deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-31449
Published: 2023-08-09
Description: A path traversal vulnerability was identified in the WMI Custom sensor in PRTG 23.2.84.1566 and earlier versions where an authenticated user with write permissions could trick the WMI Custom sensor into behaving differently for existing files and non-existing files. This made it possible to traverse paths, allowing the sensor to execute files outside the designated custom sensors folder. The severity of this vulnerability is medium and received a score of 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-22
References: https://kb.paessler.com/en/topic/91845-multiple-vulnerabilites-fixed-in-paessler-prtg-network-monitor-23-3-86-1520; https://www.paessler.com/prtg/history/stable; https://kb.paessler.com/en/topic/91845-multiple-vulnerabilites-fixed-in-paessler-prtg-network-monitor-23-3-86-1520
CVE: CVE-2023-31450
Published: 2023-08-09
Description: A path traversal vulnerability was identified in the SQL v2 sensors in PRTG 23.2.84.1566 and earlier versions where an authenticated user with write permissions could trick the SQL v2 sensors into behaving differently for existing files and non-existing files. This made it possible to traverse paths, allowing the sensor to execute files outside the designated custom sensors folder. The severity of this vulnerability is medium and received a score of 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-22
References: https://kb.paessler.com/en/topic/91845-multiple-vulnerabilites-fixed-in-paessler-prtg-network-monitor-23-3-86-1520; https://www.paessler.com/prtg/history/stable; https://kb.paessler.com/en/topic/91845-multiple-vulnerabilites-fixed-in-paessler-prtg-network-monitor-23-3-86-1520
CVE: CVE-2023-31452
Published: 2023-08-09
Description: A cross-site request forgery (CSRF) token bypass was identified in PRTG 23.2.84.1566 and earlier versions that allows remote attackers to perform actions with the permissions of a victim user, provided the victim user has an active session and is induced to trigger the malicious request. This could force PRTG to execute different actions, such as creating new users. The severity of this vulnerability is high and received a score of 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://kb.paessler.com/en/topic/91845-multiple-vulnerabilites-fixed-in-paessler-prtg-network-monitor-23-3-86-1520; https://www.paessler.com/prtg/history/prtg-23#23.3.86.1520; https://www.paessler.com/prtg/history/stable
CVE: CVE-2023-32781
Published: 2023-08-09
Description: A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this vulnerability is high and received a score of 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: http://packetstormsecurity.com/files/176677/PRTG-Authenticated-Remote-Code-Execution.html; https://kb.paessler.com/en/topic/91845-multiple-vulnerabilites-fixed-in-paessler-prtg-network-monitor-23-3-86-1520; https://www.paessler.com/prtg/history/stable
CVE: CVE-2023-32782
Published: 2023-08-09
Description: A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom C-ECHO sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this vulnerability is high and received a score of 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://kb.paessler.com/en/topic/91845-multiple-vulnerabilites-fixed-in-paessler-prtg-network-monitor-23-3-86-1520; https://www.paessler.com/prtg/history/stable; https://kb.paessler.com/en/topic/91845-multiple-vulnerabilites-fixed-in-paessler-prtg-network-monitor-23-3-86-1520
CVE: CVE-2023-33953
Published: 2023-08-09
Description: gRPC contains a vulnerability that allows hpack table accounting errors could lead to unwanted disconnects between clients and servers in exceptional cases/ Three vectors were found that allow the following DOS attacks:

- Unbounded memory buffering in the HPACK parser
- Unbounded CPU consumption in the HPACK parser

The unbounded CPU consumption is down to a copy that occurred per-input-block in the parser, and because that could be unbounded due to the memory copy bug we end up with an O(n^2) parsing loop, with n selected by the client.

The unbounded memory buffering bugs:

