deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-36770
Published: 2024-01-15
Description: pkg_postinst in the Gentoo ebuild for Slurm through 22.05.3 unnecessarily calls chown to assign root's ownership on files in the live root filesystem. This could be exploited by the slurm user to become the owner of root-owned files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://bugs.gentoo.org/631552; https://bugs.gentoo.org/631552
CVE: CVE-2024-0547
Published: 2024-01-15
Description: A vulnerability has been found in Ability FTP Server 2.34 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component APPE Command Handler. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250717 was assigned to this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-404, CWE-404
References: https://packetstormsecurity.com/files/163079/Ability-FTP-Server-2.34-Denial-Of-Service.html; https://vuldb.com/?ctiid.250717; https://vuldb.com/?id.250717
CVE: CVE-2024-0548
Published: 2024-01-15
Description: A vulnerability was found in FreeFloat FTP Server 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component SIZE Command Handler. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-250718 is the identifier assigned to this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-404
References: https://packetstormsecurity.com/files/163038/FreeFloat-FTP-Server-1.0-Denial-Of-Service.html; https://vuldb.com/?ctiid.250718; https://vuldb.com/?id.250718
CVE: CVE-2024-22028
Published: 2024-01-15
Description: Insufficient technical documentation issue exists in thermal camera TMC series all firmware versions. The user of the affected product is not aware of the internally saved data. By accessing the affected product physically, an attacker may retrieve the internal data.
CVSS Score: 4.6 (MEDIUM)
References: https://3rrr-btob.jp/archives/news/23624; https://jvn.jp/en/jp/JVN96240417/; https://3rrr-btob.jp/archives/news/23624
CVE: CVE-2023-46749
Published: 2024-01-15
Description: Apache Shiro before 1.13.0 or 2.0.0-alpha-4, may be susceptible to a path traversal attack that results in an authentication bypass when used together with path rewriting 

Mitigation: Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+, or ensure `blockSemicolon` is enabled (this is the default).


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://lists.apache.org/thread/mdv7ftz7k4488rzloxo2fb0p9shnp9wm; https://lists.apache.org/thread/mdv7ftz7k4488rzloxo2fb0p9shnp9wm; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-50290
Published: 2024-01-15
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr.
The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designed to work for known secret Java system properties. Environment variables cannot be strictly defined in Solr, like Java system properties can be, and may be set for the entire host, unlike Java system properties which are set per-Java-proccess.

The Solr Metrics API is protected by the "metrics-read" permission.
Therefore, Solr Clouds with Authorization setup will only be vulnerable via users with the "metrics-read" permission.
This issue affects Apache Solr: from 9.0.0 before 9.3.0.

Users are recommended to upgrade to version 9.3.0 or later, in which environment variables are not published via the Metrics API.


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://solr.apache.org/security.html#cve-2023-50290-apache-solr-allows-read-access-to-host-environment-variables; https://solr.apache.org/security.html#cve-2023-50290-apache-solr-allows-read-access-to-host-environment-variables
CVE: CVE-2023-6915
Published: 2024-01-15
Description: A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://access.redhat.com/errata/RHSA-2024:2394; https://access.redhat.com/errata/RHSA-2024:2950; https://access.redhat.com/errata/RHSA-2024:3138
CVE: CVE-2023-46226
Published: 2024-01-15
Description: Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2.

Users are recommended to upgrade to version 1.3.0, which fixes the issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://www.openwall.com/lists/oss-security/2024/01/15/1; https://lists.apache.org/thread/293b4ob65ftnfwyf62fb9zh8gwdy38hg; http://www.openwall.com/lists/oss-security/2024/01/15/1
CVE: CVE-2023-4001
Published: 2024-01-15
Description: An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file that contains the password hash for the GRUB password protection feature. An attacker capable of attaching an external drive such as a USB stick containing a file system with a duplicate UUID (the same as in the "/boot/" file system) can bypass the GRUB password protection feature on UEFI systems, which enumerate removable drives before non-removable ones. This issue was introduced in a downstream patch in Red Hat's version of grub2 and does not affect the upstream package.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-290, CWE-290
References: https://access.redhat.com/errata/RHSA-2024:0437; https://access.redhat.com/errata/RHSA-2024:0456; https://access.redhat.com/errata/RHSA-2024:0468
CVE: CVE-2023-5253
Published: 2024-01-15
Description: A missing authentication check in the WebSocket channel used for the Check Point IoT integration in Nozomi Networks Guardian and CMC, may allow an unauthenticated attacker to obtain assets data without authentication.



