deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-6538
Published: 2024-11-25
Description: A flaw was found in OpenShift Console. A Server Side Request Forgery (SSRF) attack can happen if an attacker supplies all or part of a URL to the server to query. The server is considered to be in a privileged network position and can often reach exposed services that aren't readily available to clients due to network filtering. Leveraging such an attack vector, the attacker can have an impact on other services and potentially disclose information or have other nefarious effects on the system.
The /api/dev-console/proxy/internet endpoint on the OpenShift Console allows authenticated users to have the console's pod perform arbitrary and fully controlled HTTP(s) requests. The full response to these requests is returned by the endpoint.
While the name of this endpoint suggests the requests are only bound to the internet, no such checks are in place. An authenticated user can therefore ask the console to perform arbitrary HTTP requests from outside the cluster to a service inside the cluster.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918
References: https://access.redhat.com/errata/RHSA-2025:14397; https://access.redhat.com/errata/RHSA-2025:19058; https://access.redhat.com/errata/RHSA-2025:7863
CVE: CVE-2024-10270
Published: 2024-11-25
Description: A vulnerability was found in the Keycloak-services package. If untrusted data is passed to the SearchQueryUtils method, it could lead to a denial of service (DoS) scenario by exhausting system resources due to a Regex complexity.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1333
References: https://access.redhat.com/errata/RHSA-2024:10175; https://access.redhat.com/errata/RHSA-2024:10176; https://access.redhat.com/errata/RHSA-2024:10177
CVE: CVE-2024-10451
Published: 2024-11-25
Description: A flaw was found in Keycloak. This issue occurs because sensitive runtime values, such as passwords, may be captured during the Keycloak build process and embedded as default values in bytecode, leading to unintended information disclosure. In Keycloak 26, sensitive data specified directly in environment variables during the build process is also stored as a default values, making it accessible during runtime. Indirect usage of environment variables for SPI options and Quarkus properties is also vulnerable due to unconditional expansion by PropertyMapper logic, capturing sensitive data as default values in all Keycloak versions up to 26.0.2.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-798
References: https://access.redhat.com/errata/RHSA-2024:10175; https://access.redhat.com/errata/RHSA-2024:10176; https://access.redhat.com/errata/RHSA-2024:10177
CVE: CVE-2024-10492
Published: 2024-11-25
Description: A vulnerability was found in Keycloak. A user with high privileges could read sensitive information from a Vault file that is not within the expected context. This attacker must have previous high access to the Keycloak server in order to perform resource creation, for example, an LDAP provider configuration and set up a Vault read file, which will only inform whether that file exists or not.
CVSS Score: 2.7 (LOW)
CWE: CWE-73
References: https://access.redhat.com/errata/RHSA-2024:10175; https://access.redhat.com/errata/RHSA-2024:10176; https://access.redhat.com/errata/RHSA-2024:10177
CVE: CVE-2024-11661
Published: 2024-11-25
Description: A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file profile.php of the component Profile Image Handler. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The researcher submit confuses the vulnerability class of this issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284, CWE-434, CWE-434
References: https://github.com/anqi12301/CVE/issues/1; https://vuldb.com/?ctiid.285982; https://vuldb.com/?id.285982
CVE: CVE-2024-11662
Published: 2024-11-25
Description: A vulnerability was found in welliamcao OpsManage 3.0.1/3.0.2/3.0.3/3.0.4/3.0.5. It has been rated as critical. This issue affects the function deploy_host_vars of the file /apps/api/views/deploy_api.py of the component API Endpoint. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20, CWE-502
References: https://github.com/Sp1d3rL1/OpsManage_RCE; https://github.com/Sp1d3rL1/OpsManage_RCE/blob/main/OpsManage%20RCE.md; https://vuldb.com/?ctiid.285983
CVE: CVE-2024-9666
Published: 2024-11-25
Description: A vulnerability was found in the Keycloak Server. The Keycloak Server is vulnerable to a denial of service (DoS) attack due to improper handling of proxy headers. When Keycloak is configured to accept incoming proxy headers, it may accept non-IP values, such as obfuscated identifiers, without proper validation. This issue can lead to costly DNS resolution operations, which an attacker could exploit to tie up IO threads and potentially cause a denial of service.
The attacker must have access to send requests to a Keycloak instance that is configured to accept proxy headers, specifically when reverse proxies do not overwrite incoming headers, and Keycloak is configured to trust these headers.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-444
References: https://access.redhat.com/errata/RHSA-2024:10175; https://access.redhat.com/errata/RHSA-2024:10176; https://access.redhat.com/errata/RHSA-2024:10177
CVE: CVE-2021-23282
Published: 2024-11-25
Description: Eaton Intelligent Power Manager (IPM) prior to 1.70 is vulnerable to stored Cross site scripting. The
vulnerability exists due to insufficient validation of input from certain resources by the IPM software.
