deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-47529
Published: 2023-11-23
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeIsle Cloud Templates & Patterns collection.This issue affects Cloud Templates & Patterns collection: from n/a through 1.2.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://patchstack.com/database/vulnerability/templates-patterns-collection/wordpress-cloud-templates-patterns-collection-plugin-1-2-2-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/templates-patterns-collection/wordpress-cloud-templates-patterns-collection-plugin-1-2-2-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve
CVE: CVE-2023-49213
Published: 2023-11-23
Description: The API endpoints in Ironman PowerShell Universal 3.0.0 through 4.2.0 allow remote attackers to execute arbitrary commands via crafted HTTP requests if a param block is used, due to invalid sanitization of input strings. The fixed versions are 3.10.2, 4.1.10, and 4.2.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://blog.ironmansoftware.com/powershell-universal-apis-cve/; https://docs.powershelluniversal.com/changelogs/changelog; https://blog.ironmansoftware.com/powershell-universal-apis-cve/
CVE: CVE-2023-49214
Published: 2023-11-23
Description: Usedesk before 1.7.57 allows chat template injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://usedesk.ru/updates_september23; https://usedesk.ru/updates_september23
CVE: CVE-2023-49215
Published: 2023-11-23
Description: Usedesk before 1.7.57 allows filter reflected XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://usedesk.ru/updates_september23; https://usedesk.ru/updates_september23
CVE: CVE-2023-49216
Published: 2023-11-23
Description: Usedesk before 1.7.57 allows profile stored XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://usedesk.ru/updates_september23; https://usedesk.ru/updates_september23
CVE: CVE-2021-39008
Published: 2023-11-23
Description: 
IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a privileged user to obtain sensitive information due to missing best practices. IBM X-Force ID: 213551.


CVSS Score: 2.7 (LOW)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/213551; https://www.ibm.com/support/pages/node/7081403; https://exchange.xforce.ibmcloud.com/vulnerabilities/213551
CVE: CVE-2023-26279
Published: 2023-11-24
Description: 
IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a local user to perform unauthorized actions due to improper encoding.  IBM X-Force ID:  248160.


CVSS Score: 3.3 (LOW)
CWE: CWE-116, CWE-116
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/213551; https://www.ibm.com/support/pages/node/7081403; https://exchange.xforce.ibmcloud.com/vulnerabilities/213551
CVE: CVE-2023-33706
Published: 2023-11-24
Description: SysAid before 23.2.15 allows Indirect Object Reference (IDOR) attacks to read ticket data via a modified sid parameter to EmailHtmlSourceIframe.jsp or a modified srID parameter to ShowMessage.jsp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://blog.pridesec.com.br/en/insecure-direct-object-reference-idor-affects-helpdesk-sysaid/; https://blog.pridesec.com.br/en/insecure-direct-object-reference-idor-affects-helpdesk-sysaid/
CVE: CVE-2023-44303
Published: 2023-11-24
Description: 
RVTools, Version 3.9.2 and above, contain a sensitive data exposure vulnerability in the password encryption utility (RVToolsPasswordEncryption.exe) and main application (RVTools.exe). A remote unauthenticated attacker with access to stored encrypted passwords from a users' system could potentially exploit this vulnerability, leading to the disclosure of encrypted passwords in clear text. This vulnerability is caused by an incomplete fix for CVE-2020-27688. 


CVSS Score: 7.5 (HIGH)
CWE: CWE-310, CWE-522
References: https://www.dell.com/support/kbdoc/en-us/000219712/dsa-2023-426-security-update-for-rvtools-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000219712/dsa-2023-426-security-update-for-rvtools-vulnerabilities
CVE: CVE-2023-48796
Published: 2023-11-24
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler.

The information exposed to unauthorized actors may include sensitive data such as database credentials.

Users who can't upgrade to the fixed version can also set environment variable `MANAGEMENT_ENDPOINTS_WEB_EXPOSURE_INCLUDE=health,metrics,prometheus` to workaround this, or add the following section in the `application.yaml` file

```
management:
  endpoints:
    web:
      exposure:
        include: health,metrics,prometheus
```

This issue affects Apache DolphinScheduler: from 3.0.0 before 3.0.2.

