deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-9239
Published: 2024-11-20
Description: The Booster for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 7.2.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/tags/7.2.3/includes/settings/wcj-settings-pdf-invoicing-advanced.php#L53; https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/tags/7.2.3/includes/tools/class-wcj-order-statuses-tool.php#L319; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3187178%40woocommerce-jetpack&new=3187178%40woocommerce-jetpack&sfp_email=&sfph_mail=#file5
CVE: CVE-2024-47865
Published: 2024-11-20
Description: Missing authentication for critical function vulnerability exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote unauthenticated attacker may update or downgrade the firmware on the device.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://jvn.jp/en/vu/JVNVU90667116/; https://network.mobile.rakuten.co.jp/internet/turbo/information/news/3184/
CVE: CVE-2024-48895
Published: 2024-11-20
Description: Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote authenticated attacker may execute an arbitrary OS command.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://jvn.jp/en/vu/JVNVU90667116/; https://network.mobile.rakuten.co.jp/internet/turbo/information/news/3184/
CVE: CVE-2024-52033
Published: 2024-11-20
Description: Exposure of sensitive system information to an unauthorized control sphere issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote unauthenticated attacker may obtain information of the other devices connected through the Wi-Fi.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-497
References: https://jvn.jp/en/vu/JVNVU90667116/; https://network.mobile.rakuten.co.jp/internet/turbo/information/news/3184/
CVE: CVE-2024-10126
Published: 2024-11-20
Description: Local File Inclusion vulnerability in M-Files Server in versions before 24.11 (excluding 24.8 SR1, 24.2 SR3 and 23.8 SR7) allows an authenticated user to read server local files of a limited set of filetypes via document preview.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-552
References: https://empower.m-files.com/security-advisories/CVE-2024-10126; https://product.m-files.com/security-advisories/CVE-2024-10126
CVE: CVE-2024-10127
Published: 2024-11-20
Description: Authentication bypass condition in LDAP authentication in M-Files server versions before 24.11 supported usage of OpenLDAP configurations that allowed user authentication without a password when the LDAP server itself had the vulnerable configuration.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-303
References: https://empower.m-files.com/security-advisories/CVE-2024-10127; https://product.m-files.com/security-advisories/CVE-2024-10127
CVE: CVE-2024-11176
Published: 2024-11-20
Description: Improper access control vulnerability in M-Files Aino in versions before 24.10 allowed an authenticated user to access object information via incorrect evaluation of effective permissions.
CWE: CWE-732, CWE-863
References: https://empower.m-files.com/security-advisories/CVE-2024-11176; https://product.m-files.com/security-advisories/CVE-2024-11176
CVE: CVE-2024-10665
Published: 2024-11-20
Description: The Yaad Sarig Payment Gateway For WC plugin for WordPress is vulnerable to unauthorized modification & access of data due to a missing capability check on the yaadpay_view_log_callback() and yaadpay_delete_log_callback() functions in all versions up to, and including, 2.2.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view and delete logs.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/yaad-sarig-payment-gateway-for-wc/trunk/classes/class-wc-gateway-yaadpay.php#L2518; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3197312%40yaad-sarig-payment-gateway-for-wc&new=3197312%40yaad-sarig-payment-gateway-for-wc&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/10409673-43dc-4c05-a996-120d753ebd6d?source=cve
CVE: CVE-2024-10891
Published: 2024-11-20
Description: The Save as PDF Plugin by Pdfcrowd plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'save_as_pdf_pdfcrowd' shortcode in all versions up to, and including, 4.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/save-as-pdf-by-pdfcrowd/trunk/public/class-save-as-pdf-pdfcrowd-public.php#L586; https://www.wordfence.com/threat-intel/vulnerabilities/id/3763d893-83a0-4b6a-9c21-34a69313d555?source=cve
CVE: CVE-2024-11179
Published: 2024-11-20
Description: The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to SQL Injection via the 'status_type' parameter in all versions up to, and including, 4.15.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://plugins.trac.wordpress.org/browser/mstore-api/tags/4.15.5/controllers/helpers/vendor-admin-wcfm-helper.php#L803; https://plugins.trac.wordpress.org/changeset/3190678/mstore-api/trunk/controllers/helpers/vendor-admin-wcfm-helper.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/b308bddf-a153-4d5b-936f-2170a1a494a5?source=cve
CVE: CVE-2024-11494
Published: 2024-11-20
Description: **UNSUPPORTED WHEN ASSIGNED** The improper authentication vulnerability in the Zyxel P-6101C ADSL modem firmware version P-6101CSA6AP_20140331 could allow an unauthenticated attacker to read some device information via a crafted HTTP HEAD method.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://gist.github.com/stevenyu113228/78e0169d2ff110e9a65539eb29660d25
