deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-45290
Published: 2024-10-07
Description: PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file which links media from external URLs. When opening the XLSX file, PhpSpreadsheet retrieves the image size and type by reading the file contents, if the provided path is a URL. By using specially crafted `php://filter` URLs an attacker can leak the contents of any file or URL. Note that this vulnerability is different from GHSA-w9xv-qf98-ccq4, and resides in a different component. An attacker can access any file on the server, or leak information form arbitrary URLs, potentially exposing sensitive information such as AWS IAM credentials. This issue has been addressed in release versions 1.29.2, 2.1.1, and 2.3.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.7 (HIGH)
CWE: CWE-36, CWE-918
References: https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-5gpr-w2p5-6m37; https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-w9xv-qf98-ccq4
CVE: CVE-2024-45291
Published: 2024-10-07
Description: PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file that links images from arbitrary paths. When embedding images has been enabled in HTML writer with `$writer->setEmbedImages(true);` those files will be included in the output as `data:` URLs, regardless of the file's type. Also URLs can be used for embedding, resulting in a Server-Side Request Forgery vulnerability. When embedding images has been enabled, an attacker can read arbitrary files on the server and perform arbitrary HTTP GET requests. Note that any PHP protocol wrappers can be used, meaning that if for example the `expect://` wrapper is enabled, also remote code execution is possible. This issue has been addressed in release versions 1.29.2, 2.1.1, and 2.3.0. All users are advised to upgrade. there are no known workarounds for this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-36, CWE-918, CWE-22, CWE-918
References: https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-w9xv-qf98-ccq4
CVE: CVE-2024-45297
Published: 2024-10-07
Description: Discourse is an open source platform for community discussion. Users can see topics with a hidden tag if they know the label/name of that tag. This issue has been patched in the latest stable, beta and tests-passed version of Discourse. All users area are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-269
References: https://github.com/discourse/discourse/security/advisories/GHSA-58xw-3qr3-53gp
CVE: CVE-2024-45919
Published: 2024-10-07
Description: A security flaw has been discovered in Solvait version 24.4.2 that allows an attacker to elevate their privileges. By manipulating the Request ID and Action Type parameters in /AssignToMe/SetAction, an attacker can bypass approval workflows leading to unauthorized access to sensitive information or approval of fraudulent requests.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://gist.github.com/ipxsec/28afaf965389283a68433c7afd54d17a
CVE: CVE-2024-47610
Published: 2024-10-07
Description: InvenTree is an Open Source Inventory Management System. In affected versions of InvenTree it is possible for a registered user to store javascript in markdown notes fields, which are then displayed to other logged in users who visit the same page and executed. The vulnerability has been addressed as follows: 1. HTML sanitization has been enabled in the front-end markdown rendering library - `easymde`. 2. Stored markdown is also validated on the backend, to ensure that malicious markdown is not stored in the database. These changes are available in release versions 0.16.5 and later. All users are advised to upgrade. There are no workarounds, an update is required to get the new validation functions.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: https://github.com/inventree/InvenTree/commit/6e37f0cd8ba5fc527412f18f66cd6a37015fa690; https://github.com/inventree/InvenTree/security/advisories/GHSA-wp3m-jhgv-rhqr
CVE: CVE-2024-47772
Published: 2024-10-07
Description: Discourse is an open source platform for community discussion. An attacker can execute arbitrary JavaScript on users' browsers by sending a maliciously crafted chat message and replying to it. This issue only affects sites with CSP disabled. This problem is patched in the latest version of Discourse. All users are advised to upgrade. Users unable to upgrade should ensure CSP is enabled on the forum. Users who do upgrade should also consider enabling a CSP as well as a proactive measure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP; https://github.com/discourse/discourse/security/advisories/GHSA-67mh-xhmf-c56h
CVE: CVE-2024-47967
Published: 2024-10-07
Description: Improper resource initialization handling in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-770
References: https://www.solidigm.com/support-page/support-security.html
CVE: CVE-2024-47973
Published: 2024-10-07
Description: In some Solidigm DC Products, a defect in device overprovisioning may provide information disclosure to an attacker.
