deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-4965
Published: 2024-05-16
Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This issue affects some unknown processing of the file /useratte/resmanage.php. The manipulation of the argument load leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-264533 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-78
References: https://github.com/h0e4a0r1t/h0e4a0r1t.github.io/blob/master/2024/%3CWHB%7Cj%5CIbSU0m4%3A_/D-LINK-DAR-7000_RCE_%20resmanage.php.pdf; https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10354; https://vuldb.com/?ctiid.264533
CVE: CVE-2024-4966
Published: 2024-05-16
Description: A vulnerability was found in SourceCodester SchoolWebTech 1.0. It has been classified as critical. Affected is an unknown function of the file /improve/home.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-264534 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-434
References: https://github.com/CveSecLook/cve/issues/30; https://vuldb.com/?ctiid.264534; https://vuldb.com/?id.264534
CVE: CVE-2024-20791
Published: 2024-05-16
Description: Illustrator versions 28.4, 27.9.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/illustrator/apsb24-30.html; https://helpx.adobe.com/security/products/illustrator/apsb24-30.html
CVE: CVE-2024-20792
Published: 2024-05-16
Description: Illustrator versions 28.4, 27.9.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/illustrator/apsb24-30.html; https://helpx.adobe.com/security/products/illustrator/apsb24-30.html
CVE: CVE-2024-20793
Published: 2024-05-16
Description: Illustrator versions 28.4, 27.9.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/illustrator/apsb24-30.html; https://helpx.adobe.com/security/products/illustrator/apsb24-30.html
CVE: CVE-2024-2358
Published: 2024-05-16
Description: A path traversal vulnerability in the '/apply_settings' endpoint of parisneo/lollms-webui allows attackers to execute arbitrary code. The vulnerability arises due to insufficient sanitization of user-supplied input in the configuration settings, specifically within the 'extensions' parameter. Attackers can exploit this by crafting a payload that includes relative path traversal sequences ('../../../'), enabling them to navigate to arbitrary directories. This flaw subsequently allows the server to load and execute a malicious '__init__.py' file, leading to remote code execution. The issue affects the latest version of parisneo/lollms-webui.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-29
References: https://huntr.com/bounties/b2771df3-be50-45bd-93c4-0974ce38bc22; https://huntr.com/bounties/b2771df3-be50-45bd-93c4-0974ce38bc22
CVE: CVE-2024-2361
Published: 2024-05-16
Description: A vulnerability in the parisneo/lollms-webui allows for arbitrary file upload and read due to insufficient sanitization of user-supplied input. Specifically, the issue resides in the `install_model()` function within `lollms_core/lollms/binding.py`, where the application fails to properly sanitize the `file://` protocol and other inputs, leading to arbitrary read and upload capabilities. Attackers can exploit this vulnerability by manipulating the `path` and `variant_name` parameters to achieve path traversal, allowing for the reading of arbitrary files and uploading files to arbitrary locations on the server. This vulnerability affects the latest version of parisneo/lollms-webui.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-29
References: https://huntr.com/bounties/cd383817-924a-445a-838e-d0c867c6a176; https://huntr.com/bounties/cd383817-924a-445a-838e-d0c867c6a176
CVE: CVE-2024-2366
Published: 2024-05-16
Description: A remote code execution vulnerability exists in the parisneo/lollms-webui application, specifically within the reinstall_binding functionality in lollms_core/lollms/server/endpoints/lollms_binding_infos.py of the latest version. The vulnerability arises due to insufficient path sanitization, allowing an attacker to exploit path traversal to navigate to arbitrary directories. By manipulating the binding_path to point to a controlled directory and uploading a malicious __init__.py file, an attacker can execute arbitrary code on the server.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-77