The attacker would need access to the local Subnet and an administrator interaction to compromise
the system
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-79
References: https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-Vulnerability-Advisory_1001a_V1.0.pdf
CVE: CVE-2022-33861
Published: 2024-11-25
Description: IPP software versions prior to v1.71 do not sufficiently verify the authenticity of data, in a
way that causes it to accept invalid data.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-345
References: https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/ETN-VA-2022-1011.pdf
CVE: CVE-2022-33862
Published: 2024-11-25
Description: IPP software prior to v1.71 is vulnerable to default credential vulnerability. This could
lead attackers to identify and access vulnerable systems.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-287
References: https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/ETN-VA-2022-1011.pdf
CVE: CVE-2024-11663
Published: 2024-11-25
Description: A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument keywords leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/disinroot/CVE/issues/1; https://vuldb.com/?ctiid.285985; https://vuldb.com/?id.285985
CVE: CVE-2024-11664
Published: 2024-11-25
Description: A vulnerability, which was classified as critical, has been found in eNMS up to 4.2. Affected by this issue is the function multiselect_filtering of the file eNMS/controller.py of the component TGZ File Handler. The manipulation leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 22b0b443acca740fc83b5544165c1f53eff3f529. It is recommended to apply a patch to fix this issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://github.com/eNMS-automation/eNMS/pull/419; https://github.com/eNMS-automation/eNMS/pull/419#issuecomment[PII_REDACTED]; https://github.com/eNMS-automation/eNMS/pull/419/commits/22b0b443acca740fc83b5544165c1f53eff3f529
CVE: CVE-2020-12491
Published: 2024-11-25
Description: Improper control of framework service permissions with possibility of some sensitive device information leakage.
CWE: CWE-306
References: https://www.vivo.com/en/support/security-advisory-detail?id=11
CVE: CVE-2020-12492
Published: 2024-11-25
Description: Improper handling of WiFi information by framework services can allow certain malicious applications to obtain sensitive information.
CWE: CWE-306
References: https://www.vivo.com/en/support/security-advisory-detail?id=12
CVE: CVE-2024-11403
Published: 2024-11-25
Description: There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used by the JPEG XL encoder when doing JPEG recompression (i.e. if using JxlEncoderAddJPEGFrame on untrusted input) does not properly check bounds in the presence of incomplete codes. This could lead to an out-of-bounds write. In jpegli which is released as part of the same project, the same vulnerability is present. However, the relevant buffer is part of a bigger structure, and the code makes no assumptions on the values that could be overwritten. The issue could however cause jpegli to read uninitialised memory, or addresses of functions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-787
References: https://github.com/libjxl/libjxl/commit/9cc451b91b74ba470fd72bd48c121e9f33d24c99
CVE: CVE-2024-11498
Published: 2024-11-25
Description: There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/libjxl/libjxl/pull/3943
CVE: CVE-2024-27134
Published: 2024-11-25
Description: Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the spark_udf() MLflow API is called.
CVSS Score: 7.0 (HIGH)
CWE: CWE-276, CWE-367
References: https://github.com/mlflow/mlflow/pull/10874
CVE: CVE-2024-11670
Published: 2024-11-25
Description: Incorrect authorization in the permission validation component of Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows a malicious authenticated user to bypass the "View Password" permission via specific actions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://devolutions.net/security/advisories/DEVO-2024-0015
CVE: CVE-2024-11671
Published: 2024-11-25
Description: Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA validation via data source switching.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-287
References: https://devolutions.net/security/advisories/DEVO-2024-0016
CVE: CVE-2024-11672
Published: 2024-11-25
Description: Incorrect authorization in the add permission component in Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows an authenticated malicious user to bypass the "Add" permission via the import in vault feature.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://devolutions.net/security/advisories/DEVO-2024-0016
CVE: CVE-2023-26280
Published: 2024-11-25
Description: IBM Jazz Foundation 7.0.2 and 7.0.3 could allow a user to change their dashboard using a specially crafted HTTP request due to improper access control.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-266
References: https://www.ibm.com/support/pages/node/7176207
CVE: CVE-2023-45181
Published: 2024-11-25
Description: IBM Jazz Foundation 7.0.2 and below are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7176207
CVE: CVE-2024-45755
Published: 2024-11-25
Description: An issue was discovered in Centreon centreon-dsm-server 24.10.x before 24.10.0, 24.04.x before 24.04.3, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before 22.10.2. SQL injection can occur in the form to configure Centreon DSM slots. Exploitation is only accessible to authenticated users with high-privileged access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/centreon/centreon/releases; https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-45755-centreon-dsm-high-severity-4066
CVE: CVE-2024-45756
Published: 2024-11-25
Description: An issue was discovered in Centreon centreon-open-tickets 24.10.x before 24.10.0, 24.04.x before 24.04.2, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before 22.10.2. SQL injection can occur in the form to create a ticket. Exploitation is only accessible to authenticated users with high-privileged access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/centreon/centreon/release; https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-45756-centreon-open-tickets-high-severity-4064
CVE: CVE-2024-52787
Published: 2024-11-25
Description: An issue in the upload_documents method of libre-chat v0.0.6 allows attackers to execute a path traversal via supplying a crafted filename in an uploaded file.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://gist.github.com/jxfzzzt/276a6e8cfbc54d2c2711bb51d8d3dff3; https://github.com/vemonet/libre-chat/commit/dbb8e3400e[PII_REDACTED]783d74c9cc54310cb72b; https://github.com/vemonet/libre-chat/issues/10
CVE: CVE-2024-7915
Published: 2024-11-25
Description: The application Sensei Mac Cleaner contains a local privilege escalation vulnerability, allowing an attacker to perform multiple operations as the root user. These operations include arbitrary file deletion and writing, loading and unloading daemons, manipulating file permissions, and loading extensions, among other actions.