Malicious unauthenticated users with knowledge on the underlying system may be able to extract limited asset information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://security.nozominetworks.com/NN-2023:12-01; https://security.nozominetworks.com/NN-2023:12-01
CVE: CVE-2024-20709
Published: 2024-01-15
Description: Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20709; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20709
CVE: CVE-2024-20721
Published: 2024-01-15
Description: Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20721; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20721
CVE: CVE-2023-42134
Published: 2024-01-15
Description: PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.45_20230314 or earlier can allow the signed partition overwrite and subsequently local code execution via hidden command.





The attacker must have physical USB access to the device in order to exploit this vulnerability.

CVSS Score: 6.8 (MEDIUM)
CWE: CWE-912
References: https://blog.stmcyber.com/pax-pos-cves-2023/; https://cert.pl/en/posts/2024/01/CVE-2023-4818/; https://cert.pl/posts/2024/01/CVE-2023-4818/
CVE: CVE-2023-42135
Published: 2024-01-15
Description: PAX A920Pro/A50 devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow local code execution via parameter injection by bypassing the input validation when flashing a specific partition. 





The attacker must have physical USB access to the device in order to exploit this vulnerability.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-74, CWE-74
References: https://blog.stmcyber.com/pax-pos-cves-2023/; https://cert.pl/en/posts/2024/01/CVE-2023-4818/; https://cert.pl/posts/2024/01/CVE-2023-4818/
CVE: CVE-2023-42136
Published: 2024-01-15
Description: PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execution of arbitrary commands with system account privilege by shell injection starting with a specific word.




The attacker must have shell access to the device in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77, CWE-74
References: https://blog.stmcyber.com/pax-pos-cves-2023/; https://cert.pl/en/posts/2024/01/CVE-2023-4818/; https://cert.pl/posts/2024/01/CVE-2023-4818/
CVE: CVE-2023-42137
Published: 2024-01-15
Description: PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow for command execution with high privileges by using malicious symlinks.




The attacker must have shell access to the device in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59, CWE-59
References: https://blog.stmcyber.com/pax-pos-cves-2023/; https://cert.pl/en/posts/2024/01/CVE-2023-4818/; https://cert.pl/posts/2024/01/CVE-2023-4818/
CVE: CVE-2023-4818
Published: 2024-01-15
Description: PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. 




