deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-2685
Published: 2024-03-20
Description: A vulnerability, which was classified as problematic, was found in Campcodes Online Job Finder System 1.0. This affects an unknown part of the file /admin/applicants/index.php. The manipulation of the argument view leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257385 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20Job%20Finder%20System/Online%20Job%20Finder%20System%20-%20vuln%2020.pdf; https://vuldb.com/?ctiid.257385; https://vuldb.com/?id.257385
CVE: CVE-2024-2686
Published: 2024-03-20
Description: A vulnerability has been found in Campcodes Online Job Finder System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/applicants/controller.php. The manipulation of the argument JOBREGID leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-257386 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20Job%20Finder%20System/Online%20Job%20Finder%20System%20-%20vuln%2021.pdf; https://vuldb.com/?ctiid.257386; https://vuldb.com/?id.257386
CVE: CVE-2024-2687
Published: 2024-03-20
Description: A vulnerability was found in Campcodes Online Job Finder System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/applicants/index.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257387.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20Job%20Finder%20System/Online%20Job%20Finder%20System%20-%20vuln%2011.pdf; https://vuldb.com/?ctiid.257387; https://vuldb.com/?id.257387
CVE: CVE-2024-2690
Published: 2024-03-20
Description: A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0. It has been classified as critical. Affected is an unknown function of the file /uupdate.php. The manipulation of the argument ima leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257388.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/wkeyi0x1/vul-report/issues/2; https://vuldb.com/?ctiid.257388; https://vuldb.com/?id.257388
CVE: CVE-2024-2702
Published: 2024-03-20
Description: Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import allows importing settings and data, ultimately leading to XSS.This issue affects Olive One Click Demo Import: from n/a through 1.1.1.
CVSS Score: 8.2 (HIGH)
CWE: CWE-862, CWE-862
References: https://patchstack.com/database/vulnerability/olive-one-click-demo-import/wordpress-olive-one-click-demo-import-plugin-1-1-1-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/olive-one-click-demo-import/wordpress-olive-one-click-demo-import-plugin-1-1-1-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-46839
Published: 2024-03-20
Description: PCI devices can make use of a functionality called phantom functions,
that when enabled allows the device to generate requests using the IDs
of functions that are otherwise unpopulated.  This allows a device to
extend the number of outstanding requests.

Such phantom functions need an IOMMU context setup, but failure to
setup the context is not fatal when the device is assigned.  Not
failing device assignment when such failure happens can lead to the
primary device being assigned to a guest, while some of the phantom
functions are assigned to a different domain.

CVSS Score: 5.3 (MEDIUM)
References: https://xenbits.xenproject.org/xsa/advisory-449.html; http://xenbits.xen.org/xsa/advisory-449.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XLL6SQ6IKFYXLYWITYZCRV5IBRK5G35R/
CVE: CVE-2023-46840
Published: 2024-03-20
Description: Incorrect placement of a preprocessor directive in source code results
in logic that doesn't operate as intended when support for HVM guests is
compiled out of Xen.

CVSS Score: 4.1 (MEDIUM)
CWE: CWE-670
References: https://xenbits.xenproject.org/xsa/advisory-450.html; http://xenbits.xen.org/xsa/advisory-450.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XLL6SQ6IKFYXLYWITYZCRV5IBRK5G35R/
CVE: CVE-2023-46841
Published: 2024-03-20
Description: Recent x86 CPUs offer functionality named Control-flow Enforcement
Technology (CET).  A sub-feature of this are Shadow Stacks (CET-SS).
CET-SS is a hardware feature designed to protect against Return Oriented
Programming attacks. When enabled, traditional stacks holding both data
and return addresses are accompanied by so called "shadow stacks",
holding little more than return addresses.  Shadow stacks aren't
writable by normal instructions, and upon function returns their
contents are used to check for possible manipulation of a return address
coming from the traditional stack.

In particular certain memory accesses need intercepting by Xen.  In
various cases the necessary emulation involves kind of replaying of
the instruction.  Such replaying typically involves filling and then
invoking of a stub.  Such a replayed instruction may raise an
exceptions, which is expected and dealt with accordingly.

Unfortunately the interaction of both of the above wasn't right:
Recovery involves removal of a call frame from the (traditional) stack.
The counterpart of this operation for the shadow stack was missing.