CVSS Score: 5.1 (MEDIUM)
References: https://www.solidigm.com/support-page/support-security.htmlhttps://
CVE: CVE-2024-47974
Published: 2024-10-07
Description: Race condition during resource shutdown in some Solidigm DC Products may allow an attacker to potentially enable denial of service.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-362
References: https://www.solidigm.com/support-page/support-security.html
CVE: CVE-2024-45873
Published: 2024-10-07
Description: A DLL hijacking vulnerability in VegaBird Yaazhini 2.0.2 allows attackers to execute arbitrary code / maintain persistence via placing a crafted DLL file in the same directory as Yaazhini.exe.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://vegabird.com; https://sploitus.com/exploit?id=PACKETSTORM:181912
CVE: CVE-2024-45874
Published: 2024-10-07
Description: A DLL hijacking vulnerability in VegaBird Vooki 5.2.9 allows attackers to execute arbitrary code / maintain persistence via placing a crafted DLL file in the same directory as Vooki.exe.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://vegabird.com; https://sploitus.com/exploit?id=PACKETSTORM:181913
CVE: CVE-2024-47781
Published: 2024-10-07
Description: CreateWiki is an extension used at Miraheze for requesting & creating wikis. The name of requested wikis is not escaped on Special:RequestWikiQueue, so a user can insert arbitrary HTML that is displayed in the request wiki queue when requesting a wiki. If a wiki creator comes across the XSS payload, their user session can be abused to retrieve deleted wiki requests, which typically contains private information. Likewise, this can also be abused on those with the ability to suppress requests to view sensitive information. This issue has been patched with commit `693a220` and all users are advised to apply the patch. Users unable to upgrade should disable Javascript and/or prevent access to the vulnerable page (Special:RequestWikiQueue).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/miraheze/CreateWiki/commit/693a220f399ee7eb4d00e77c3c667e864b1bd306; https://github.com/miraheze/CreateWiki/security/advisories/GHSA-h527-jh77-5g7j; https://issue-tracker.miraheze.org/T12693
CVE: CVE-2024-47782
Published: 2024-10-07
Description: WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis. Special:WikiDiscover is a special page that lists all wikis on the wiki farm. However, the special page does not make any effort to escape the wiki name or description. Therefore, if a wiki sets its name and/or description to an XSS payload, the XSS will execute whenever the wiki is shown on Special:WikiDiscover. This issue has been patched with commit `2ce846dd93` and all users are advised to apply that patch. User unable to upgrade should block access to `Special:WikiDiscover`.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79, CWE-80
References: https://github.com/miraheze/WikiDiscover/commit/2ce846dd93ddb9ec86f7472c4d57fe71a09dc827; https://github.com/miraheze/WikiDiscover/security/advisories/GHSA-wf48-rqx3-39mf; https://issue-tracker.miraheze.org/T12697
CVE: CVE-2024-47814
Published: 2024-10-07
Description: Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (visible in a window) a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the same buffer in a new split window. Impact is low since the user must have intentionally set up such a strange auto command and run some buffer unload commands. However this may lead to a crash. This issue has been addressed in version 9.1.0764 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 3.9 (LOW)
CWE: CWE-416
References: https://github.com/vim/vim/commit/51b62387be93c65fa56bbabe1c3; https://github.com/vim/vim/security/advisories/GHSA-rj48-v4mq-j4vg; https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html
CVE: CVE-2024-47817
Published: 2024-10-07
Description: Lara-zeus Dynamic Dashboard simple way to manage widgets for your website landing page, and filament dashboard and Lara-zeus artemis is a collection of themes for the lara-zeus ecosystem. If values passed to a paragraph widget are not valid and contain a specific set of characters, applications are vulnerable to XSS attack against a user who opens a page on which a paragraph widget is rendered. Users are advised to upgrade to the appropriate fix versions detailed in the advisory metadata. There are no known workarounds for this vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/lara-zeus/artemis/commit/3a3f9dd8a706af569c5581b20dcfeff91a43b9d9; https://github.com/lara-zeus/dynamic-dashboard/commit/adfb4b1cdfdaa01299631f0e569ce201a7cc545a; https://github.com/lara-zeus/dynamic-dashboard/security/advisories/GHSA-c6cw-g7fc-4gwc
CVE: CVE-2024-47818
Published: 2024-10-07
Description: Saltcorn is an extensible, open source, no-code database application builder. A logged-in user with any role can delete arbitrary files on the filesystem by calling the `sync/clean_sync_dir` endpoint. The `dir_name` POST parameter is not validated/sanitized and is used to construct the `syncDir` that is deleted by calling `fs.rm`. This issue has been addressed in release version 1.0.0-beta16 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/saltcorn/saltcorn/blob/v1.0.0-beta.15/packages/server/routes/sync.js#L337-L346; https://github.com/saltcorn/saltcorn/commit/3c551261d0e[PII_REDACTED]98009951fa83a07cc3a; https://github.com/saltcorn/saltcorn/security/advisories/GHSA-43f3-h63w-p6f6
CVE: CVE-2024-47968
Published: 2024-10-07
Description: Improper resource shutdown in middle of certain operations on some Solidigm DC Products may allow an attacker to potentially enable denial of service.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-362
References: https://https://www.solidigm.com/support-page/support-security.html
CVE: CVE-2024-47969
Published: 2024-10-07
Description: Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-770
References: https://www.solidigm.com/support-page/support-security.htmlhttps://
CVE: CVE-2024-37179
Published: 2024-10-08
Description: SAP BusinessObjects Business Intelligence Platform allows an authenticated user to send a specially crafted request to the Web Intelligence Reporting Server to download any file from the machine hosting the service, causing high impact on confidentiality of the application.