The attacker must have physical USB access to the device in order to exploit this vulnerability.
CVSS Score: 7.6 (HIGH)
CWE: CWE-74, CWE-74
References: https://blog.stmcyber.com/pax-pos-cves-2023/; https://cert.pl/en/posts/2024/01/CVE-2023-4818/; https://cert.pl/posts/2024/01/CVE-2023-4818/
CVE: CVE-2023-4925
Published: 2024-01-15
Description: The Easy Forms for Mailchimp WordPress plugin through 6.8.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/0b094cba-9288-4c9c-87a9-bdce286fe8b6; https://wpscan.com/vulnerability/0b094cba-9288-4c9c-87a9-bdce286fe8b6
CVE: CVE-2023-50729
Published: 2024-01-15
Description: Traccar is an open source GPS tracking system. Prior to 5.11, Traccar is affected by an unrestricted file upload vulnerability in File feature allows attackers to execute arbitrary code on the server. This vulnerability is more prevalent because Traccar is recommended to run web servers as root user. It is also more dangerous because it can write or overwrite files in arbitrary locations.  Version 5.11 was published to fix this vulnerability.
CVSS Score: 8.4 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/traccar/traccar/security/advisories/GHSA-pqf7-8g85-vx2q; https://github.com/traccar/traccar/security/advisories/GHSA-pqf7-8g85-vx2q
CVE: CVE-2023-5905
Published: 2024-01-15
Description: The DeMomentSomTres WordPress Export Posts With Images WordPress plugin through 20220825 does not check authorization of requests to export the blog data, allowing any logged in user, such as subscribers to export the contents of the blog, including restricted and unpublished posts, as well as passwords of protected posts.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: https://wpscan.com/vulnerability/f94e91ef-1773-476c-9945-37e89ceefd3f; https://wpscan.com/vulnerability/f94e91ef-1773-476c-9945-37e89ceefd3f
CVE: CVE-2023-6029
Published: 2024-01-15
Description: The EazyDocs WordPress plugin before 2.3.6 does not have authorization and CSRF checks when handling documents and does not ensure that they are documents from the plugin, allowing unauthenticated users to delete arbitrary posts, as well as add and delete documents/sections.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://wpscan.com/vulnerability/7a0aaf85-8130-4fd7-8f09-f8edc929597e; https://wpscan.com/vulnerability/7a0aaf85-8130-4fd7-8f09-f8edc929597e
CVE: CVE-2023-6048
Published: 2024-01-15
Description: The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not prevent user with low privileges on the site, like subscribers, from setting any of the site's options to 1, which could be used to break sites and lead to DoS when certain options are reset
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/74cb07fe-fc82-472f-8c52-859c176d9e51; https://wpscan.com/vulnerability/74cb07fe-fc82-472f-8c52-859c176d9e51
CVE: CVE-2023-6049
Published: 2024-01-15
Description: The Estatik Real Estate Plugin WordPress plugin before 4.1.1 unserializes user input via some of its cookies, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget chain is present on the blog
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://wpscan.com/vulnerability/8cfd8c1f-2834-4a94-a3fa-c0cfbe78a8b7; https://wpscan.com/vulnerability/8cfd8c1f-2834-4a94-a3fa-c0cfbe78a8b7
CVE: CVE-2023-6050
Published: 2024-01-15
Description: The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not sanitise and escape various parameters and generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/c08e0f24-bd61-4e83-a555-363568cf0e6e; https://wpscan.com/vulnerability/c08e0f24-bd61-4e83-a555-363568cf0e6e
CVE: CVE-2023-6066
Published: 2024-01-15
Description: The WP Custom Widget area WordPress plugin through 1.2.5 does not properly apply capability and nonce checks on any of its AJAX action callback functions, which could allow attackers with subscriber+ privilege to create, delete or modify menus on the site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/f8f84d47-49aa-4258-a8a6-3de8e7342623; https://wpscan.com/vulnerability/f8f84d47-49aa-4258-a8a6-3de8e7342623
CVE: CVE-2023-6163
Published: 2024-01-15
Description: The WP Crowdfunding WordPress plugin before 2.1.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/7ed6de4d-0a37-497f-971d-b6711893c557; https://wpscan.com/vulnerability/7ed6de4d-0a37-497f-971d-b6711893c557
CVE: CVE-2023-6620
Published: 2024-01-15
Description: The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using them in SQL statements, leading to a SQL injection exploitable by high privilege users such as admin.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/ab5c42ca-ee7d-4344-bd88-0d727ed3d9c4; https://wpscan.com/vulnerability/ab5c42ca-ee7d-4344-bd88-0d727ed3d9c4
CVE: CVE-2023-6623
Published: 2024-01-15
Description: The Essential Blocks WordPress plugin before 4.4.3 does not prevent unauthenticated attackers from overwriting local variables when rendering templates over the REST API, which may lead to Local File Inclusion attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://wpscan.com/blog/file-inclusion-vulnerability-fixed-in-essential-blocks-4-4-3/; https://wpscan.com/vulnerability/633c28e0-0c9e-4e68-9424-55c32789b41f; https://wpscan.com/blog/file-inclusion-vulnerability-fixed-in-essential-blocks-4-4-3/
CVE: CVE-2023-6843
Published: 2024-01-15
Description: The easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg WordPress plugin before 2.4.7 does not properly secure some of its AJAX actions, allowing any logged-in users to modify its settings.
CVSS Score: 4.3 (MEDIUM)
References: https://wpscan.com/vulnerability/41508340-8caf-4dca-bd88-350b63b78ab0; https://wpscan.com/vulnerability/41508340-8caf-4dca-bd88-350b63b78ab0
CVE: CVE-2023-6941
Published: 2024-01-15
Description: The Keap Official Opt-in Forms WordPress plugin through 1.0.11 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/58f7c9aa-5e59-468f-aba9-b15e7942fd37/; https://wpscan.com/vulnerability/58f7c9aa-5e59-468f-aba9-b15e7942fd37/