CVSS Score: 6.5 (MEDIUM)
References: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZON4TLXG7TG4A2XZG563JMVTGQW4SF3A/; https://xenbits.xenproject.org/xsa/advisory-451.html; http://xenbits.xen.org/xsa/advisory-451.html
CVE: CVE-2023-52229
Published: 2024-03-20
Description: Missing Authorization vulnerability in Save as PDF plugin by Pdfcrowd Word Replacer Pro.This issue affects Word Replacer Pro: from n/a through 1.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/word-replacer-ultra/wordpress-word-replacer-pro-plugin-1-0-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/word-replacer-ultra/wordpress-word-replacer-pro-plugin-1-0-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-2721
Published: 2024-03-20
Description: Deserialization of Untrusted Data vulnerability in Social Media Share Buttons By Sygnoos Social Media Share Buttons.This issue affects Social Media Share Buttons: from n/a through 2.1.0.
CVSS Score: 8.2 (HIGH)
CWE: CWE-502
References: https://patchstack.com/database/vulnerability/social-media-builder/wordpress-social-media-share-buttons-plugin-2-1-0-php-object-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/social-media-builder/wordpress-social-media-share-buttons-plugin-2-1-0-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2024-1800
Published: 2024-03-20
Description: 
In Progress® Telerik® Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is possible through an insecure deserialization vulnerability.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://docs.telerik.com/report-server/knowledge-base/deserialization-vulnerability-cve-2024-1800; https://www.telerik.com/report-server; https://docs.telerik.com/report-server/knowledge-base/deserialization-vulnerability-cve-2024-1800
CVE: CVE-2024-1801
Published: 2024-03-20
Description: 
In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a local threat actor through an insecure deserialization vulnerability.
CVSS Score: 7.7 (HIGH)
CWE: CWE-502, CWE-502
References: https://docs.telerik.com/reporting/knowledge-base/deserialization-vulnerability-cve-2024-1801-cve-2024-1856; https://www.telerik.com/products/reporting.aspx; https://docs.telerik.com/reporting/knowledge-base/deserialization-vulnerability-cve-2024-1801-cve-2024-1856
CVE: CVE-2024-1811
Published: 2024-03-20
Description: A potential vulnerability has been identified in OpenText ArcSight Platform. The vulnerability could be remotely exploited.
CVSS Score: 9.8 (CRITICAL)
References: https://portal.microfocus.com/s/article/KM000027383; https://portal.microfocus.com/s/article/KM000027383
CVE: CVE-2024-1856
Published: 2024-03-20
Description: 
In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a remote threat actor through an insecure deserialization vulnerability.
CVSS Score: 8.5 (HIGH)
CWE: CWE-502, CWE-502
References: https://docs.telerik.com/reporting/knowledge-base/deserialization-vulnerability-cve-2024-1801-cve-2024-1856; https://www.telerik.com/products/reporting.aspx; https://docs.telerik.com/reporting/knowledge-base/deserialization-vulnerability-cve-2024-1801-cve-2024-1856
CVE: CVE-2023-35888
Published: 2024-03-20
Description: IBM Security Verify Governance 10.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.  IBM X-Force ID:  258375.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-311
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/258375; https://www.ibm.com/support/pages/node/7144228; https://exchange.xforce.ibmcloud.com/vulnerabilities/258375
CVE: CVE-2024-28392
Published: 2024-03-20
Description: SQL injection vulnerability in pscartabandonmentpro v.2.0.11 and before allows a remote attacker to escalate privileges via the pscartabandonmentproFrontCAPUnsubscribeJobModuleFrontController::setEmailVisualized() method.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://addons.prestashop.com/en/remarketing-shopping-cart-abandonment/16535-abandoned-cart-reminder-pro.html; https://security.friendsofpresta.org/modules/2024/03/14/pscartabandonmentpro.html; https://addons.prestashop.com/en/remarketing-shopping-cart-abandonment/16535-abandoned-cart-reminder-pro.html
CVE: CVE-2024-28395
Published: 2024-03-20
Description: SQL injection vulnerability in Best-Kit bestkit_popup v.1.7.2 and before allows a remote attacker to escalate privileges via the bestkit_popup.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://addons.prestashop.com/en/pop-up/20208-pop-up-schedule-popup-splash-window.html; https://security.friendsofpresta.org/modules/2024/03/14/bestkit_popup.html; https://addons.prestashop.com/en/pop-up/20208-pop-up-schedule-popup-splash-window.html