Users are recommended to upgrade to version 3.0.2, which fixes the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2023/11/24/1; https://lists.apache.org/thread/ffrmkcwgr2lcz0f5nnnyswhpn3fytsvo; http://www.openwall.com/lists/oss-security/2023/11/24/1
CVE: CVE-2023-6251
Published: 2023-11-24
Description: Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2.1.0p37, <= 2.0.0p39 allow an authenticated attacker to delete user-messages for individual users.
CVSS Score: 3.5 (LOW)
CWE: CWE-352, CWE-352
References: https://checkmk.com/werk/16224; https://checkmk.com/werk/16224
CVE: CVE-2023-38914
Published: 2023-11-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2023-46575
Published: 2023-11-24
Description: A SQL injection vulnerability exists in Meshery prior to version v0.6.179, enabling a remote attacker to retrieve sensitive information and execute arbitrary code through the “order” parameter
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/meshery/meshery/commit/ffe00967acfe4444a5db08ff3a4cafb9adf6013f; https://github.com/meshery/meshery/compare/v0.6.178...v0.6.179; https://github.com/meshery/meshery/pull/9372
CVE: CVE-2023-6274
Published: 2023-11-24
Description: A vulnerability was found in Byzoro Smart S80 up to 20231108. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/updatelib.php of the component PHP File Handler. The manipulation of the argument file_upload leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-246103. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/Carol7S/cve/blob/main/rce.md; https://vuldb.com/?ctiid.246103; https://vuldb.com/?id.246103
CVE: CVE-2023-6275
Published: 2023-11-24
Description: A vulnerability was found in TOTVS Fluig Platform 1.6.x/1.7.x/1.8.0/1.8.1. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /mobileredir/openApp.jsp of the component mobileredir. The manipulation of the argument redirectUrl/user with the input "><script>alert(document.domain)</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.7.1-231128, 1.8.0-231127 and 1.8.1-231127 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-246104.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://tdn.totvs.com/pages/releaseview.action?pageId=761497686; https://vuldb.com/?ctiid.246104; https://vuldb.com/?id.246104
CVE: CVE-2023-6276
Published: 2023-11-24
Description: A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file general/wiki/cp/ct/delete.php. The manipulation of the argument PROJ_ID_STR leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-246105 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/YXuanZ1216/cve/blob/main/sql.md; https://vuldb.com/?ctiid.246105; https://vuldb.com/?id.246105
CVE: CVE-2023-48711
Published: 2023-11-24
Description: google-translate-api-browser is an npm package which interfaces with the google translate web api. A Server-Side Request Forgery (SSRF) Vulnerability is present in applications utilizing the `google-translate-api-browser` package and exposing the `translateOptions` to the end user. An attacker can set a malicious `tld`, causing the application to return unsafe URLs pointing towards local resources. The `translateOptions.tld` field is not properly sanitized before being placed in the Google translate URL. This can allow an attacker with control over the `translateOptions` to set the `tld` to a payload such as `@127.0.0.1`. This causes the full URL to become `https://translate.google.@127.0.0.1/...`, where `translate.google.` is the username used to connect to localhost. An attacker can send requests within internal networks and the local host. Should any HTTPS application be present on the internal network with a vulnerability exploitable via a GET call, then it would be possible to exploit this using this vulnerability. This issue has been addressed in release version 4.1.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 3.7 (LOW)
CWE: CWE-918
References: https://github.com/cjvnjde/google-translate-api-browser/commit/33c2eac4a21c6504409e7b06dd16e6346f93d34b; https://github.com/cjvnjde/google-translate-api-browser/security/advisories/GHSA-4233-7q5q-m7p6; https://github.com/cjvnjde/google-translate-api-browser/commit/33c2eac4a21c6504409e7b06dd16e6346f93d34b
CVE: CVE-2023-48712
Published: 2023-11-24
Description: Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. In affected versions there is a privilege escalation vulnerability through a non-admin user's account. Limited users can impersonate another user's account if only single-factor authentication is configured. If a user knows an admin username, opens the login screen and attempts to authenticate with an incorrect password they can subsequently enter a valid non-admin username and password they will be logged in as the admin user. All installations prior to version 0.9.0 are affected. All users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-863
References: https://github.com/warp-tech/warpgate/commit/e3b26b2699257b9482dce2e9157bd9b5e05d9c76; https://github.com/warp-tech/warpgate/security/advisories/GHSA-c94j-vqr5-3mxr; https://github.com/warp-tech/warpgate/commit/e3b26b2699257b9482dce2e9157bd9b5e05d9c76
