deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-7658
Published: 2024-08-12
Description: A vulnerability, which was classified as problematic, has been found in projectsend up to r1605. This issue affects the function get_preview of the file process.php. The manipulation leads to improper control of resource identifiers. The attack may be initiated remotely. Upgrading to version r1720 is able to address this issue. The patch is named eb5a04774927e5855b9d0e5870a2aae5a3dc5a08. It is recommended to upgrade the affected component.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-99, CWE-639
References: https://github.com/projectsend/projectsend/commit/eb5a04774927e5855b9d0e5870a2aae5a3dc5a08; https://github.com/projectsend/projectsend/releases/tag/r1720; https://vuldb.com/?ctiid.274115
CVE: CVE-2024-7659
Published: 2024-08-12
Description: A vulnerability, which was classified as problematic, was found in projectsend up to r1605. Affected is the function generate_random_string of the file includes/functions.php of the component Password Reset Token Handler. The manipulation leads to insufficiently random values. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. Upgrading to version r1720 is able to address this issue. The name of the patch is aa27eb97edc2ff2b203f97e6675d7b5ba0a22a17. It is recommended to upgrade the affected component.
CVSS Score: 3.7 (LOW)
CWE: CWE-330
References: https://github.com/projectsend/projectsend/commit/aa27eb97edc2ff2b203f97e6675d7b5ba0a22a17; https://github.com/projectsend/projectsend/releases/tag/r1720; https://vuldb.com/?ctiid.274116
CVE: CVE-2024-7660
Published: 2024-08-12
Description: A vulnerability has been found in SourceCodester File Manager App 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Add File Handler. The manipulation of the argument File Title/Uploaded By leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://docs.google.com/document/d/19jCrr48SwP9dkOAaf8HAgg0fxK7PjE4ZWbPSFU4zqKE/edit?usp=sharing; https://vuldb.com/?ctiid.274117; https://vuldb.com/?id.274117
CVE: CVE-2024-7661
Published: 2024-08-12
Description: A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been classified as problematic. This affects the function save_users of the file admin/user/index.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20CSRF-1.md; https://vuldb.com/?ctiid.274119; https://vuldb.com/?id.274119
CVE: CVE-2024-7662
Published: 2024-08-12
Description: A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been declared as problematic. This vulnerability affects the function save_package of the file admin/packages/manag_package.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20CSRF-2.md; https://vuldb.com/?ctiid.274120; https://vuldb.com/?id.274120
CVE: CVE-2024-7663
Published: 2024-08-12
Description: A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file manage_user.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20SQL%20Injection-1.md; https://vuldb.com/?ctiid.274121; https://vuldb.com/?id.274121
CVE: CVE-2024-7664
Published: 2024-08-12
Description: A vulnerability classified as critical has been found in SourceCodester Car Driving School Management System 1.0. Affected is an unknown function of the file view_details.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20SQL%20Injection-2.md; https://vuldb.com/?ctiid.274122; https://vuldb.com/?id.274122
CVE: CVE-2024-7665
Published: 2024-08-12
Description: A vulnerability classified as critical was found in SourceCodester Car Driving School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file manage_package.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20SQL%20Injection-3.md; https://vuldb.com/?ctiid.274123; https://vuldb.com/?id.274123
CVE: CVE-2024-7666
Published: 2024-08-12
Description: A vulnerability, which was classified as critical, has been found in SourceCodester Car Driving School Management System 1.0. Affected by this issue is some unknown functionality of the file view_package.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20SQL%20Injection-4.md; https://vuldb.com/?ctiid.274124; https://vuldb.com/?id.274124
CVE: CVE-2024-7667
Published: 2024-08-12
Description: A vulnerability, which was classified as critical, was found in SourceCodester Car Driving School Management System 1.0. This affects the function delete_users of the file User.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20SQL%20Injection-5.md; https://vuldb.com/?ctiid.274125; https://vuldb.com/?id.274125
CVE: CVE-2024-7668
Published: 2024-08-12
Description: A vulnerability has been found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This vulnerability affects the function delete_package of the file Master.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20SQL%20Injection-6.md; https://vuldb.com/?ctiid.274126; https://vuldb.com/?id.274126
CVE: CVE-2024-7669
Published: 2024-08-12
Description: A vulnerability was found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This issue affects the function delete_enrollment of the file Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20SQL%20Injection-7.md; https://vuldb.com/?ctiid.274127; https://vuldb.com/?id.274127
CVE: CVE-2024-7676
Published: 2024-08-12
Description: A vulnerability was found in Sourcecodester Car Driving School Management System 1.0. It has been classified as critical. Affected is the function save_package of the file /classes/Master.php?f=save_package. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20SQL%20Injection-8.md; https://vuldb.com/?ctiid.274128; https://vuldb.com/?id.274128
CVE: CVE-2024-7677
Published: 2024-08-12
Description: A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been declared as problematic. Affected by this vulnerability is the function update_settings_info of the file /classes/SystemSettings.php?f=update_settings. The manipulation of the argument contact/address leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20XSS-1.md; https://vuldb.com/?ctiid.274129; https://vuldb.com/?id.274129