CVE: CVE-2024-28396
Published: 2024-03-20
Description: An issue in MyPrestaModules ordersexport v.6.0.2 and before allows a remote attacker to execute arbitrary code via the download.php component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://addons.prestashop.com/en/data-import-export/17596-orders-csv-excel-export-pro.html; https://security.friendsofpresta.org/modules/2024/03/14/ordersexport.html; https://addons.prestashop.com/en/data-import-export/17596-orders-csv-excel-export-pro.html
CVE: CVE-2023-41038
Published: 2024-03-20
Description: Firebird is a relational database. Versions 4.0.0 through 4.0.3 and version 5.0 beta1 are vulnerable to a server crash when a user uses a specific form of SET BIND statement. Any non-privileged user with minimum access to a server may type a statement with a long `CHAR` length, which causes the server to crash due to stack corruption. Versions 4.0.4.2981 and 5.0.0.117 contain fixes for this issue. No known workarounds are available.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://firebirdsql.org/en/snapshot-builds; https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-6fv8-8rwr-9692; https://firebirdsql.org/en/snapshot-builds
CVE: CVE-2023-41877
Published: 2024-03-20
Description: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A path traversal vulnerability in versions 2.23.4 and prior requires GeoServer Administrator with access to the admin console to misconfigure the Global Settings for log file location to an arbitrary location. The admin console GeoServer Logs page provides a preview of these contents. As this issue requires GeoServer administrators access, often representing a trusted party, the vulnerability has not received a patch as of time of publication. As a workaround, a system administrator responsible for running GeoServer can use the `GEOSERVER_LOG_FILE` setting to override any configuration option provided by the Global Settings page. The `GEOSERVER_LOG_LOCATION` parameter can be set as system property, environment variables, or servlet context parameters.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22, CWE-22
References: https://docs.geoserver.org/latest/en/user/configuration/globalsettings.html#log-location; https://github.com/geoserver/geoserver/security/advisories/GHSA-8g7v-vjrc-x4g5; https://docs.geoserver.org/latest/en/user/configuration/globalsettings.html#log-location
CVE: CVE-2023-51444
Published: 2024-03-20
Description: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbitrary file upload vulnerability exists in versions prior to 2.23.4 and 2.24.1 that enables an authenticated administrator with permissions to modify coverage stores through the REST Coverage Store API to upload arbitrary file contents to arbitrary file locations which can lead to remote code execution. Coverage stores that are configured using relative paths use a GeoServer Resource implementation that has validation to prevent path traversal but coverage stores that are configured using absolute paths use a different Resource implementation that does not prevent path traversal. This vulnerability can lead to executing arbitrary code. An administrator with limited privileges could also potentially exploit this to overwrite GeoServer security files and obtain full administrator privileges. Versions 2.23.4 and 2.24.1 contain a fix for this issue.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20, CWE-434, CWE-434
References: https://github.com/geoserver/geoserver/commit/ca683170c669718cb6ad4c79e01b0451065e13b8; https://github.com/geoserver/geoserver/commit/fe235b3bb1d7f05751a4a2ef5390c36f5c9e78ae; https://github.com/geoserver/geoserver/pull/7222
CVE: CVE-2024-28735
Published: 2024-03-20
Description: Unit4 Financials by Coda versions prior to 2023Q4 suffer from an incorrect access control authorization bypass vulnerability which allows an authenticated user to modify the password of any user of the application via a crafted request.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: http://financials.com; http://unit4.com; https://packetstormsecurity.com/files/177620/Financials-By-Coda-Authorization-Bypass.html
CVE: CVE-2024-29419
Published: 2024-03-20
Description: There is a Cross-site scripting (XSS) vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000R before v1.0.0-B20[PII_REDACTED].