- The header size limit check was behind the string reading code, so we needed to first buffer up to a 4 gigabyte string before rejecting it as longer than 8 or 16kb.
- HPACK varints have an encoding quirk whereby an infinite number of 0’s can be added at the start of an integer. gRPC’s hpack parser needed to read all of them before concluding a parse.
- gRPC’s metadata overflow check was performed per frame, so that the following sequence of frames could cause infinite buffering: HEADERS: containing a: 1 CONTINUATION: containing a: 2 CONTINUATION: containing a: 3 etc…
CVSS Score: 7.5 (HIGH)
CWE: CWE-789, CWE-834, CWE-770, CWE-834
References: https://cloud.google.com/support/bulletins#gcp-2023-022; https://cloud.google.com/support/bulletins#gcp-2023-022
CVE: CVE-2023-34545
Published: 2023-08-09
Description: A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/komomon/24d3ea391af6f067c044fa47cb6c20d8; https://www.cszcms.com/; https://gist.github.com/komomon/24d3ea391af6f067c044fa47cb6c20d8
CVE: CVE-2023-3953
Published: 2023-08-09
Description: 
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory
Buffer vulnerability exists that could cause memory corruption when an authenticated user
opens a tampered log file from GP-Pro EX.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-119
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-220-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-220-01.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-220-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-220-01.pdf
CVE: CVE-2023-4273
Published: 2023-08-09
Description: A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is responsible for reading file name entries from a directory index and merging file name parts belonging to one file into a single long file name. Since the file name characters are copied into a stack variable, a local privileged attacker could use this flaw to overflow the kernel stack.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://access.redhat.com/errata/RHSA-2023:6583; https://access.redhat.com/security/cve/CVE-2023-4273; https://bugzilla.redhat.com/show_bug.cgi?id=2221609
CVE: CVE-2023-39969
Published: 2023-08-09
Description: uthenticode is a small cross-platform library for partially verifying Authenticode digital signatures. Version 1.0.9 of uthenticode hashed the entire file rather than hashing sections by virtual address, in violation of the Authenticode specification. As a result, an attacker could modify code within a binary without changing its Authenticode hash, making it appear valid from uthenticode's perspective. Versions of uthenticode prior to 1.0.9 are not vulnerable to this attack, nor are versions in the 2.x series. By design, uthenticode does not perform full-chain validation. However, the malleability of signature verification introduced in 1.0.9 was an unintended oversight. The 2.x series addresses the vulnerability. Versions prior to 1.0.9 are also not vulnerable, but users are encouraged to upgrade rather than downgrade. There are no workarounds to this vulnerability.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-347
References: https://github.com/trailofbits/uthenticode/commit/8670b7bb9154d79c276483dcb7c9e9fd5e66455b; https://github.com/trailofbits/uthenticode/pull/84; https://github.com/trailofbits/uthenticode/security/advisories/GHSA-rc7g-99x7-4p9g
CVE: CVE-2023-3518
Published: 2023-08-09
Description: HashiCorp Consul and Consul Enterprise 1.16.0 when using JWT Auth for service mesh incorrectly allows/denies access regardless of service identities. Fixed in 1.16.1.
CVSS Score: 7.4 (HIGH)
CWE: CWE-266
References: https://discuss.hashicorp.com/t/hcsec-2023-25-consul-jwt-auth-in-l7-intentions-allow-for-mismatched-service-identity-and-jwt-providers/57004; https://discuss.hashicorp.com/t/hcsec-2023-25-consul-jwt-auth-in-l7-intentions-allow-for-mismatched-service-identity-and-jwt-providers/57004
CVE: CVE-2023-40012
Published: 2023-08-09
Description: uthenticode is a small cross-platform library for partially verifying Authenticode digital signatures. Versions of uthenticode prior to the 2.x series did not check Extended Key Usages in certificates, in violation of the Authenticode X.509 certificate profile. As a result, a malicious user could produce a "signed" PE file that uthenticode would verify and consider valid using an X.509 certificate that isn't entitled to produce code signatures (e.g., a SSL certificate). By design, uthenticode does not perform full-chain validation. However, the absence of EKU validation was an unintended oversight. The 2.0.0 release series includes EKU checks. There are no workarounds to this vulnerability.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-325, CWE-347
References: https://github.com/trailofbits/uthenticode/commit/caeb1eb62412605f71bd96ce9bb9420644b6db53; https://github.com/trailofbits/uthenticode/pull/78; https://github.com/trailofbits/uthenticode/security/advisories/GHSA-gm2f-j4rj-6xqj
CVE: CVE-2023-39531
Published: 2023-08-09
Description: Sentry is an error tracking and performance monitoring platform. Starting in version 10.0.0 and prior to version 23.7.2, an attacker with sufficient client-side exploits could retrieve a valid access token for another user during the OAuth token exchange due to incorrect credential validation. The client ID must be known and the API application must have already been authorized on the targeted user account. Sentry SaaS customers do not need to take any action. Self-hosted installations should upgrade to version 23.7.2 or higher. There are no direct workarounds, but users should review applications authorized on their account and remove any that are no longer needed.