References: https://huntr.com/bounties/63266c77-408b-45ff-962c-8163db50a864; https://huntr.com/bounties/63266c77-408b-45ff-962c-8163db50a864
CVE: CVE-2024-30274
Published: 2024-05-16
Description: Substance3D - Painter versions 9.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/substance3d_painter/apsb24-31.html; https://helpx.adobe.com/security/products/substance3d_painter/apsb24-31.html
CVE: CVE-2024-30275
Published: 2024-05-16
Description: Adobe Aero Desktop versions 23.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/aero/apsb24-33.html; https://helpx.adobe.com/security/products/aero/apsb24-33.html
CVE: CVE-2024-30281
Published: 2024-05-16
Description: Substance3D - Designer versions 13.1.1 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/substance3d_designer/apsb24-35.html; https://helpx.adobe.com/security/products/substance3d_designer/apsb24-35.html
CVE: CVE-2024-30282
Published: 2024-05-16
Description: Animate versions 24.0.2, 23.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/animate/apsb24-36.html; https://helpx.adobe.com/security/products/animate/apsb24-36.html
CVE: CVE-2024-30293
Published: 2024-05-16
Description: Animate versions 24.0.2, 23.0.5 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://helpx.adobe.com/security/products/animate/apsb24-36.html; https://helpx.adobe.com/security/products/animate/apsb24-36.html
CVE: CVE-2024-30294
Published: 2024-05-16
Description: Animate versions 24.0.2, 23.0.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/animate/apsb24-36.html; https://helpx.adobe.com/security/products/animate/apsb24-36.html
CVE: CVE-2024-30295
Published: 2024-05-16
Description: Animate versions 24.0.2, 23.0.5 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/animate/apsb24-36.html; https://helpx.adobe.com/security/products/animate/apsb24-36.html
CVE: CVE-2024-30296
Published: 2024-05-16
Description: Animate versions 24.0.2, 23.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/animate/apsb24-36.html; https://helpx.adobe.com/security/products/animate/apsb24-36.html
CVE: CVE-2024-30297
Published: 2024-05-16
Description: Animate versions 24.0.2, 23.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/animate/apsb24-36.html; https://helpx.adobe.com/security/products/animate/apsb24-36.html
CVE: CVE-2024-30298
Published: 2024-05-16
Description: Animate versions 24.0.2, 23.0.5 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/animate/apsb24-36.html; https://helpx.adobe.com/security/products/animate/apsb24-36.html
CVE: CVE-2024-30307
Published: 2024-05-16
Description: Substance3D - Painter versions 9.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/substance3d_painter/apsb24-31.html; https://helpx.adobe.com/security/products/substance3d_painter/apsb24-31.html
CVE: CVE-2024-30308
Published: 2024-05-16
Description: Substance3D - Painter versions 9.1.2 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/substance3d_painter/apsb24-31.html; https://helpx.adobe.com/security/products/substance3d_painter/apsb24-31.html
CVE: CVE-2024-30309
Published: 2024-05-16
Description: Substance3D - Painter versions 9.1.2 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/substance3d_painter/apsb24-31.html; https://helpx.adobe.com/security/products/substance3d_painter/apsb24-31.html
CVE: CVE-2024-3126
Published: 2024-05-16
Description: A command injection vulnerability exists in the 'run_xtts_api_server' function of the parisneo/lollms-webui application, specifically within the 'lollms_xtts.py' script. The vulnerability arises due to the improper neutralization of special elements used in an OS command. The affected function utilizes 'subprocess.Popen' to execute a command constructed with a Python f-string, without adequately sanitizing the 'xtts_base_url' input. This flaw allows attackers to execute arbitrary commands remotely by manipulating the 'xtts_base_url' parameter. The vulnerability affects versions up to and including the latest version before 9.5. Successful exploitation could lead to arbitrary remote code execution (RCE) on the system where the application is deployed.