The vulnerable module org.cindori.SenseiHelper can be contacted via XPC. While the module performs client validation, it relies on the client's PID obtained through the public processIdentifier property of the NSXPCConnection class. This approach makes the module susceptible to a PID Reuse Attack, enabling an attacker to impersonate a legitimate client and send crafted XPC messages to invoke arbitrary methods exposed by the HelperProtocol interface.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://pentraze.com/vulnerability-reports
CVE: CVE-2024-8272
Published: 2024-11-25
Description: The com.uaudio.bsd.helper service, responsible for handling privileged operations, fails to implement critical client validation during XPC inter-process communication (IPC). Specifically, the service does not verify the code requirements, entitlements, or security flags of any client attempting to establish a connection. This lack of proper validation allows unauthorized clients to exploit the service's methods and escalate privileges to root.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://pentraze.com/vulnerability-reports
CVE: CVE-2024-32468
Published: 2024-11-25
Description: Deno is a runtime for JavaScript and TypeScript written in rust. Several cross-site scripting vulnerabilities existed in the `deno_doc` crate which lead to Self-XSS with deno doc --html. 1.) XSS in generated `search_index.js`, `deno_doc` outputs a JavaScript file for searching. However, the generated file used `innerHTML` on unsanitzed HTML input. 2.) XSS via property, method and enum names, `deno_doc` did not sanitize property names, method names and enum names. The first XSS most likely didn't have an impact since `deno doc --html` is expected to be used locally with own packages.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/denoland/deno/security/advisories/GHSA-qqwr-j9mm-fhw6; https://github.com/denoland/deno_doc/blob/dc556c848831d7ae48f3eff2ababc6e75eb6b73e/src/html/templates/pages/search.js#L120-L144
CVE: CVE-2024-51723
Published: 2024-11-25
Description: A Stored Cross-Site Scripting (XSS) vulnerability in the Management Console of BlackBerry AtHoc version 7.15 could allow an attacker to potentially execute actions in the context of the victim's session.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://support.blackberry.com/pkb/s/article/140250
CVE: CVE-2024-52529
Published: 2024-11-25
Description: Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For users with the following configuration: 1. An allow policy that selects a Layer 3 destination and a port range `AND` 2. A Layer 7 allow policy that selects a specific port within the first policy's range the Layer 7 enforcement would not occur for the traffic selected by the Layer 7 policy. This issue only affects users who use Cilium's port range functionality, which was introduced in Cilium v1.16. This issue is patched in PR #35150. This issue affects Cilium v1.16 between v1.16.0 and v1.16.3 inclusive. This issue is patched in Cilium v1.16.4. Users are advised to upgrade. Users with network policies that match the pattern described above can work around the issue by rewriting any policies that use port ranges to individually specify the ports permitted for traffic.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-755
References: https://github.com/cilium/cilium/pull/35150; https://github.com/cilium/cilium/security/advisories/GHSA-xg58-75qf-9r67
CVE: CVE-2024-52811
Published: 2024-11-25
Description: The ngtcp2 project is an effort to implement IETF QUIC protocol in C. In affected versions acks are not validated before being written to the qlog leading to a buffer overflow. In `ngtcp2_conn::conn_recv_pkt` for an ACK, there was new logic that got added to skip `conn_recv_ack` if an ack has already been processed in the payload. However, this causes us to also skip `ngtcp2_pkt_validate_ack`. The ack which was skipped still got written to qlog. The bug occurs in `ngtcp2_qlog::write_ack_frame`. It is now possible to reach this code with an invalid ack, suppose `largest_ack=0` and `first_ack_range=15`. Subtracting `largest_ack - first_ack_range` will lead to an integer underflow which is 20 chars long. However, the ngtcp2 qlog code assumes the number written is a signed integer and only accounts for 19 characters of overhead (see `NGTCP2_QLOG_ACK_FRAME_RANGE_OVERHEAD`). Therefore, we overwrite the buffer causing a heap overflow. This is high priority and could potentially impact many users if they enable qlog. qlog is disabled by default. Due to its overhead, it is most likely used for debugging purpose, but the actual use is unknown. ngtcp2 v1.9.1 fixes the bug and users are advised to upgrade. Users unable to upgrade should not turn on qlog.