CVSS Score: 7.7 (HIGH)
CWE: CWE-434
References: https://me.sap.com/notes/3478615; https://url.sap/sapsecuritypatchday
CVE: CVE-2024-39806
Published: 2024-10-08
Description: in OpenHarmony v4.1.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-10.md
CVE: CVE-2024-39831
Published: 2024-10-08
Description: in OpenHarmony v4.1.0 allow a local attacker with high privileges arbitrary code execution in pre-installed apps through use after free.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-10.md
CVE: CVE-2024-43696
Published: 2024-10-08
Description: in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS by memory leak.
CVSS Score: 3.3 (LOW)
CWE: CWE-401, CWE-401
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-10.md
CVE: CVE-2024-43697
Published: 2024-10-08
Description: in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through improper input.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-10.md
CVE: CVE-2024-45277
Published: 2024-10-08
Description: The SAP HANA Node.js client package versions from 2.0.0 before 2.21.31 is impacted by Prototype Pollution vulnerability allowing an attacker to add arbitrary properties to global object prototypes. This is due to improper user input sanitation when using the nestTables feature causing low impact on the availability of the application. This has no impact on Confidentiality and Integrity.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1321
References: https://me.sap.com/notes/3520100; https://url.sap/sapsecuritypatchday; https://www.npmjs.com/package/@sap/hana-client?activeTab=code
CVE: CVE-2024-45278
Published: 2024-10-08
Description: SAP Commerce Backoffice does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://me.sap.com/notes/3507545; https://url.sap/sapsecuritypatchday
CVE: CVE-2024-45282
Published: 2024-10-08
Description: Fields which are in 'read only' state in Bank Statement Draft in Manage Bank Statements application, could be modified by MERGE method. The property of an OData entity representing assumably immutable method is not protected against external modifications leading to integrity violations. Confidentiality and Availability are not impacted.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-650
References: https://me.sap.com/notes/3251893; https://url.sap/sapsecuritypatchday
CVE: CVE-2024-45382
Published: 2024-10-08
Description: in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through out-of-bounds write.
CVSS Score: 3.3 (LOW)
CWE: CWE-787, CWE-787
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-10.md
CVE: CVE-2024-47594
Published: 2024-10-08
Description: SAP NetWeaver Enterprise Portal (KMC) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability in KMC servlet. An attacker could craft a script and trick the user into clicking it. When a victim who is registered on the portal clicks on such link, confidentiality and integrity of their web browser session could be compromised.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://me.sap.com/notes/3503462; https://url.sap/sapsecuritypatchday
CVE: CVE-2024-8925
Published: 2024-10-08
Description: In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, erroneous parsing of multipart form data contained in an HTTP POST request could lead to legitimate data not being processed. This could lead to malicious attacker able to control part of the submitted data being able to exclude portion of other data, potentially leading to erroneous application behavior.