CVSS Score: 8.4 (HIGH)
CWE: CWE-78
References: https://github.com/parisneo/lollms-webui/commit/41dbb1b3f2e78ea276e5269544e50514252c0c25; https://huntr.com/bounties/0e2bec70-826e-4c24-8015-31921e23fd12; https://github.com/parisneo/lollms-webui/commit/41dbb1b3f2e78ea276e5269544e50514252c0c25
CVE: CVE-2024-3403
Published: 2024-05-16
Description: imartinez/privategpt version 0.2.0 is vulnerable to a local file inclusion vulnerability that allows attackers to read arbitrary files from the filesystem. By manipulating file upload functionality to ingest arbitrary local files, attackers can exploit the 'Search in Docs' feature or query the AI to retrieve or disclose the contents of any file on the system. This vulnerability could lead to various impacts, including but not limited to remote code execution by obtaining private SSH keys, unauthorized access to private files, source code disclosure facilitating further attacks, and exposure of configuration files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://huntr.com/bounties/7431d1dd-f014-4d4f-acb6-f97369ef3688; https://huntr.com/bounties/7431d1dd-f014-4d4f-acb6-f97369ef3688
CVE: CVE-2024-3435
Published: 2024-05-16
Description: A path traversal vulnerability exists in the 'save_settings' endpoint of the parisneo/lollms-webui application, affecting versions up to the latest release before 9.5. The vulnerability arises due to insufficient sanitization of the 'config' parameter in the 'apply_settings' function, allowing an attacker to manipulate the application's configuration by sending specially crafted JSON payloads. This could lead to remote code execution (RCE) by bypassing existing patches designed to mitigate such vulnerabilities.
CVSS Score: 8.4 (HIGH)
CWE: CWE-29
References: https://github.com/parisneo/lollms-webui/commit/bb99b59e710d00c4f2598faa5e183fa30fbd3bc2; https://huntr.com/bounties/494f349a-8650-4d30-a0bd-4742fda44ce5; https://github.com/parisneo/lollms-webui/commit/bb99b59e710d00c4f2598faa5e183fa30fbd3bc2
CVE: CVE-2024-3848
Published: 2024-05-16
Description: A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '#' character can be used to insert a path into the fragment, effectively skipping validation. This allows an attacker to construct a URL that, when processed, ignores the protocol scheme and uses the provided path for filesystem access. As a result, an attacker can read arbitrary files, including sensitive information such as SSH and cloud keys, by exploiting the way the application converts the URL into a filesystem path. The issue stems from insufficient validation of the fragment portion of the URL, leading to arbitrary file read through path traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-29, CWE-22
References: https://github.com/mlflow/mlflow/commit/f8d51e[PII_REDACTED]0ebcfdb378612afd7844eca8; https://huntr.com/bounties/8d5aadaa-522f-4839-b41b-d7da362dd610; https://github.com/mlflow/mlflow/commit/f8d51e[PII_REDACTED]0ebcfdb378612afd7844eca8
CVE: CVE-2024-3851
Published: 2024-05-16
Description: A stored Cross-Site Scripting (XSS) vulnerability exists in the 'imartinez/privategpt' repository due to improper validation of file uploads. Attackers can exploit this vulnerability by uploading malicious HTML files, such as those containing JavaScript payloads, which are then executed in the context of the victim's session when accessed. This could lead to the execution of arbitrary JavaScript code in the context of the user's browser session, potentially resulting in phishing attacks or other malicious actions. The vulnerability affects the latest version of the repository.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://huntr.com/bounties/cae1a492-4e09-4d56-8e11-17703bdfe653; https://huntr.com/bounties/cae1a492-4e09-4d56-8e11-17703bdfe653
CVE: CVE-2024-3887
Published: 2024-05-16
Description: The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Form Builder widget in all versions up to, and including, 1.3.974 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3086890%40royal-elementor-addons&old=3081886%40royal-elementor-addons&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/5122800d-f274-4129-84d4[PII_REDACTED]2c?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3086890%40royal-elementor-addons&old=3081886%40royal-elementor-addons&sfp_email=&sfph_mail=
CVE: CVE-2024-4078
Published: 2024-05-16
