deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-41972
Published: 2024-03-26
Description: In some rare cases, there is a password type validation missing in Revert Password check and for some features it could be disabled. Fixed Version: Win ZApp 4.3.0.121 and later.
CVSS Score: 7.3 (HIGH)
CWE: CWE-280
References: https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=Windows&applicable_version=4.3.0.121&deployment_date=2023-09-01&id=1463196; https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=Windows&applicable_version=4.3.0.121&deployment_date=2023-09-01&id=1463196
CVE: CVE-2023-41973
Published: 2024-03-26
Description: ZSATray passes the previousInstallerName as a config parameter to TrayManager, and TrayManager constructs the path and appends previousInstallerName to get the full path of the exe. Fixed Version: Win ZApp 4.3.0.121 and later.

CVSS Score: 7.3 (HIGH)
CWE: CWE-22
References: https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=Windows&applicable_version=4.3.0.121&deployment_date=2023-09-01&id=1463196; https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=Windows&applicable_version=4.3.0.121&deployment_date=2023-09-01&id=1463196
CVE: CVE-2023-50894
Published: 2024-03-26
Description: In Janitza GridVis through 9.0.66, use of hard-coded credentials in the de.janitza.pasw.feature.impl.activators.PasswordEncryption password encryption function allows remote authenticated administrative users to discover cleartext database credentials contained in error report information.
CVSS Score: 8.8 (HIGH)
CWE: CWE-200
References: https://code-white.com; https://code-white.com/public-vulnerability-list/; https://code-white.com
CVE: CVE-2023-50895
Published: 2024-03-26
Description: In Janitza GridVis through 9.0.66, exposed dangerous methods in the de.janitza.pasw.project.server.ServerDatabaseProject project load functionality allow remote authenticated administrative users to execute arbitrary Groovy code.
CVSS Score: 7.2 (HIGH)
References: https://code-white.com; https://code-white.com/public-vulnerability-list/; https://code-white.com
CVE: CVE-2024-22356
Published: 2024-03-26
Description: IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM Integration Bus for z/OS 10.1 through 10.1.0.2store potentially sensitive information in log or trace files that could be read by a privileged user.  IBM X-Force ID:  280893.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-117, CWE-116
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/280893; https://www.ibm.com/support/pages/node/7145144; https://exchange.xforce.ibmcloud.com/vulnerabilities/280893
CVE: CVE-2024-23482
Published: 2024-03-26
Description: The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fixed Version: Mac ZApp 4.2.0.241 and later.

CVSS Score: 7.0 (HIGH)
CWE: CWE-20
References: https://help.zscaler.com/client-connector/client-connector-app-release-summary-2024; https://help.zscaler.com/client-connector/client-connector-app-release-summary-2024
CVE: CVE-2024-23722
Published: 2024-03-26
Description: In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crashes and does not restart. This could result in logs not being delivered properly.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/fluent/fluent-bit/compare/v2.2.1...v2.2.2; https://medium.com/%40adurands82/fluent-bit-dos-vulnerability-cve-2024-23722-4e3e74af9d00; https://github.com/fluent/fluent-bit/compare/v2.2.1...v2.2.2
CVE: CVE-2024-29197
Published: 2024-03-26
Description: Pimcore is an Open Source Data & Experience Management Platform. Any call with the query argument `?pimcore_preview=true` allows to view unpublished sites. In previous versions of Pimcore, session information would propagate to previews, so only a logged in user could open a preview. This no longer applies. Previews are broad open to any user and with just the hint of a restricted link one could gain access to possible confident / unreleased information. This vulnerability is fixed in 11.2.2 and 11.1.6.1.

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/pimcore/pimcore/commit/3ae43fb1065f9eb62ad2f542b883858d36d57e53; https://github.com/pimcore/pimcore/security/advisories/GHSA-5737-rqv4-v445; https://github.com/pimcore/pimcore/commit/3ae43fb1065f9eb62ad2f542b883858d36d57e53
CVE: CVE-2024-29401
Published: 2024-03-26
Description: xzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the session of a deleted admin to do anything.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613
References: https://github.com/menghaining/PoC/blob/main/xzs-mysql/xzs-mysql%20--%20PoC.md; https://github.com/menghaining/PoC/blob/main/xzs-mysql/xzs-mysql%20--%20PoC.md
CVE: CVE-2024-2802
Published: 2024-03-26
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-1166. Reason: This candidate is a reservation duplicate of CVE-2024-1166. Notes: All CVE users should reference CVE-2024-1166 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-21912
Published: 2024-03-26
Description: 
An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert unauthorized code into the software. This is done by writing beyond the designated memory area, which causes an access violation. Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor.


CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.rockwellautomation.com/en-us/support/advisory.SD-1665.html; https://www.rockwellautomation.com/en-us/support/advisory.SD-1665.html
CVE: CVE-2024-21913
Published: 2024-03-26
Description: 
A heap-based memory buffer overflow vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code into the software by overstepping the memory boundaries, which triggers an access violation.  Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor.


CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://www.rockwellautomation.com/en-us/support/advisory.SD-1665.html; https://www.rockwellautomation.com/en-us/support/advisory.SD-1665.html
CVE: CVE-2024-21918
Published: 2024-03-26
Description: 
A memory buffer vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory and triggering an access violation.  Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor.


CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.rockwellautomation.com/en-us/support/advisory.SD-1665.html; https://www.rockwellautomation.com/en-us/support/advisory.SD-1665.html
CVE: CVE-2024-21919
Published: 2024-03-26
Description: 
An uninitialized pointer in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by leveraging the pointer after it is properly.  Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor.


CVSS Score: 7.8 (HIGH)
CWE: CWE-824, CWE-824
References: https://www.rockwellautomation.com/en-us/support/advisory.SD-1665.html; https://www.rockwellautomation.com/en-us/support/advisory.SD-1665.html
CVE: CVE-2024-21920
Published: 2024-03-26
Description: 


A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyond the intended memory boundaries. This could reveal sensitive information and even cause the application to crash, resulting in a denial-of-service condition. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor.




CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.rockwellautomation.com/en-us/support/advisory.SD-1665.html; https://www.rockwellautomation.com/en-us/support/advisory.SD-1665.html
CVE: CVE-2024-25956
Published: 2024-03-26
Description: Dell Grab for Windows, versions 5.0.4 and below, contains an improper file permissions vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the information disclosure of certain system information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://www.dell.com/support/kbdoc/en-us/000223508/dsa-2024-121-security-update-for-grab-for-windows-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000223508/dsa-2024-121-security-update-for-grab-for-windows-vulnerabilities
CVE: CVE-2024-25957
Published: 2024-03-26
Description: Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in its appsync module. An authenticated local attacker could potentially exploit this vulnerability, leading to information disclosure that could be used to access the appsync application with elevated privileges.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-532
References: https://www.dell.com/support/kbdoc/en-us/000223508/dsa-2024-121-security-update-for-grab-for-windows-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000223508/dsa-2024-121-security-update-for-grab-for-windows-vulnerabilities
CVE: CVE-2024-25958
Published: 2024-03-26
Description: Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to privilege escalation, unauthorized access to application data, unauthorized modification of application data and service disruption.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://www.dell.com/support/kbdoc/en-us/000223508/dsa-2024-121-security-update-for-grab-for-windows-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000223508/dsa-2024-121-security-update-for-grab-for-windows-vulnerabilities
CVE: CVE-2024-29808
Published: 2024-03-26
Description: The image_id parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected Cross Site Scripting. The value of the image_id parameter is embedded within an existing JavaScript within the response allowing arbitrary JavaScript to be inserted and executed. The attacker must target a an authenticated user with permissions to access this component to exploit this issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://appcheck-ng.com/xss-vulnerabilities-discovered-10web-photogallery-wordpress-plugin/; https://wordpress.org/plugins/photo-gallery/#developers; https://appcheck-ng.com/xss-vulnerabilities-discovered-10web-photogallery-wordpress-plugin/
CVE: CVE-2024-29809
Published: 2024-03-26
Description: The image_url parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected Cross Site Scripting. The value of the image_url parameter is embedded within an existing JavaScript within the response allowing arbitrary JavaScript to be inserted and executed. The attacker must target a an authenticated user with permissions to access this component to exploit this issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://appcheck-ng.com/xss-vulnerabilities-discovered-10web-photogallery-wordpress-plugin/; https://wordpress.org/plugins/photo-gallery/#developers; https://appcheck-ng.com/xss-vulnerabilities-discovered-10web-photogallery-wordpress-plugin/
CVE: CVE-2024-29810
Published: 2024-03-26
Description: The thumb_url parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected Cross Site Scripting. The value of the thumb_url parameter is embedded within an existing JavaScript within the response allowing arbitrary JavaScript to be inserted and executed. The attacker must target a an authenticated user with permissions to access this component to exploit this issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://appcheck-ng.com/xss-vulnerabilities-discovered-10web-photogallery-wordpress-plugin/; https://wordpress.org/plugins/photo-gallery/#developers; https://appcheck-ng.com/xss-vulnerabilities-discovered-10web-photogallery-wordpress-plugin/
CVE: CVE-2024-29832
Published: 2024-03-26
Description: The current_url parameter of the AJAX call to the GalleryBox action of admin-ajax.php is vulnerable to reflected Cross Site Scripting. The value of the current_url parameter is embedded within an existing JavaScript within the response allowing arbitrary JavaScript to be inserted and executed. No authentication is required to exploit this issue.
Note that other parameters within a AJAX call, such as image_id, must be valid for this vulnerability to be successfully exploited.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://appcheck-ng.com/xss-vulnerabilities-discovered-10web-photogallery-wordpress-plugin/; https://wordpress.org/plugins/photo-gallery/#developers; https://appcheck-ng.com/xss-vulnerabilities-discovered-10web-photogallery-wordpress-plugin/
CVE: CVE-2024-29833
Published: 2024-03-26
Description: The image upload component allows SVG files and the regular expression used to remove script tags can be bypassed by using a Cross Site Scripting payload which does not match the regular expression; one example of this is the inclusion of whitespace within the script tag. An attacker must target an authenticated user with permissions to access this feature, however once uploaded the payload is also accessible to unauthenticated users.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://appcheck-ng.com/xss-vulnerabilities-discovered-10web-photogallery-wordpress-plugin/; https://wordpress.org/plugins/photo-gallery/#developers; https://appcheck-ng.com/xss-vulnerabilities-discovered-10web-photogallery-wordpress-plugin/
CVE: CVE-2024-2212
Published: 2024-03-26
Description: In Eclipse ThreadX before 6.4.0,  xQueueCreate() and xQueueCreateSet() 
functions from the FreeRTOS compatibility API 
(utility/rtos_compatibility_layers/FreeRTOS/tx_freertos.c) were missing 
parameter checks. This could lead to integer wraparound, 
under-allocations and heap buffer overflows.
CVSS Score: 7.3 (HIGH)
CWE: CWE-122, CWE-190, CWE-190, CWE-787
References: http://seclists.org/fulldisclosure/2024/May/35; http://www.openwall.com/lists/oss-security/2024/05/28/1; https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-v9jj-7qjg-h6g6
CVE: CVE-2024-2214
Published: 2024-03-26
Description: In Eclipse ThreadX before version 6.4.0, the _Mtxinit() function in the 
Xtensa port was missing an array size check causing a memory overwrite. 
The affected file was ports/xtensa/xcc/src/tx_clib_lock.c
CVSS Score: 7.0 (HIGH)
CWE: CWE-129, CWE-129
References: http://seclists.org/fulldisclosure/2024/May/35; http://www.openwall.com/lists/oss-security/2024/05/28/1; https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-vmp6-qhp9-r66x
CVE: CVE-2024-2452
Published: 2024-03-26
Description: In Eclipse ThreadX NetX Duo before 6.4.0, if an attacker can control 
parameters of __portable_aligned_alloc() could cause an integer 
wrap-around and an allocation smaller than expected. This could cause 
subsequent heap buffer overflows.
CVSS Score: 7.0 (HIGH)
CWE: CWE-120, CWE-190, CWE-190
References: http://seclists.org/fulldisclosure/2024/May/35; http://www.openwall.com/lists/oss-security/2024/05/28/1; https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-h963-7vhw-8rpx
CVE: CVE-2024-2892
Published: 2024-03-26
Description: A vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257935. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC7/v1/formSetCfm.md; https://vuldb.com/?ctiid.257935; https://vuldb.com/?id.257935
CVE: CVE-2024-2915
Published: 2024-03-26
Description: Improper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevation feature to elevate themselves to unauthorized groups via a specially crafted request.


CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://devolutions.net/security/advisories/DEVO-2024-0005; https://devolutions.net/security/advisories/DEVO-2024-0005
CVE: CVE-2024-2921
Published: 2024-03-26
Description: Improper access control in PAM vault permissions in Devolutions Server 2024.1.10.0 and earlier allows an authenticated user with access to the PAM to access unauthorized PAM entries via a specific set of permissions.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://devolutions.net/security/advisories/DEVO-2024-0005; https://devolutions.net/security/advisories/DEVO-2024-0005
CVE: CVE-2024-2929
Published: 2024-03-26
Description: 
A memory corruption vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory triggering an access violation.  Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor.


CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://www.rockwellautomation.com/en-us/support/advisory.SD-1665.html; https://www.rockwellautomation.com/en-us/support/advisory.SD-1665.html
CVE: CVE-2024-29735
Published: 2024-03-26
Description: Improper Preservation of Permissions vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.8.2 through 2.8.3.

Airflow's local file task handler in Airflow incorrectly set permissions for all parent folders of log folder, in default configuration adding write access to Unix group of the folders. In the case Airflow is run with the root user (not recommended) it added group write permission to all folders up to the root of the filesystem.

If your log files are stored in the home directory, these permission changes might impact your ability to run SSH operations after your home directory becomes group-writeable.

This issue does not affect users who use or extend Airflow using Official Airflow Docker reference images ( https://hub.docker.com/r/apache/airflow/ ) - those images require to have group write permission set anyway.

You are affected only if you install Airflow using local installation / virtualenv or other Docker images, but the issue has no impact if docker containers are used as intended, i.e. where Airflow components do not share containers with other applications and users.

Also you should not be affected if your umask is 002 (group write enabled) - this is the default on many linux systems.

Recommendation for users using Airflow outside of the containers:

  *  if you are using root to run Airflow, change your Airflow user to use non-root
  *  upgrade Apache Airflow to 2.8.4 or above
  *  If you prefer not to upgrade, you can change the  https://airflow.apache.org/docs/apache-airflow/stable/configurations-ref.html#file-task-handler-new-folder-permissions  to 0o755 (original value 0o775).
  *  if you already ran Airflow tasks before and your default umask is 022 (group write disabled) you should stop Airflow components, check permissions of AIRFLOW_HOME/logs in all your components and all parent directories of this directory and remove group write access for all the parent directories
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-281, CWE-281
References: http://www.openwall.com/lists/oss-security/2024/03/26/2; https://github.com/apache/airflow/pull/37310; https://lists.apache.org/thread/8khb1rtbznh100o325fb8xw5wjvtv536
CVE: CVE-2024-2893
Published: 2024-03-26
Description: A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical. Affected by this issue is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257936. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC7/v1/formSetDeviceName_devName.md; https://vuldb.com/?ctiid.257936; https://vuldb.com/?id.257936
CVE: CVE-2024-2894
Published: 2024-03-26
Description: A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. This affects the function formSetQosBand of the file /goform/SetNetControlList. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257937 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC7/v1/formSetQosBand.md; https://vuldb.com/?ctiid.257937; https://vuldb.com/?id.257937
CVE: CVE-2023-44989
Published: 2024-03-26
Description: Insertion of Sensitive Information into Log File vulnerability in GSheetConnector CF7 Google Sheets Connector.This issue affects CF7 Google Sheets Connector: from n/a through 5.0.5.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: https://patchstack.com/database/vulnerability/cf7-google-sheets-connector/wordpress-cf7-google-sheets-connector-plugin-5-0-5-sensitive-data-exposure-via-debug-log-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/cf7-google-sheets-connector/wordpress-cf7-google-sheets-connector-plugin-5-0-5-sensitive-data-exposure-via-debug-log-vulnerability?_s_id=cve