CVSS Score: 3.1 (LOW)
CWE: CWE-444, CWE-444
References: https://github.com/php/php-src/security/advisories/GHSA-9pqp-7h25-4f32; https://lists.debian.org/debian-lts-announce/2024/10/msg00011.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-8926
Published: 2024-10-08
Description: In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using a certain non-standard configurations of Windows codepages, the fixes for  CVE-2024-4577 https://github.com/advisories/GHSA-vxpp-6299-mxw3  may still be bypassed and the same command injection related to Windows "Best Fit" codepage behavior can be achieved. This may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78, CWE-78
References: https://github.com/php/php-src/security/advisories/GHSA-p99j-rfp4-xqvq; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-8927
Published: 2024-10-08
Description: In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, HTTP_REDIRECT_STATUS variable is used to check whether or not CGI binary is being run by the HTTP server. However, in certain scenarios, the content of this variable can be controlled by the request submitter via HTTP headers, which can lead to cgi.force_redirect option not being correctly applied. In certain configurations this may lead to arbitrary file inclusion in PHP.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1220
References: https://github.com/php/php-src/security/advisories/GHSA-94p6-54jq-9mwp; https://lists.debian.org/debian-lts-announce/2024/10/msg00011.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-9026
Published: 2024-10-08
Description: In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using PHP-FPM SAPI and it is configured to catch workers output through catch_workers_output = yes, it may be possible to pollute the final log or remove up to 4 characters from the log messages by manipulating log message content. Additionally, if PHP-FPM is configured to use syslog output, it may be possible to further remove log data using the same vulnerability.
CVSS Score: 3.3 (LOW)
CWE: CWE-117, CWE-158
References: https://github.com/php/php-src/security/advisories/GHSA-865w-9rf3-2wh5; https://lists.debian.org/debian-lts-announce/2024/10/msg00011.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-21532
Published: 2024-10-08
Description: All versions of the package ggit are vulnerable to Command Injection via the fetchTags(branch) API, which allows user input to specify the branch to be fetched and then concatenates this string along with a git command which is then passed to the unsafe exec() Node.js child process API.
CVSS Score: 7.3 (HIGH)
CWE: CWE-78
References: https://gist.github.com/lirantal/d8f87b366d2078e6118ab7bf2b005f02; https://security.snyk.io/vuln/SNYK-JS-GGIT-5731320; https://github.com/bahmutov/ggit/blob/2e85b0316d9c272e067dca5679d39e302f4cb9cd/README.md?plain=1#L3
CVE: CVE-2024-21533
Published: 2024-10-08
Description: All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone() API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does not sanitize for user input or validate a given URL scheme, nor does it properly pass command-line flags to the git binary using the double-dash POSIX characters (--) to communicate the end of options.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-88, CWE-88
References: https://gist.github.com/lirantal/80c6d59ac1b682a32bc9d2ff92044bb9; https://security.snyk.io/vuln/SNYK-JS-GGIT-5731319; https://github.com/bahmutov/ggit/blob/2e85b0316d9c272e067dca5679d39e302f4cb9cd/README.md?plain=1#L3
CVE: CVE-2024-8983
Published: 2024-10-08
Description: Custom Twitter Feeds WordPress plugin before 2.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-77
References: https://wpscan.com/vulnerability/29194dde-8d11-4096-a5ae-1d69c2c5dc33/
CVE: CVE-2024-9021
Published: 2024-10-08
Description: In the process of testing the Relevanssi  WordPress plugin before 4.23.1, a vulnerability was found that allows you to implement Stored XSS on behalf of the Contributor+ by embedding malicious script, which entails account takeover backdoor
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/5f25646d-b80b-40b1-bcaf-3b860ddc4059/
CVE: CVE-2024-9292
Published: 2024-10-08
Description: The Bridge Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'formforall' shortcode in versions up to, and including, 3.2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://themeforest.net/item/bridge-creative-multipurpose-wordpress-theme/7315054; https://www.wordfence.com/threat-intel/vulnerabilities/id/1baa93da-9b55-45e7-b9a9-db331b5d0584?source=cve
CVE: CVE-2024-34662
Published: 2024-10-08
Description: Improper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select Android 14 allows local attackers to execute privileged behaviors.
CVSS Score: 6.2 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=10
CVE: CVE-2024-34663
Published: 2024-10-08
Description: Integer overflow in libSEF.quram.so prior to SMR Oct-2024 Release 1 allows local attackers to write out-of-bounds memory.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-190
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=10
CVE: CVE-2024-34664
Published: 2024-10-08
Description: Improper check for exception conditions in Knox Guard prior to SMR Oct-2024 Release 1 allows physical attackers to bypass Knox Guard in a multi-user environment.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-754
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=10
CVE: CVE-2024-34665
Published: 2024-10-08
Description: Out-of-bounds write in parsing h.264 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=10
CVE: CVE-2024-34666
Published: 2024-10-08
Description: Out-of-bounds write in parsing h.264 format in a specific mode in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=10
CVE: CVE-2024-34667
Published: 2024-10-08
Description: Out-of-bounds write in parsing h.265 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=10