Description: A vulnerability in the parisneo/lollms, specifically in the `/unInstall_binding` endpoint, allows for arbitrary code execution due to insufficient sanitization of user input. The issue arises from the lack of path sanitization when handling the `name` parameter in the `unInstall_binding` function, allowing an attacker to traverse directories and execute arbitrary code by loading a malicious `__init__.py` file. This vulnerability affects the latest version of the software. The exploitation of this vulnerability could lead to remote code execution on the system where parisneo/lollms is deployed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f; https://huntr.com/bounties/a55a8c04-df44-49b2-bcfa-2a2b728a299d; https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f
CVE: CVE-2024-4181
Published: 2024-05-16
Description: A command injection vulnerability exists in the RunGptLLM class of the llama_index library, version 0.9.47, used by the RunGpt framework from JinaAI to connect to Language Learning Models (LLMs). The vulnerability arises from the improper use of the eval function, allowing a malicious or compromised LLM hosting provider to execute arbitrary commands on the client's machine. This issue was fixed in version 0.10.13. The exploitation of this vulnerability could lead to a hosting provider gaining full control over client machines.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/run-llama/llama_index/commit/d73715eaf[PII_REDACTED]e7897c78b9c8dd2d3a7ba; https://huntr.com/bounties/1a204520-598a-434e-b13d-0d34f2a5ddc1; https://github.com/run-llama/llama_index/commit/d73715eaf[PII_REDACTED]e7897c78b9c8dd2d3a7ba
CVE: CVE-2024-4223
Published: 2024-05-16
Description: The Tutor LMS plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on multiple functions in all versions up to, and including, 2.7.0. This makes it possible for unauthenticated attackers to add, modify, or delete data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/changeset/3086489/; https://www.wordfence.com/threat-intel/vulnerabilities/id/ce4c4395-6d1a-4d5f-885f-383e5c44c0f8?source=cve; https://plugins.trac.wordpress.org/changeset/3086489/
CVE: CVE-2024-4263
Published: 2024-05-16
Description: A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises due to the lack of proper validation for DELETE requests by users with EDIT permissions, allowing them to perform unauthorized deletions of artifacts. The vulnerability specifically affects the handling of artifact deletions within the application, as demonstrated by the ability of a low privilege user to delete a directory inside an artifact using a DELETE request, despite the official documentation stating that users with EDIT permission can only read and update artifacts, not delete them.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-284
References: https://github.com/mlflow/mlflow/commit/b43e0e3de5b500554e13dc032ba2083b2d6c94b8; https://huntr.com/bounties/bfa116d3-2af8-4c4a-ac34-ccde7491ae11; https://github.com/mlflow/mlflow/commit/b43e0e3de5b500554e13dc032ba2083b2d6c94b8
CVE: CVE-2024-4321
Published: 2024-05-16
Description: A Local File Inclusion (LFI) vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically within the functionality for uploading chat history. The vulnerability arises due to improper input validation when handling file paths during the chat history upload process. An attacker can exploit this vulnerability by intercepting requests and manipulating the 'name' parameter to specify arbitrary file paths. This allows the attacker to read sensitive files on the server, leading to information leakage, including API keys and private information. The issue affects version 20240310 of the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://huntr.com/bounties/19a16f8e-3d92-498f-abc9-8686005f067e; https://huntr.com/bounties/19a16f8e-3d92-498f-abc9-8686005f067e
CVE: CVE-2024-4322
Published: 2024-05-16
Description: A path traversal vulnerability exists in the parisneo/lollms-webui application, specifically within the `/list_personalities` endpoint. By manipulating the `category` parameter, an attacker can traverse the directory structure and list any directory on the system. This issue affects the latest version of the application. The vulnerability is due to improper handling of user-supplied input in the `list_personalities` function, where the `category` parameter can be controlled to specify arbitrary directories for listing. Successful exploitation of this vulnerability could allow an attacker to list all folders in the drive on the system, potentially leading to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-29
References: https://huntr.com/bounties/5116d858-ce00-418c-a5a5-851c5608c209; https://huntr.com/bounties/5116d858-ce00-418c-a5a5-851c5608c209