CVE: CVE-2023-48312
Published: 2023-11-24
Description: capsule-proxy is a reverse proxy for the capsule operator project. Affected versions are subject to a privilege escalation vulnerability which is based on a missing check if the user is authenticated based on the `TokenReview` result. All the clusters running with the `anonymous-auth` Kubernetes API Server setting disable (set to `false`) are affected since it would be possible to bypass the token review mechanism, interacting with the upper Kubernetes API Server. This privilege escalation cannot be exploited if you're relying only on client certificates (SSL/TLS). This vulnerability has been addressed in version 0.4.6. Users are advised to upgrade.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/projectcapsule/capsule-proxy/commit/472404f7006a4152e4eec76dee07324dd1e6e823; https://github.com/projectcapsule/capsule-proxy/security/advisories/GHSA-fpvw-6m5v-hqfp; https://github.com/projectcapsule/capsule-proxy/commit/472404f7006a4152e4eec76dee07324dd1e6e823
CVE: CVE-2023-48707
Published: 2023-11-24
Description: CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. The `secretKey` value is an important key for HMAC SHA256 authentication and in affected versions was stored in the database in cleartext form. If a malicious person somehow had access to the data in the database, they could use the key and secretKey for HMAC SHA256 authentication to send requests impersonating that corresponding user. This issue has been addressed in version 1.0.0-beta.8. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-312
References: https://github.com/codeigniter4/shield/commit/f77c6ae20275ac1245330a2b9a523bf7e6f6202f; https://github.com/codeigniter4/shield/security/advisories/GHSA-v427-c49j-8w6x; https://github.com/codeigniter4/shield/commit/f77c6ae20275ac1245330a2b9a523bf7e6f6202f
CVE: CVE-2023-48708
Published: 2023-11-24
Description: CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. In affected versions successful login attempts are recorded with the raw tokens stored in the log table. If a malicious person somehow views the data in the log table they can obtain a raw token which can then be used to send a request with that user's authority. This issue has been addressed in version 1.0.0-beta.8. Users are advised to upgrade. Users unable to upgrade should disable logging for successful login attempts by the configuration files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-532
References: https://codeigniter4.github.io/shield/getting_started/authenticators/; https://github.com/codeigniter4/shield/commit/7e84c3fb3411294f70890819bfe51781bb9dc8e4; https://github.com/codeigniter4/shield/security/advisories/GHSA-j72f-h752-mx4w
CVE: CVE-2023-49298
Published: 2023-11-24
Description: OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but can be security related in realistic situations. A possible example is cp, from a recent GNU Core Utilities (coreutils) version, when attempting to preserve a rule set for denying unauthorized access. (One might use cp when configuring access control, such as with the /etc/hosts.deny file specified in the IBM Support reference.) NOTE: this issue occurs less often in version 2.2.1, and in versions before 2.1.4, because of the default configuration in those versions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639, CWE-639
References: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=275308; https://bugs.gentoo.org/917224; https://github.com/openzfs/zfs/issues/15526
CVE: CVE-2023-6277
Published: 2023-11-24
Description: An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://access.redhat.com/security/cve/CVE-2023-6277; https://bugzilla.redhat.com/show_bug.cgi?id=2251311; https://gitlab.com/libtiff/libtiff/-/issues/614
CVE: CVE-2023-6293
Published: 2023-11-24
Description: Prototype Pollution in GitHub repository robinbuschmann/sequelize-typescript prior to 2.1.6.
CVSS Score: 7.1 (HIGH)
CWE: CWE-1321
References: https://github.com/robinbuschmann/sequelize-typescript/commit/5ce8afdd1671b08c774ce106b000605ba8fccf78; https://huntr.com/bounties/36a7ecbf-4d3d-462e-86a3-cda7b1ec64e2; https://github.com/robinbuschmann/sequelize-typescript/commit/5ce8afdd1671b08c774ce106b000605ba8fccf78
CVE: CVE-2023-49312
Published: 2023-11-26
Description: Precision Bridge PrecisionBridge.exe (aka the thick client) before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-295
References: https://precisionbridge.net/738vulnerability; https://processhacker.sourceforge.io/archive/website_v2/features.php; https://precisionbridge.net/738vulnerability
CVE: CVE-2023-6296
Published: 2023-11-26
Description: A vulnerability was found in osCommerce 4. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /catalog/compare of the component Instant Message Handler. The manipulation of the argument compare with the input 40dz4iq"><script>alert(1)</script>zohkx leads to cross site scripting. The attack may be launched remotely. VDB-246122 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/175925/osCommerce-4-Cross-Site-Scripting.html; https://vuldb.com/?ctiid.246122; https://vuldb.com/?id.246122
