deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-56312
Published: 2024-12-22
Description: A stored cross-site scripting (XSS) vulnerability in the Project Dashboard name of REDCap through 14.9.6 allows authenticated users to inject malicious scripts into the name field of a Project Dashboard. When a user clicks on the project Dashboard name, the crafted payload is executed, potentially enabling the execution of arbitrary web scripts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/ping-oui-no/Vulnerability-Research-CVESS/tree/main/RedCap; https://www.evms.edu/research/resources_services/redcap/redcap_change_log/
CVE: CVE-2024-56313
Published: 2024-12-22
Description: A stored cross-site scripting (XSS) vulnerability in the Calendar feature of REDCap through 14.9.6 allows authenticated users to inject malicious scripts into the Notes field of a calendar event. When the event is viewed, the crafted payload is executed, potentially enabling the execution of arbitrary web scripts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/ping-oui-no/Vulnerability-Research-CVESS/tree/main/RedCap; https://www.evms.edu/research/resources_services/redcap/redcap_change_log/
CVE: CVE-2024-56314
Published: 2024-12-22
Description: A stored cross-site scripting (XSS) vulnerability in the Project name of REDCap through 14.9.6 allows authenticated users to inject malicious scripts into the name field of a Project. When a user clicks on the project name to access it, the crafted payload is executed, potentially enabling the execution of arbitrary web scripts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/ping-oui-no/Vulnerability-Research-CVESS/tree/main/RedCap; https://www.evms.edu/research/resources_services/redcap/redcap_change_log/
CVE: CVE-2024-12896
Published: 2024-12-22
Description: A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222 and classified as problematic. Affected by this issue is some unknown functionality of the file /web_caps/webCapsConfig of the component Web Interface. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor assesses that "the information disclosed in the URL is not sensitive or poses any risk to the user".
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-284
References: https://netsecfish.notion.site/IntelBras-IP-Camera-Information-Disclosure-15e6b683e67c80a89f89daf59daa9ea8?pvs=73; https://vuldb.com/?ctiid.289166; https://vuldb.com/?id.289166
CVE: CVE-2024-56375
Published: 2024-12-22
Description: An integer underflow was discovered in Fort 1.6.3 and 1.6.4 before 1.6.5. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a Manifest RPKI object containing an empty fileList. Fort dereferences (and, shortly afterwards, writes to) this array during a shuffle attempt, before the validation that would normally reject it when empty. This out-of-bounds access is caused by an integer underflow that causes the surrounding loop to iterate infinitely. Because the product is permanently stuck attempting to overshuffle an array that doesn't actually exist, a crash is nearly guaranteed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-191, CWE-191
References: https://github.com/NICMx/FORT-validator/issues/154; https://nicmx.github.io/FORT-validator/CVE.html
CVE: CVE-2024-12897
Published: 2024-12-23
Description: A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222. It has been classified as critical. This affects an unknown part of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-23, CWE-24
References: https://netsecfish.notion.site/Path-Traversal-Vulnerability-in-IntelBras-IP-Cameras-mtd-Config-Sha1Account1-and-mtd-Confi-15e6b683e67c80809442ee3425f753b7?pvs=4; https://vuldb.com/?ctiid.289167; https://vuldb.com/?id.289167
CVE: CVE-2024-56378
Published: 2024-12-23
Description: libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://gitlab.freedesktop.org/poppler/poppler/-/blob/30eada0d2bceb42c2d2a[PII_REDACTED]3e0b9bea50/CMakeLists.txt#L621; https://gitlab.freedesktop.org/poppler/poppler/-/commit/ade9b5ebed44b0c15522c27669ef6cdf93eff84e; https://gitlab.freedesktop.org/poppler/poppler/-/issues/1553
CVE: CVE-2024-12898
Published: 2024-12-23
Description: A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/faculty_action.php. The manipulation of the argument faculty_course_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://1000projects.org/; https://github.com/onupset/CVE/issues/1; https://vuldb.com/?ctiid.289168
CVE: CVE-2024-12899
Published: 2024-12-23
Description: A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/course_action.php. The manipulation of the argument course_code leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://1000projects.org/; https://github.com/Murrayzed/CVE/issues/1; https://vuldb.com/?ctiid.289169
CVE: CVE-2024-45721
Published: 2024-12-23
Description: home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the HOST name configuration screen. An arbitrary OS command may be executed with the root privilege by an administrative user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://jvn.jp/en/jp/JVN61635834/; https://k-tai.sharp.co.jp/support/info/info083.html
CVE: CVE-2024-46873
Published: 2024-12-23
Description: Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-489
References: https://jvn.jp/en/jp/JVN61635834/; https://k-tai.sharp.co.jp/support/info/info083.html
CVE: CVE-2024-47864
Published: 2024-12-23