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/X2000R/XSS_6_Wireless_settings/XSS.md; https://www.totolink.net/home/menu/detail/menu_listtpl/products/id/242/ids/33.html; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/X2000R/XSS_6_Wireless_settings/XSS.md
CVE: CVE-2024-2291
Published: 2024-03-20
Description: 
In Progress MOVEit Transfer versions released before 2022.0.11 (14.0.11), 2022.1.12 (14.1.12), 2023.0.9 (15.0.9), 2023.1.4 (15.1.4), a logging bypass vulnerability has been discovered.  An authenticated user could manipulate a request to bypass the logging mechanism within the web application which results in user activity not being logged properly.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-778
References: https://community.progress.com/s/article/MOVEit-Transfer-Service-Pack-March-2024; https://www.progress.com/moveit; https://community.progress.com/s/article/MOVEit-Transfer-Service-Pack-March-2024
CVE: CVE-2023-50967
Published: 2024-03-20
Description: latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/P3ngu1nW/CVE_Request/blob/main/latch-jose.md; https://github.com/latchset/jose; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CIFPQUCLNWEAHYYJWCQD3AZPWYIV6YT3/
CVE: CVE-2023-51445
Published: 2024-03-20
Description: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.3 and 2.24.0 that enables an authenticated administrator with workspace-level privileges to store a JavaScript payload in uploaded style/legend resources that will execute in the context of another administrator's browser when viewed in the REST Resources API.  Access to the REST Resources API is limited to full administrators by default and granting non-administrators access to this endpoint should be carefully considered as it may allow access to files containing sensitive information. Versions 2.23.3 and 2.24.0 contain a patch for this issue.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/geoserver/geoserver/commit/7db985738ff2422019ccac974cf547bae5770cad; https://github.com/geoserver/geoserver/pull/7161; https://github.com/geoserver/geoserver/security/advisories/GHSA-fh7p-5f6g-vj2w
CVE: CVE-2024-23634
Published: 2024-03-20
Description: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbitrary file renaming vulnerability exists in versions prior to 2.23.5 and 2.24.2 that enables an authenticated administrator with permissions to modify stores through the REST Coverage Store or Data Store API to rename arbitrary files and directories with a name that does not end in `.zip`. Store file uploads rename zip files to have a `.zip` extension if it doesn't already have one before unzipping the file.  This is fine for file and url upload methods where the files will be in a specific subdirectory of the data directory but, when using the external upload method, this allows arbitrary files and directories to be renamed. Renaming GeoServer files will most likely result in a denial of service, either completely preventing GeoServer from running or effectively deleting specific resources (such as a workspace, layer or style).  In some cases, renaming GeoServer files could revert to the default settings for that file which could be relatively harmless like removing contact information or have more serious consequences like allowing users to make OGC requests that the customized settings would have prevented them from making. The impact of renaming non-GeoServer files depends on the specific environment although some sort of denial of service is a likely outcome. Versions 2.23.5 and 2.24.2 contain a fix for this issue.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20, CWE-73
References: https://github.com/geoserver/geoserver/commit/5d6af2f8ba9ad7dffae59575504a[PII_REDACTED]72; https://github.com/geoserver/geoserver/commit/c37f58fbacdfa0d581a6f99195585f70b1201f0a; https://github.com/geoserver/geoserver/pull/7289
CVE: CVE-2024-23640
Published: 2024-03-20
Description: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.3 and 2.24.0 that enables an authenticated administrator with workspace-level privileges to store a JavaScript payload in uploaded style/legend resources or in a specially crafted datastore file that will execute in the context of another user's browser when viewed in the Style Publisher. Access to the Style Publisher is available to all users although data security may limit users' ability to trigger the XSS. Versions 2.23.3 and 2.24.0 contain a fix for this issue.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/geoserver/geoserver/pull/7162; https://github.com/geoserver/geoserver/pull/7181; https://github.com/geoserver/geoserver/security/advisories/GHSA-9rfr-pf2x-g4xf
CVE: CVE-2024-2703
Published: 2024-03-20
Description: A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49. Affected is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-257454 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC10U/v1.V15.03.06.49/more/formSetDeviceName_mac.md; https://vuldb.com/?ctiid.257454; https://vuldb.com/?id.257454
CVE: CVE-2024-2704
Published: 2024-03-20
Description: A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49. Affected by this vulnerability is the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257455. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC10U/v1.V15.03.06.49/more/formSetFirewallCfg.md; https://vuldb.com/?ctiid.257455; https://vuldb.com/?id.257455
CVE: CVE-2024-1992
Published: 2024-03-20
Description: Rejected reason: Rejected as duplicate of CVE-2024-2306
CVE: CVE-2024-2625
Published: 2024-03-20
Description: Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
References: https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_19.html; https://issues.chromium.org/issues/327740539; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D3Z6CRRN4J3IUZPJZVURGMRBN6WFPTU/
CVE: CVE-2024-2626
Published: 2024-03-20
Description: Out of bounds read in Swiftshader in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_19.html; https://issues.chromium.org/issues/40945098; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D3Z6CRRN4J3IUZPJZVURGMRBN6WFPTU/
CVE: CVE-2024-2627
Published: 2024-03-20
Description: Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_19.html; https://issues.chromium.org/issues/41493290; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D3Z6CRRN4J3IUZPJZVURGMRBN6WFPTU/