CVE: CVE-2023-6297
Published: 2023-11-26
Description: A vulnerability classified as problematic has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown part of the file patient-search-report.php of the component Search Report Page. The manipulation of the argument Search By Patient Name with the input <script>alert(document.cookie)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-246123.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://github.com/dhabaleshwar/niv_testing_rxss/blob/main/exploit.md; https://vuldb.com/?ctiid.246123; https://vuldb.com/?id.246123
CVE: CVE-2023-6298
Published: 2023-11-26
Description: A vulnerability classified as problematic was found in Apryse iText 8.0.2. This vulnerability affects the function main of the file PdfDocument.java. The manipulation leads to improper validation of array index. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The identifier of this vulnerability is VDB-246124. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. A statement published afterwards explains that the exception is not a vulnerability and the identified CWEs might not apply to the software.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-129
References: https://drive.google.com/drive/folders/1OBAeGH_rNfa1os6g6QlIt4pL-2NKHZm_?usp=sharing; https://kb.itextpdf.com/itext/statement-regarding-cve-2022-24198-and-2023-6298; https://vuldb.com/?ctiid.246124
CVE: CVE-2023-6299
Published: 2023-11-26
Description: A vulnerability, which was classified as problematic, has been found in Apryse iText 8.0.1. This issue affects some unknown processing of the file PdfDocument.java of the component Reference Table Handler. The manipulation leads to memory leak. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 8.0.2 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-246125 was assigned to this vulnerability. NOTE: The vendor was contacted early about this vulnerability. The fix was introduced in the iText 8.0.2 release on October 25th 2023, prior to the disclosure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-401
References: https://drive.google.com/file/d/1_jeD7SvuliKc_02pPTPbfSnqAErzmFny/view?usp=sharing; https://kb.itextpdf.com/home/it7kb/releases/release-itext-core-8-0-2#ReleaseiTextCore8.0.2-Bugfixesandmiscellaneous; https://vuldb.com/?ctiid.246125
CVE: CVE-2023-49321
Published: 2023-11-27
Description: Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, WithSecure Linux Security 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant 1.0.35-1.
CVSS Score: 5.3 (MEDIUM)
References: https://www.withsecure.com/en/support/security-advisories/cve-2023-49321; https://www.withsecure.com/en/support/security-advisories/cve-2023-49321
CVE: CVE-2023-49322
Published: 2023-11-27
Description: Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, WithSecure Linux Security 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant 1.0.35-1.
CVSS Score: 7.5 (HIGH)
References: https://www.withsecure.com/en/support/security-advisories/cve-2023-49322; https://www.withsecure.com/en/support/security-advisories/cve-2023-49322
CVE: CVE-2023-6300
Published: 2023-11-27
Description: A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function. The manipulation of the argument page with the input </TiTlE><ScRiPt>alert(1)</ScRiPt> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-246126 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/BigTiger2020/2023/blob/main/best-courier-management-system/best-courier-management-system%20-%20reflected%20xss.md; https://vuldb.com/?ctiid.246126; https://vuldb.com/?id.246126
CVE: CVE-2023-6301
Published: 2023-11-27
Description: A vulnerability has been found in SourceCodester Best Courier Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file parcel_list.php of the component GET Parameter Handler. The manipulation of the argument id with the input </TiTlE><ScRiPt>alert(1)</ScRiPt> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-246127.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/BigTiger2020/2023/blob/main/best-courier-management-system/best-courier-management-system-reflected%20xss2.md; https://vuldb.com/?ctiid.246127; https://vuldb.com/?id.246127
CVE: CVE-2023-6302
Published: 2023-11-27
Description: A vulnerability was found in CSZCMS 1.3.0 and classified as critical. Affected by this issue is some unknown functionality of the file \views\templates of the component File Manager Page. The manipulation leads to permission issues. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-246128. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-275, CWE-276
References: https://github.com/t34t/CVE/blob/main/CSZCMS/Code-Execution-Vulnerability-in-cszcmsV1.3.0.md; https://vuldb.com/?ctiid.246128; https://vuldb.com/?id.246128