Description: home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote unauthenticated attacker may get the web console of the product down.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120
References: https://jvn.jp/en/jp/JVN61635834/; https://k-tai.sharp.co.jp/support/info/info083.html
CVE: CVE-2024-52321
Published: 2024-12-23
Description: Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The product's backup files containing sensitive information may be retrieved by a remote unauthenticated attacker.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-497
References: https://jvn.jp/en/jp/JVN61635834/; https://k-tai.sharp.co.jp/support/info/info083.html
CVE: CVE-2024-54082
Published: 2024-12-23
Description: home 5G HR02 and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the configuration restore function. An arbitrary OS command may be executed with the root privilege by an administrative user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://jvn.jp/en/jp/JVN61635834/; https://k-tai.sharp.co.jp/support/info/info083.html
CVE: CVE-2024-12900
Published: 2024-12-23
Description: A vulnerability classified as critical has been found in FoxCMS up to 1.2. Affected is an unknown function of the file /install/installdb.php of the component Configuration File Handler. The manipulation of the argument database password leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-94, CWE-94
References: https://note.zhaoj.in/share/iDCwOv9vfDTI; https://vuldb.com/?ctiid.289170; https://vuldb.com/?id.289170
CVE: CVE-2024-12901
Published: 2024-12-23
Description: A vulnerability classified as critical was found in FoxCMS up to 1.2. Affected by this vulnerability is an unknown functionality of the file /app/api/controller/Site.php of the component API Endpoint. The manipulation of the argument password leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://note.zhaoj.in/share/8l4RPA2zcxRr; https://vuldb.com/?ctiid.289171; https://vuldb.com/?id.289171
CVE: CVE-2024-11230
Published: 2024-12-23
Description: The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘size’ parameter in all versions up to, and including, 1.6.46 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/header-footer-elementor/tags/1.6.46/inc/widgets-manager/widgets/class-page-title.php#L516; https://plugins.trac.wordpress.org/changeset/3194764/; https://www.wordfence.com/threat-intel/vulnerabilities/id/0d82c866-5b35-414e-bd72-30530930d5d8?source=cve
CVE: CVE-2024-12902
Published: 2024-12-23
Description: ANCHOR from Global Wisdom Software is an integrated product running on a Windows virtual machine. The underlying Windows OS of the product contains high-privilege service accounts. If these accounts use default passwords, attackers could remotely log in to the virtual machine using the default credentials.
CVSS Score: 8.4 (HIGH)
CWE: CWE-1392
References: https://www.twcert.org.tw/en/cp-139-8315-e6069-2.html; https://www.twcert.org.tw/tw/cp-132-8314-983c9-1.html
CVE: CVE-2024-12903
Published: 2024-12-23
Description: Incorrect default permissions vulnerability in Evoko Home, affecting version 2.4.2 to 2.7.4. A non-admin user could exploit weak file and folder permissions to escalate privileges, execute arbitrary code and maintain persistence on the compromised machine. It has been identified that full control permissions exist on the ‘Everyone’ group (i.e. any user who has local access to the operating system regardless of their privileges).
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.incibe.es/en/incibe-cert/notices/aviso/incorrect-default-permissions-biamp-evoko-home
CVE: CVE-2024-55539
Published: 2024-12-23
Description: Weak algorithm used to sign RPM package. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux) before build 39185, Acronis Cyber Protect 16 (Linux) before build 39938.
CVSS Score: 2.5 (LOW)
CWE: CWE-327
References: https://security-advisory.acronis.com/advisories/SEC-5825
CVE: CVE-2024-23945
Published: 2024-12-23
Description: Signing cookies is an application security feature that adds a digital signature to cookie data to verify its authenticity and integrity. The signature helps prevent malicious actors from modifying the cookie value, which can lead to security vulnerabilities and exploitation. Apache Hive’s service component accidentally exposes the signed cookie to the end user when there is a mismatch in signature between the current and expected cookie. Exposing the correct cookie signature can lead to further exploitation.

The vulnerable CookieSigner logic was introduced in Apache Hive by HIVE-9710 (1.2.0) and in Apache Spark by SPARK-14987 (2.0.0). The affected components are the following:
* org.apache.hive:hive-service
* org.apache.spark:spark-hive-thriftserver_2.11
* org.apache.spark:spark-hive-thriftserver_2.12
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-209, CWE-209
References: https://github.com/apache/hive; https://github.com/apache/hive/commit/7638cb1a3b07713cc490aa2909a37037f89e08b4; https://github.com/apache/spark
CVE: CVE-2024-45387
Published: 2024-12-23
Description: An SQL injection vulnerability in Traffic Ops in Apache Traffic Control <= 8.0.1, >= 8.0.0 allows a privileged user with role "admin", "federation", "operations", "portal", or "steering" to execute arbitrary SQL against the database by sending a specially-crafted PUT request.