CVE: CVE-2024-7678
Published: 2024-08-12
Description: A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=save_package. The manipulation of the argument name/description/training_duration leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20XSS-2.md; https://vuldb.com/?ctiid.274130; https://vuldb.com/?id.274130
CVE: CVE-2024-7680
Published: 2024-08-12
Description: A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file /incedit.php?id=4. The manipulation of the argument id/inccat/desc/date/amount leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/chenzg22/cve/issues/1; https://vuldb.com/?ctiid.274137; https://vuldb.com/?id.274137
CVE: CVE-2024-7681
Published: 2024-08-12
Description: A vulnerability was found in code-projects College Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument email/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/space-security/cve/issues/6; https://vuldb.com/?ctiid.274138; https://vuldb.com/?id.274138
CVE: CVE-2024-7682
Published: 2024-08-12
Description: A vulnerability was found in code-projects Job Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file rw_i_nat.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/space-security/cve/issues/7; https://vuldb.com/?ctiid.274139; https://vuldb.com/?id.274139
CVE: CVE-2024-7683
Published: 2024-08-12
Description: A vulnerability classified as problematic has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected is an unknown function of the file addcase_stage.php. The manipulation of the argument cname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/samwbs/kortexcve/blob/main/xss_addcase_stage/xss_addcase_stage.md; https://vuldb.com/?ctiid.274140; https://vuldb.com/?id.274140
CVE: CVE-2024-7684
Published: 2024-08-12
Description: A vulnerability classified as problematic was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this vulnerability is an unknown functionality of the file add_act.php. The manipulation of the argument aname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/samwbs/kortexcve/blob/main/xss_add_act/XSS_add_act.md; https://vuldb.com/?ctiid.274141; https://vuldb.com/?id.274141
CVE: CVE-2024-7685
Published: 2024-08-12
Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this issue is some unknown functionality of the file adds.php. The manipulation of the argument name/dob/email/mobile/address leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/samwbs/kortexcve/blob/main/xss_adds/XSS_adds.md; https://vuldb.com/?ctiid.274142; https://vuldb.com/?id.274142
CVE: CVE-2024-7686
Published: 2024-08-12
Description: A vulnerability, which was classified as problematic, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This affects an unknown part of the file register_case.php. The manipulation of the argument title/description/opposite_lawyer leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/samwbs/kortexcve/blob/main/xss_register_case/XSS_register_case.md; https://vuldb.com/?ctiid.274143; https://vuldb.com/?id.274143
CVE: CVE-2024-7693
Published: 2024-08-12
Description: Raiden MAILD Remote Management System from Team Johnlong Software has a Relative Path Traversal vulnerability, allowing unauthenticated remote attackers to read arbitrary file on the remote server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-23, CWE-22
References: https://www.twcert.org.tw/en/cp-139-7999-208bf-2.html; https://www.twcert.org.tw/tw/cp-132-7997-31bef-1.html
CVE: CVE-2024-7694
Published: 2024-08-12
Description: ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with  administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://www.twcert.org.tw/en/cp-139-8000-e5a5c-2.html; https://www.twcert.org.tw/tw/cp-132-7998-d76dd-1.html; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-7694
CVE: CVE-2024-7697
Published: 2024-08-12
Description: Logical vulnerability in the mobile application (com.transsion.carlcare) may lead to user information leakage risks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-359, CWE-200
References: https://security.tecno.com/SRC/blogdetail/294?lang=en_US; https://security.tecno.com/SRC/securityUpdates?type=SA
CVE: CVE-2024-6639
Published: 2024-08-12
Description: The MDx theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mdx_list_item' shortcode in all versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/yrccondor/mdx; https://github.com/yrccondor/mdx/commit/[PII_REDACTED]b8fab72715e7d5aec348aef0792721; https://www.wordfence.com/threat-intel/vulnerabilities/id/23ae17a6-a745-42c4-8627-ad1c41b66e0e?source=cve
CVE: CVE-2024-21550
Published: 2024-08-12
Description: SteVe is an open platform that implements different version of the OCPP protocol for Electric Vehicle charge points, acting as a central server for management of registered charge points. Attackers can inject arbitrary HTML and Javascript code via WebSockets leading to persistent Cross-Site Scripting in the SteVe management interface.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/steve-community/steve/blob/steve-3.6.0/src/main/java/de/rwth/idsg/steve/config/WebSocketConfiguration.java#L69; https://github.com/steve-community/steve/commit/a79983f843c37705182c8f54eba060c1dce3b6d1; https://github.com/steve-community/steve/issues/1526
CVE: CVE-2024-27442
Published: 2024-08-12
Description: An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The zmmailboxdmgr binary, a component of ZCS, is intended to be executed by the zimbra user with root privileges for specific mailbox operations. However, an attacker can escalate privileges from the zimbra user to root, because of improper handling of input arguments. An attacker can execute arbitrary commands with elevated privileges, leading to local privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-755, CWE-269
References: https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.7#Security_Fixes; https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P39#Security_Fixes