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://github.com/getsentry/sentry/security/advisories/GHSA-hgj4-h2x3-rfx4; https://github.com/getsentry/sentry/security/advisories/GHSA-hgj4-h2x3-rfx4
CVE: CVE-2022-48580
Published: 2023-08-09
Description: A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.securifera.com/advisories/cve-2022-48580/; https://www.securifera.com/advisories/cve-2022-48580/
CVE: CVE-2022-48581
Published: 2023-08-09
Description: A command injection vulnerability exists in the “dash export” feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.securifera.com/advisories/cve-2022-48581/; https://www.securifera.com/advisories/cve-2022-48581/
CVE: CVE-2022-48582
Published: 2023-08-09
Description: A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.securifera.com/advisories/cve-2022-48582/; https://www.securifera.com/advisories/cve-2022-48582/
CVE: CVE-2022-48583
Published: 2023-08-09
Description: A command injection vulnerability exists in the dashboard scheduler feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.securifera.com/advisories/cve-2022-48583/; https://www.securifera.com/advisories/cve-2022-48583/
CVE: CVE-2022-48584
Published: 2023-08-09
Description: A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.securifera.com/advisories/cve-2022-48584/; https://www.securifera.com/advisories/cve-2022-48584/
CVE: CVE-2022-48585
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the “admin brand portal” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48585/; https://www.securifera.com/advisories/cve-2022-48585/
CVE: CVE-2022-48586
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the “json walker” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48586/; https://www.securifera.com/advisories/cve-2022-48586/
CVE: CVE-2022-48587
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the “schedule editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48587/; https://www.securifera.com/advisories/cve-2022-48587/
CVE: CVE-2022-48588
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the “schedule editor decoupled” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48588/; https://www.securifera.com/advisories/cve-2022-48588/
CVE: CVE-2022-48589
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the “reporting job editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48589/; https://www.securifera.com/advisories/cve-2022-48589/
CVE: CVE-2022-48590
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48590/; https://www.securifera.com/advisories/cve-2022-48590/
CVE: CVE-2022-48591
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the vendor_state parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48591/; https://www.securifera.com/advisories/cve-2022-48591/
CVE: CVE-2022-48592
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the vendor_country parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48592/; https://www.securifera.com/advisories/cve-2022-48592/
CVE: CVE-2022-48593
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the “topology data service” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48593/; https://www.securifera.com/advisories/cve-2022-48593/
CVE: CVE-2022-48594
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the “ticket watchers email” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48594/; https://www.securifera.com/advisories/cve-2022-48594/
CVE: CVE-2022-48595
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the “ticket template watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48595/; https://www.securifera.com/advisories/cve-2022-48595/
CVE: CVE-2022-48596
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the “ticket queue watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48596/; https://www.securifera.com/advisories/cve-2022-48596/
CVE: CVE-2022-48597
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48597/; https://www.securifera.com/advisories/cve-2022-48597/
CVE: CVE-2022-48598
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the “reporter events type date” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48598/; https://www.securifera.com/advisories/cve-2022-48598/
CVE: CVE-2022-48599
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48599/; https://www.securifera.com/advisories/cve-2022-48599/
CVE: CVE-2022-48600
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48600/; https://www.securifera.com/advisories/cve-2022-48600/
CVE: CVE-2022-48601
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48601/; https://www.securifera.com/advisories/cve-2022-48601/
CVE: CVE-2022-48602
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48602/; https://www.securifera.com/advisories/cve-2022-48602/
CVE: CVE-2022-48603
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48603/; https://www.securifera.com/advisories/cve-2022-48603/
CVE: CVE-2022-48604
Published: 2023-08-09
Description: A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-89
References: https://www.securifera.com/advisories/cve-2022-48604/; https://www.securifera.com/advisories/cve-2022-48604/
CVE: CVE-2023-23346
Published: 2023-08-09
Description: HCL DRYiCE MyCloud is affected by the use of a broken cryptographic algorithm.  An attacker can potentially compromise the confidentiality and integrity of sensitive information.

CVSS Score: 6.4 (MEDIUM)
CWE: CWE-327, CWE-327
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106670; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106670
CVE: CVE-2023-38997
Published: 2023-08-09
Description: A directory traversal vulnerability in the Captive Portal templates of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to execute arbitrary system commands as root via a crafted ZIP archive.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://github.com/opnsense/core/commit/448762d440b51574f1906c0ec2f5ea6dc4f16eb2; https://logicaltrust.net/blog/2023/08/opnsense.html; https://github.com/opnsense/core/commit/448762d440b51574f1906c0ec2f5ea6dc4f16eb2