Users are recommended to upgrade to version Apache Traffic Control 8.0.2 if you run an affected version of Traffic Ops.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-89, CWE-285, CWE-89
References: https://lists.apache.org/thread/t38nk5n7t8w3pb66z7z4pqfzt4443trr; http://www.openwall.com/lists/oss-security/2024/12/23/3
CVE: CVE-2024-53256
Published: 2024-12-23
Description: Rizin is a UNIX-like reverse engineering framework and command-line toolset. `rizin.c` still had an old snippet of code which suffered a command injection due the usage of `rz_core_cmdf` to invoke the command `m` which was removed in v0.1.x. A malicious binary defining `bclass` (part of RzBinInfo) is executed if `rclass` (part of RzBinInfo) is set to `fs`; the vulnerability can be exploited by any bin format where `bclass` and `rclass` are user defined. This vulnerability is fixed in 0.7.4.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/rizinorg/rizin/blob/be24ca8879ed9c58f288bdf21c271b6294720da4/librz/main/rizin.c#L1275-L1278; https://github.com/rizinorg/rizin/commit/db6c5b39c065ce719f587c9815c47fbb834b10fa; https://github.com/rizinorg/rizin/security/advisories/GHSA-5jhc-frm4-p8v9
CVE: CVE-2024-54148
Published: 2024-12-23
Description: Gogs is an open source self-hosted Git service. A malicious user is able to commit and edit a crafted symlink file to a repository to gain SSH access to the server. The vulnerability is fixed in 0.13.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-61, CWE-22
References: https://github.com/gogs/gogs/commit/c94baec9ca923f38c19f0c7c5af722b9ec04022a; https://github.com/gogs/gogs/issues/7582; https://github.com/gogs/gogs/pull/7857
CVE: CVE-2024-55947
Published: 2024-12-23
Description: Gogs is an open source self-hosted Git service. A malicious user is able to write a file to an arbitrary path on the server to gain SSH access to the server. The vulnerability is fixed in 0.13.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://github.com/gogs/gogs/commit/9a9388ace25bd646f5098cb9193d983332c34e41; https://github.com/gogs/gogs/issues/7582; https://github.com/gogs/gogs/pull/7859
CVE: CVE-2024-56201
Published: 2024-12-23
Description: Jinja is an extensible templating engine. In versions on the 3.x branch prior to 3.1.5, a bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of if Jinja's sandbox is used. To exploit the vulnerability, an attacker needs to control both the filename and the contents of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications which execute untrusted templates where the template author can also choose the template filename. This vulnerability is fixed in 3.1.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-150
References: https://github.com/pallets/jinja/commit/767b[PII_REDACTED]9ae3709ccfb02f9602ae9fe51f; https://github.com/pallets/jinja/issues/1792; https://github.com/pallets/jinja/releases/tag/3.1.5
CVE: CVE-2024-56326
Published: 2024-12-23
Description: Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications which execute untrusted templates. Jinja's sandbox does catch calls to str.format and ensures they don't escape the sandbox. However, it's possible to store a reference to a malicious string's format method, then pass that to a filter that calls it. No such filters are built-in to Jinja, but could be present through custom filters in an application. After the fix, such indirect calls are also handled by the sandbox. This vulnerability is fixed in 3.1.5.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693, CWE-1336
References: https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4; https://github.com/pallets/jinja/releases/tag/3.1.5; https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h
CVE: CVE-2024-56364
Published: 2024-12-23
Description: SimpleXLSX is software for parsing and retrieving data from Excel XLSx files. Starting in 1.0.12 and ending in 1.1.13, when calling the extended toHTMLEx method, it is possible to execute arbitrary JavaScript code. This vulnerability is fixed in 1.1.13.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/shuchkin/simplexlsx/commit/71a5e3d40d14e33161f8a40b3fd02de542218ef0; https://github.com/shuchkin/simplexlsx/security/advisories/GHSA-r87q-fj25-f8jf
CVE: CVE-2024-40896
Published: 2024-12-23
Description: In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting "checked"). This makes classic XXE attacks possible.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: https://gitlab.gnome.org/GNOME/libxml2/-/commit/1a[PII_REDACTED]907f6572b1b6aac4081c56adb5c6; https://gitlab.gnome.org/GNOME/libxml2/-/issues/761; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-53275
Published: 2024-12-23
Description: Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. In 1.15.0 and earlier, the default setup of home-gallery is vulnerable to DNS rebinding. Home-gallery is set up without TLS and user authentication by default, leaving it vulnerable to DNS rebinding. In this attack, an attacker will ask a user to visit their website. The attacker website will then change the DNS records of their domain from their IP address to the internal IP address of the home-gallery instance. To tell which IP addresses are valid, we can rebind a subdomain to each IP address we want to check, and see if there is a response. Once potential candidates have been found, the attacker can launch the attack by reading the response of the web server after the IP address has changed. When the attacker domain is fetched, the response will be from the home-gallery instance, not the attacker website, because the IP address has been changed. Due to a lack of authentication, home-gallery photos can then be extracted by the attacker website.
