import {cls_name}.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/run-llama/llama_index/compare/v0.10.37...v0.10.38; https://github.com/run-llama/llama_index/pull/13523
CVE: CVE-2024-8075
Published: 2024-08-22
Description: A vulnerability has been found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228 and classified as critical. Affected by this vulnerability is the function setDiagnosisCfg. The manipulation leads to os command injection. The attack can be launched remotely. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://github.com/hawkteam404/RnD_Public/blob/main/TOTOLink_AC1200_T8_OsCmdI_BOF.md; https://vuldb.com/?ctiid.275557; https://vuldb.com/?id.275557
CVE: CVE-2024-8076
Published: 2024-08-22
Description: A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228 and classified as critical. Affected by this issue is the function setDiagnosisCfg. The manipulation leads to buffer overflow. The attack may be launched remotely. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://github.com/hawkteam404/RnD_Public/blob/main/TOTOLink_AC1200_T8_OsCmdI_BOF.md; https://vuldb.com/?ctiid.275558; https://vuldb.com/?id.275558
CVE: CVE-2024-8077
Published: 2024-08-22
Description: A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been classified as critical. This affects the function setTracerouteCfg. The manipulation leads to os command injection. It is possible to initiate the attack remotely. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-78
References: https://github.com/hawkteam404/RnD_Public/blob/main/TOTOLink_AC1200_T8_OsCmdI_BOF.md; https://vuldb.com/?ctiid.275559; https://vuldb.com/?id.275559
CVE: CVE-2023-7260
Published: 2024-08-22
Description: Path Traversal vulnerability discovered in OpenText™ CX-E Voice, 

affecting all version through 22.4. The vulnerability could allow arbitrarily access files on the system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://support.opentext.com/csm?id=kb_article_view&sysparm_article=KB0823114
CVE: CVE-2024-42761
Published: 2024-08-22
Description: A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin_schedule.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via scheduleDurationPHP parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Bus%20Ticket%20Reservation%20System%20v1.0/Stored%20XSS%20-%20Bus%20Schedule%20List.pdf; https://www.kashipara.com/
CVE: CVE-2024-42762
Published: 2024-08-22
Description: A Stored Cross Site Scripting (XSS) vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the Name, Phone, and Email parameter fields.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Bus%20Ticket%20Reservation%20System%20v1.0/Stored%20XSS%20-%20Customer%20Booking%20List.pdf; https://www.kashipara.com/
CVE: CVE-2024-42763
Published: 2024-08-22
Description: A Reflected Cross Site Scripting (XSS) vulnerability was found in the "/schedule.php" page of the Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the "bookingdate" parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Bus%20Ticket%20Reservation%20System%20v1.0/Reflected%20XSS%20-%20Book%20Ticket.pdf; https://www.kashipara.com/
CVE: CVE-2024-8078
Published: 2024-08-22
Description: A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been declared as critical. This vulnerability affects the function setTracerouteCfg. The manipulation leads to buffer overflow. The attack can be initiated remotely. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://github.com/hawkteam404/RnD_Public/blob/main/TOTOLink_AC1200_T8_OsCmdI_BOF.md; https://vuldb.com/?ctiid.275560; https://vuldb.com/?id.275560
CVE: CVE-2024-8079
Published: 2024-08-22
Description: A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been rated as critical. This issue affects the function exportOvpn. The manipulation leads to buffer overflow. The attack may be initiated remotely. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://github.com/hawkteam404/RnD_Public/blob/main/TOTOLink_AC1200_T8_OsCmdI_BOF.md; https://vuldb.com/?ctiid.275561; https://vuldb.com/?id.275561
CVE: CVE-2024-8080
Published: 2024-08-22
Description: A vulnerability classified as critical has been found in SourceCodester Online Health Care System 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument f_name with the input 1%' or 1=1 ) UNION SELECT 1,2,3,4,5,database(),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23# as part of string leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/shang159/sqli-vul/blob/main/sql2.md; https://vuldb.com/?ctiid.275562; https://vuldb.com/?id.275562