CVE: CVE-2024-10382
Published: 2024-11-20
Description: There exists a code execution vulnerability in the Car App Android Jetpack Library. CarAppService uses deserialization logic that allows construction of arbitrary java classes. This can lead to arbitrary code execution when combined with specific Java deserialization gadgets. An attacker needs to install a malicious application on victims device to be able to attack any application that uses vulnerable library. We recommend upgrading the library past version 1.7.0-beta02.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502, CWE-94
References: https://developer.android.com/jetpack/androidx/releases/car-app#1.7.0-beta03
CVE: CVE-2024-10872
Published: 2024-11-20
Description: The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `template-post-custom-field` block in all versions up to, and including, 2.0.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/getwid/trunk/includes/templates/template-parts/post-custom-field.php#L9; https://plugins.trac.wordpress.org/changeset/3188812#file1; https://www.wordfence.com/threat-intel/vulnerabilities/id/8ae0030f-af21-43fb-959a-8da04cab05bb?source=cve
CVE: CVE-2024-45689
Published: 2024-11-20
Description: A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://bugzilla.redhat.com/show_bug.cgi?id=2309941
CVE: CVE-2024-45690
Published: 2024-11-20
Description: A flaw was found in Moodle. Additional checks were required to ensure users can only delete their OAuth2-linked accounts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://bugzilla.redhat.com/show_bug.cgi?id=2309939; https://moodle.org/security/
CVE: CVE-2024-45691
Published: 2024-11-20
Description: A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose comparison in the password-checking logic. This issue only affected passwords set to "magic hash" values.
CVSS Score: 5.4 (MEDIUM)
References: https://bugzilla.redhat.com/show_bug.cgi?id=2309940; https://moodle.org/security/
CVE: CVE-2024-48899
Published: 2024-11-20
Description: A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284, CWE-639
References: https://bugzilla.redhat.com/show_bug.cgi?id=2318819
CVE: CVE-2024-10520
Published: 2024-11-20
Description: The WP Project Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in the 'check' method of the 'Create_Milestone', 'Create_Task_List', 'Create_Task', and 'Delete_Task' classes in version 2.6.14. This makes it possible for unauthenticated attackers to create milestones, create task lists, create tasks, or delete tasks in any project. NOTE: Version 2.6.14 implemented a partial fix for this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset/3191204/wedevs-project-manager; https://www.wordfence.com/threat-intel/vulnerabilities/id/497760a8-7d4a-45a0-91e4-a8ee27bcdb02?source=cve
CVE: CVE-2024-11404
Published: 2024-11-20
Description: Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in django CMS Association django Filer allows Input Data Manipulation, Stored XSS.This issue affects django Filer: from 3 before 3.3.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-80, CWE-434
References: https://iltosec.com/blog/post/cve-2024-11404-medium-severity-file-upload-vulnerabilities-in-django-filer-323/; https://pypi.org/project/django-filer/; https://www.django-cms.org/en/blog/2024/11/19/security-updates-for-django-filer-and-django-cms-attributes-field/
CVE: CVE-2024-11406
Published: 2024-11-20
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in django CMS Association django CMS Attributes Fields allows Stored XSS.This issue affects django CMS Attributes Fields: before 4.0.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-79
References: https://github.com/django-cms/djangocms-attributes-field/commit/fe68d29ab78db5885bc31b67cf0537f1f02b33ad; https://iltosec.com/blog/post/djangocms-attributes-field-300-stored-xss-vulnerability/; https://pypi.org/project/djangocms-attributes-field/#history
CVE: CVE-2024-52437
Published: 2024-11-20
Description: Missing Authentication for Critical Function vulnerability in Saul Morales Pacheco Banner System banner-system allows Privilege Escalation.This issue affects Banner System: from n/a through <= 1.0.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: https://patchstack.com/database/Wordpress/Plugin/banner-system/vulnerability/wordpress-banner-system-plugin-1-0-0-privilege-escalation-vulnerability?_s_id=cve
CVE: CVE-2024-52438
Published: 2024-11-20
Description: Missing Authentication for Critical Function vulnerability in deco.agency de:branding debranding allows Privilege Escalation.This issue affects de:branding: from n/a through <= 1.0.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: https://patchstack.com/database/Wordpress/Plugin/debranding/vulnerability/wordpress-de-branding-plugin-1-0-2-privilege-escalation-vulnerability?_s_id=cve
CVE: CVE-2024-52439
Published: 2024-11-20
Description: Deserialization of Untrusted Data vulnerability in Mark O'Donnell Team Rosters team-rosters allows Object Injection.This issue affects Team Rosters: from n/a through <= 4.8.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://patchstack.com/database/Wordpress/Plugin/team-rosters/vulnerability/wordpress-team-rosters-plugin-4-6-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2024-52440