CVE: CVE-2024-27443
Published: 2024-08-12
Description: An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit this via an email message containing a crafted calendar header with an embedded XSS payload. When a victim views this message in the Zimbra webmail classic interface, the payload is executed in the context of the victim's session, potentially leading to execution of arbitrary JavaScript code.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.7#Security_Fixes; https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P39#Security_Fixes; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-27443
CVE: CVE-2024-33533
Published: 2024-08-12
Description: An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0, issue 1 of 2. A reflected cross-site scripting (XSS) vulnerability has been identified in the Zimbra webmail admin interface. This vulnerability occurs due to inadequate input validation of the packages parameter, allowing an authenticated attacker to inject and execute arbitrary JavaScript code within the context of another user's browser session. By uploading a malicious JavaScript file and crafting a URL containing its location in the packages parameter, the attacker can exploit this vulnerability. Subsequently, when another user visits the crafted URL, the malicious JavaScript code is executed.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.8#Security_Fixes; https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P40#Security_Fixes
CVE: CVE-2024-33535
Published: 2024-08-12
Description: An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The vulnerability involves unauthenticated local file inclusion (LFI) in a web application, specifically impacting the handling of the packages parameter. Attackers can exploit this flaw to include arbitrary local files without authentication, potentially leading to unauthorized access to sensitive information. The vulnerability is limited to files within a specific directory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.8#Security_Fixes; https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P40#Security_Fixes
CVE: CVE-2024-33536
Published: 2024-08-12
Description: An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The vulnerability occurs due to inadequate input validation of the res parameter, allowing an authenticated attacker to inject and execute arbitrary JavaScript code within the context of another user's browser session. By uploading a malicious JavaScript file, accessible externally, and crafting a URL containing its location in the res parameter, the attacker can exploit this vulnerability. Subsequently, when another user visits the crafted URL, the malicious JavaScript code is executed.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.8#Security_Fixes; https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P40#Security_Fixes
CVE: CVE-2024-38530
Published: 2024-08-12
Description: The Open eClass platform (formerly known as GUnet eClass) is a complete Course Management System. An arbitrary file upload vulnerability in the "save" functionality of the H5P module enables unauthenticated users to upload arbitrary files on the server's filesystem. This may lead in unrestricted RCE on the backend server, since the upload location is accessible from the internet. This vulnerability is fixed in 3.16.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/gunet/openeclass/commit/4449cf8bed40fd8fc4b267a5726fab9f9fe5a191; https://github.com/gunet/openeclass/security/advisories/GHSA-88c3-hp7p-grgg
CVE: CVE-2024-42258
Published: 2024-08-12
Description: In the Linux kernel, the following vulnerability has been resolved:

mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines

Yves-Alexis Perez reported commit 4ef9ad19e176 ("mm: huge_memory: don't
force huge page alignment on 32 bit") didn't work for x86_32 [1].  It is
because x86_32 uses CONFIG_X86_32 instead of CONFIG_32BIT.

!CONFIG_64BIT should cover all 32 bit machines.

[1] https://lore.kernel.org/linux-mm/CAHbLzkr1LwH3pcTgM+aGQ31ip2bKqiqEQ8=FQB+t2c3dhNKNHA@mail.gmail.com/
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://git.kernel.org/stable/c/7e1f4efb8d6140b2ec79bf760c43e1fc186e8dfc; https://git.kernel.org/stable/c/89f2914dd4b47d2fad3deef0d700f9526d98d11f; https://git.kernel.org/stable/c/a5c399fe433a115e9d3693169b5f357f3194af0a
CVE: CVE-2024-42477
Published: 2024-08-12
Description: llama.cpp provides LLM inference in C/C++. The unsafe `type` member in the `rpc_tensor` structure can cause `global-buffer-overflow`. This vulnerability may lead to memory data leakage. The vulnerability is fixed in b3561.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125, CWE-401
References: https://github.com/ggerganov/llama.cpp/commit/b72942fac998672a79a1ae3c03b340f7e629980b; https://github.com/ggerganov/llama.cpp/security/advisories/GHSA-mqp6-7pv6-fqjf
CVE: CVE-2024-42478
Published: 2024-08-12
Description: llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary address reading. This vulnerability is fixed in b3561.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/ggerganov/llama.cpp/commit/b72942fac998672a79a1ae3c03b340f7e629980b; https://github.com/ggerganov/llama.cpp/security/advisories/GHSA-5vm9-p64x-gqw9
CVE: CVE-2024-42479
Published: 2024-08-12
Description: llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary address writing. This vulnerability is fixed in b3561.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-123, CWE-787
References: https://github.com/ggerganov/llama.cpp/commit/b72942fac998672a79a1ae3c03b340f7e629980b; https://github.com/ggerganov/llama.cpp/security/advisories/GHSA-wcr5-566p-9cwj
CVE: CVE-2024-42520
Published: 2024-08-12
Description: TOTOLINK A3002R v4.0.0-B20[PII_REDACTED] contains a buffer overflow vulnerability in /bin/boa via formParentControl.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/c10uds/totolink_A3002R_stackoverflow