CVSS Score: 8.2 (HIGH)
CWE: CWE-670
References: https://github.com/ngtcp2/ngtcp2/commit/44b662bd139c23fee1703bf256c13349e2e624a1; https://github.com/ngtcp2/ngtcp2/commit/e550c1a414318d0f3f01fca1a621ae0b0428ca15; https://github.com/ngtcp2/ngtcp2/security/advisories/GHSA-4gmv-gf46-r4g5
CVE: CVE-2024-53255
Published: 2024-11-25
Description: BoidCMS is a free and open-source flat file CMS for building simple websites and blogs, developed using PHP and uses JSON as a database. In affected versions a reflected Cross-site Scripting (XSS) vulnerability exists in the /admin?page=media endpoint in the file parameter, allowing an attacker to inject arbitrary JavaScript code. This code could be used to steal the user's session cookie, perform phishing attacks, or deface the website. This issue has been addressed in version 2.1.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/BoidCMS/BoidCMS/commit/42f4d703a87f5199bbd701b3495a26c91b9cfab7; https://github.com/BoidCMS/BoidCMS/security/advisories/GHSA-7q7m-cgw8-px4r
CVE: CVE-2024-53599
Published: 2024-11-25
Description: A cross-site scripting (XSS) vulnerability in the /scroll.php endpoint of LafeLabs Chaos v0.0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/NoPurposeInLife/vulnerability_research/tree/main/CVE-2024-53599
CVE: CVE-2024-53258
Published: 2024-11-25
Description: Autolab is a course management service that enables auto-graded programming assignments. From Autolab versions v.3.0.0 onward students can download all assignments from another student, as long as they are logged in, using the download_all_submissions feature. This can allow for leakage of submissions to unauthorized users, such as downloading submissions from other students in the class, or even instructor test submissions, given they know their user IDs. This issue has been patched in commit `1aa4c769` which is not yet in a release version, but is expected to be included in version 3.0.3. Users are advised to either manually patch or to wait for version 3.0.3. As a workaround administrators can disable the feature.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-359, CWE-862, CWE-862
References: https://github.com/autolab/Autolab/commit/1aa4c7690892fb458d2c61ff86739f368e34769d; https://github.com/autolab/Autolab/security/advisories/GHSA-84qc-7773-2gg3
CVE: CVE-2024-53261
Published: 2024-11-25
Description: SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. "Unsanitized input from *the request URL* flows into `end`, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack (XSS)." The files `packages/kit/src/exports/vite/dev/index.js` and `packages/kit/src/exports/vite/utils.js` both contain user controllable data which under specific conditions may flow to dev mode pages. There is little to no expected impact. The Vite development is not exposed to the network by default and even if someone were able to trick a developer into executing an XSS against themselves, a development database should not have any sensitive data. None the less this issue has been addressed in version 2.8.3 and all users are advised to upgrade.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/sveltejs/kit/commit/d338d4635a7fd947ba5112df6ee632c4a0979438; https://github.com/sveltejs/kit/security/advisories/GHSA-rjjv-87mx-6x3h
CVE: CVE-2024-53262
Published: 2024-11-25
Description: SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. The static error.html template for errors contains placeholders that are replaced without escaping the content first. error.html is the page that is rendered when everything else fails. It can contain the following placeholders: %sveltekit.status% — the HTTP status, and %sveltekit.error.message% — the error message.  This leads to possible injection if an app explicitly creates an error with a message that contains user controlled content. Only applications where user provided input is used in the `Error` message will be vulnerable, so the vast majority of applications will not be vulnerable This issue has been addressed in version 2.8.3 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/sveltejs/kit/commit/134e36343ef57ed7e6e2b3bb9e7f05ad37865794; https://github.com/sveltejs/kit/security/advisories/GHSA-mh2x-fcqh-fmqv; https://kit.svelte.dev/docs/errors