Published: 2024-11-20
Description: Deserialization of Untrusted Data vulnerability in xpresslane Xpresslane Fast Checkout xpresslane-integration-for-woocommerce allows Object Injection.This issue affects Xpresslane Fast Checkout: from n/a through <= 1.0.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://patchstack.com/database/Wordpress/Plugin/xpresslane-integration-for-woocommerce/vulnerability/wordpress-xpresslane-fast-checkout-plugin-1-0-0-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2024-52441
Published: 2024-11-20
Description: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability in Rajesh Thanoch Quick Learn quick-learn allows Object Injection.This issue affects Quick Learn: from n/a through <= 1.0.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://patchstack.com/database/Wordpress/Plugin/quick-learn/vulnerability/wordpress-quick-learn-plugin-1-0-1-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2024-52442
Published: 2024-11-20
Description: Incorrect Privilege Assignment vulnerability in userplus UserPlus userplus allows Privilege Escalation.This issue affects UserPlus: from n/a through <= 2.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-266
References: https://patchstack.com/database/Wordpress/Plugin/userplus/vulnerability/wordpress-userplus-plugin-2-0-privilege-escalation-vulnerability?_s_id=cve
CVE: CVE-2024-52443
Published: 2024-11-20
Description: Deserialization of Untrusted Data vulnerability in masikonis Geolocator geolocator allows Object Injection.This issue affects Geolocator: from n/a through <= 1.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://patchstack.com/database/Wordpress/Plugin/geolocator/vulnerability/wordpress-geolocator-plugin-1-1-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2024-52444
Published: 2024-11-20
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpopal Opal Woo Custom Product Variation opal-woo-custom-product-variation allows Path Traversal.This issue affects Opal Woo Custom Product Variation: from n/a through <= 1.1.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://patchstack.com/database/Wordpress/Plugin/opal-woo-custom-product-variation/vulnerability/wordpress-opal-woo-custom-product-variation-plugin-1-1-3-arbitrary-file-deletion-vulnerability?_s_id=cve
CVE: CVE-2024-52445
Published: 2024-11-20
Description: Deserialization of Untrusted Data vulnerability in ModelTheme QRMenu Restaurant QR Menu Lite qrmenu-lite allows Object Injection.This issue affects QRMenu Restaurant QR Menu Lite: from n/a through <= 1.0.4.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://patchstack.com/database/Wordpress/Plugin/qrmenu-lite/vulnerability/wordpress-qrmenu-restaurant-qr-menu-lite-plugin-1-0-3-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2024-52446
Published: 2024-11-20
Description: Cross-Site Request Forgery (CSRF) vulnerability in Buying Buddy Buying Buddy IDX CRM buying-buddy-idx-crm allows Object Injection.This issue affects Buying Buddy IDX CRM: from n/a through <= 1.2.8.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/buying-buddy-idx-crm/vulnerability/wordpress-buying-buddy-idx-crm-plugin-1-1-12-csrf-to-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2024-52447
Published: 2024-11-20
Description: Path Traversal: '.../...//' vulnerability in corporatezen222 Contact Page With Google Map contact-page-with-google-map allows Path Traversal.This issue affects Contact Page With Google Map: from n/a through <= 1.6.1.
CVSS Score: 8.6 (HIGH)
CWE: CWE-35
References: https://patchstack.com/database/Wordpress/Plugin/contact-page-with-google-map/vulnerability/wordpress-contact-page-with-google-map-plugin-1-6-1-arbitrary-file-deletion-vulnerability?_s_id=cve
CVE: CVE-2024-52448
Published: 2024-11-20
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in webcodingplace Ultimate Classified Listings ultimate-classified-listings allows PHP Local File Inclusion.This issue affects Ultimate Classified Listings: from n/a through <= 1.7.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://patchstack.com/database/Wordpress/Plugin/ultimate-classified-listings/vulnerability/wordpress-ultimate-classified-listings-plugin-1-4-local-file-inclusion-vulnerability?_s_id=cve
CVE: CVE-2024-52449
Published: 2024-11-20
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Navneil Naicer Bootscraper allows PHP Local File Inclusion.This issue affects Bootscraper: from n/a through 2.1.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://patchstack.com/database/vulnerability/wp-bootscraper/wordpress-wordpress-bootscraper-plugin-2-1-0-local-file-inclusion-vulnerability?_s_id=cve
CVE: CVE-2024-52450
Published: 2024-11-20
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in officialprocoders nBlocks nblocks allows PHP Local File Inclusion.This issue affects nBlocks: from n/a through <= 1.0.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-98
References: https://patchstack.com/database/Wordpress/Plugin/nblocks/vulnerability/wordpress-nblocks-plugin-1-0-2-local-file-inclusion-vulnerability?_s_id=cve
CVE: CVE-2024-52451
Published: 2024-11-20
Description: Cross-Site Request Forgery (CSRF) vulnerability in aaronrobbins Post Ideas post-ideas allows SQL Injection.This issue affects Post Ideas: from n/a through <= 2.