CWE: CWE-350
References: https://securitylab.github.com/advisories/GHSL-2024-091_GHSL-2024-092_home-gallery/
CVE: CVE-2024-53276
Published: 2024-12-23
Description: Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. In 1.15.0 and earlier, an open CORS policy in app.js may allow an attacker to view the images of home-gallery when it is using the default settings. The following express middleware allows any website to make a cross site request to home-gallery, thus allowing them to read any endpoint on home-gallery. Home-gallery is mostly safe from cross-site requests due to most of its pages requiring JavaScript, and cross-site requests such as fetch() do not render javascript. If an attacker is able to get the path of the preview images which are randomized, an attacker will be able to view such a photo. If any static files or endpoints are introduced in the future that contain sensitive information, they will be accessible to an attacker website.
CWE: CWE-942
References: https://github.com/xemle/home-gallery/blob/v1.15.0/packages/server/src/app.js#L45; https://securitylab.github.com/advisories/GHSL-2024-091_GHSL-2024-092_home-gallery/
CVE: CVE-2024-56362
Published: 2024-12-23
Description: Navidrome is an open source web-based music collection server and streamer. Navidrome stores the JWT secret in plaintext in the navidrome.db database file under the property table. This practice introduces a security risk because anyone with access to the database file can retrieve the secret. This vulnerability is fixed in 0.54.1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-312
References: https://github.com/navidrome/navidrome/commit/7f030b[PII_REDACTED]fd2ac0df69f4a313f9caf9ff; https://github.com/navidrome/navidrome/commit/9cbdb20a318a49daf95888b1fd207d4d729b55f1; https://github.com/navidrome/navidrome/security/advisories/GHSA-xwx7-p63r-2rj8
CVE: CVE-2024-56363
Published: 2024-12-23
Description: APTRS (Automated Penetration Testing Reporting System) is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. In 1.0, there is a vulnerability in the web application's handling of user-supplied input that is incorporated into a Jinja2 template. Specifically, when user input is improperly sanitized or validated, an attacker can inject Jinja2 syntax into the template, causing the server to execute arbitrary code. For example, an attacker might be able to inject expressions like {{ config }}, {{ self.class.mro[1].subclasses() }}, or more dangerous payloads that trigger execution of arbitrary Python code. The vulnerability can be reproduced by submitting crafted input to all the template fields handled by ckeditor, that are passed directly to a Jinja2 template. If the input is rendered without sufficient sanitization, it results in the execution of malicious Jinja2 code on the server.
CVSS Score: 7.8 (HIGH)
CWE: CWE-97
References: https://github.com/APTRS/APTRS/commit/9f6b6e4a56a9119eb12126a4909441e83b6d7c11; https://github.com/APTRS/APTRS/security/advisories/GHSA-h4w2-hvcg-938j
CVE: CVE-2024-53961
Published: 2024-12-23
Description: ColdFusion versions 2023.11, 2021.17 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access files or directories that are outside of the restricted directory set by the application. This could lead to the disclosure of sensitive information or the manipulation of system data. Exploitation of this issue requires the admin panel be exposed to the internet.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://helpx.adobe.com/security/products/coldfusion/apsb24-107.html
CVE: CVE-2018-25106
Published: 2024-12-23
Description: A vulnerability, which was classified as critical, has been found in webuidesigning NebulaX Theme up to 5.0 on WordPress. This issue affects the function nebula_send_to_hubspot of the file libs/Legacy/Legacy.php. The manipulation leads to sql injection. The attack may be initiated remotely. The patch is named 41230a81db0f671c570c2644bc2f80565ca83c5a. It is recommended to apply a patch to fix this issue.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/webuidesigning/NebulaX/commit/41230a81db0f671c570c2644bc2f80565ca83c5a; https://vuldb.com/?ctiid.289163; https://vuldb.com/?id.289163