CVE: CVE-2023-6991
Published: 2024-01-15
Description: The JSM file_get_contents() Shortcode WordPress plugin before 2.7.1 does not validate one of its shortcode's parameters before making a request to it, which could allow users with contributor role and above to perform SSRF attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-918
References: https://wpscan.com/vulnerability/0b92becb-8a47-48fd-82e8-f7641cf5c9bc; https://wpscan.com/vulnerability/0b92becb-8a47-48fd-82e8-f7641cf5c9bc
CVE: CVE-2024-0314
Published: 2024-01-15
Description: XSS vulnerability in FireEye Central Management affecting version 9.1.1.956704, which could allow an attacker to modify special HTML elements in the application and cause a reflected XSS, leading to a session hijacking.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fireeye-products; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fireeye-products
CVE: CVE-2024-0315
Published: 2024-01-15
Description: Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. This vulnerability allows an attacker to upload a malicious PDF file to the system during the report creation process.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-98
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fireeye-products; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fireeye-products
CVE: CVE-2024-0316
Published: 2024-01-15
Description: Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. This vulnerability could allow an attacker to send multiple request packets to the containment_notify/preview parameter, which could lead to a service outage.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-460
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fireeye-products; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fireeye-products
CVE: CVE-2024-22207
Published: 2024-01-15
Description: fastify-swagger-ui is a Fastify plugin for serving Swagger UI.  Prior to 2.1.0, the default configuration of `@fastify/swagger-ui` without `baseDir` set will lead to all files in the module's directory being exposed via http routes served by the module.  The vulnerability is fixed in v2.1.0. Setting the `baseDir` option can also work around this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1188
References: https://github.com/fastify/fastify-swagger-ui/commit/13d799a2c5f14d3dd5b15892e03bbcbae63ee6f7; https://github.com/fastify/fastify-swagger-ui/security/advisories/GHSA-62jr-84gf-wmg4; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-0317
Published: 2024-01-15
Description: Cross-Site Scripting in FireEye EX, affecting version 9.0.3.936727. Exploitation of this vulnerability allows an attacker to send a specially crafted JavaScript payload via the 'type' and 's_f_name' parameters to an authenticated user to retrieve their session details.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fireeye-products; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fireeye-products
CVE: CVE-2024-0318
Published: 2024-01-15
Description: Cross-Site Scripting in FireEye HXTool affecting version 4.6. This vulnerability allows an attacker to store a specially crafted JavaScript payload in the 'Profile Name' and 'Hostname/IP' parameters that will be triggered when items are loaded.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fireeye-products; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fireeye-products
CVE: CVE-2024-0319
Published: 2024-01-15
Description: Open Redirect vulnerability in FireEye HXTool affecting version 4.6, the exploitation of which could allow an attacker to redirect a legitimate user to a malicious page by changing the 'redirect_uri' parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fireeye-products; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fireeye-products
CVE: CVE-2024-0320
Published: 2024-01-15
Description: Cross-Site Scripting in FireEye Malware Analysis (AX) affecting version 9.0.3.936530. This vulnerability allows an attacker to send a specially crafted JavaScript payload in the application URL to retrieve the session details of a legitimate user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fireeye-products; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fireeye-products
CVE: CVE-2024-0557
Published: 2024-01-15
Description: A vulnerability, which was classified as problematic, was found in DedeBIZ 6.3.0. This affects an unknown part of the component Website Copyright Setting. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250725 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://github.com/JTZ-a/SRC/blob/master/DedeBIZ/DedeBIZ%20-%20StoredXSS/README.md; https://vuldb.com/?ctiid.250725; https://vuldb.com/?id.250725
CVE: CVE-2024-0558
Published: 2024-01-15
Description: A vulnerability has been found in DedeBIZ 6.3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/makehtml_freelist_action.php. The manipulation of the argument startid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-250726 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89
References: https://github.com/JTZ-a/SRC/blob/master/DedeBIZ/DedeBIZ%20-%20sqli%201/README.md; https://vuldb.com/?ctiid.250726; https://vuldb.com/?id.250726
CVE: CVE-2024-0562
Published: 2024-01-15
Description: A use-after-free flaw was found in the Linux Kernel. When a disk is removed, bdi_unregister is called to stop further write-back and waits for associated delayed work to complete. However, wb_inode_writeback_end() may schedule bandwidth estimation work after this has completed, which can result in the timer attempting to access the recently freed bdi_writeback.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/errata/RHSA-2024:0412; https://access.redhat.com/security/cve/CVE-2024-0562; https://bugzilla.redhat.com/show_bug.cgi?id=2258475