CVSS Score: 8.2 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/post-ideas/vulnerability/wordpress-post-ideas-plugin-2-csrf-to-sql-injection-vulnerability?_s_id=cve
CVE: CVE-2024-11086
Published: 2024-11-20
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-11495
Published: 2024-11-20
Description: Buffer overflow vulnerability in OllyDbg, version 1.10, which could allow a local attacker to execute arbitrary code due to lack of proper bounds checking.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://www.incibe.es/en/incibe-cert/notices/aviso/buffer-overflow-ollydbg
CVE: CVE-2024-10913
Published: 2024-11-20
Description: The Clone plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.4.6 via deserialization of untrusted input in the 'recursive_unserialized_replace' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://plugins.trac.wordpress.org/browser/wp-clone-by-wp-academy//tags/2.4.6/lib/icit_srdb_replacer.php#L24; https://plugins.trac.wordpress.org/browser/wp-clone-by-wp-academy/tags/2.4.7/lib/icit_srdb_replacer.php#L24; https://www.wordfence.com/threat-intel/vulnerabilities/id/16569267-ab52-4b96-86f0-d37c470a3938?source=cve
CVE: CVE-2024-11154
Published: 2024-11-20
Description: The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.15 via the 'actAjaxRevisionDiffs' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive data including revisions of posts and pages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://github.com/publishpress/PublishPress-Revisions/blob/master/admin/history_rvy.php#L322; https://plugins.trac.wordpress.org/browser/revisionary/trunk/admin/history_rvy.php#L322; https://plugins.trac.wordpress.org/changeset/3192492/
CVE: CVE-2024-52597
Published: 2024-11-20
Description: 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Versions prior to 5.4.1 are vulnerable to stored cross-site scripting due to improper headers in direct access to uploaded SVGs. The application allows uploading images in several places. One of the accepted types of image is SVG, which allows JS scripting. Therefore, by uploading a malicious SVG which contains JS code, an attacker which is able to drive a victim to the uploaded image could compromise that victim's session and access to their tokens. Version 5.4.1 contains a patch for the issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-80
References: https://github.com/Bubka/2FAuth/commit/93c508e118f483f3c93ac36e1f91face95af642d; https://github.com/Bubka/2FAuth/security/advisories/GHSA-q5p4-6q4v-gqg3
CVE: CVE-2024-9478
Published: 2024-11-20
Description: Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue affects upKeeper Instant Privilege Access: before 1.2.
CWE: CWE-266
References: https://support.upkeeper.se/hc/en-us/articles/[PII_REDACTED]716-CVE-2024-9478-Improper-Privilege-Management-Process
CVE: CVE-2024-9479
Published: 2024-11-20
Description: Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue affects upKeeper Instant Privilege Access: before 1.2.
CWE: CWE-266
References: https://support.upkeeper.se/hc/en-us/articles/[PII_REDACTED]436-CVE-2024-9479-Improper-Privilege-Management-Subprocess
CVE: CVE-2024-10094
Published: 2024-11-20
Description: Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://support.pega.com/support-doc/pega-security-advisory-d24-vulnerability-remediation-note
CVE: CVE-2024-51208
Published: 2024-11-20
Description: File Upload vulnerability in change-image.php in Anuj Kumar's Boat Booking System version 1.0 allows local attackers to upload a malicious PHP script via the Image Upload Mechanism parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://gist.github.com/Esquirez/985db6c65219a3e5a6521e291524aaa0; https://phpgurukul.com/boat-booking-system-using-php-and-mysql/
CVE: CVE-2024-51209
Published: 2024-11-20
Description: Cross-Site Scripting (XSS) vulnerabilities in Anuj Kumar's Client Management System Version 1.2 allow local attackers to inject arbitrary web script or HTML via the search input field parameter to admin search invoice page and client search invoice page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/Esquirez/0c41e0279ca11d9bfc52c3938041d935; https://phpgurukul.com/client-management-system-using-php-mysql/