deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-33622
Published: 2024-06-18
Description: Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, sensitive information may be obtained and/or the information stored in the database may be altered by a remote authenticated attacker.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-306
References: https://jvn.jp/en/jp/JVN65171386/; https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html; https://jvn.jp/en/jp/JVN65171386/
CVE: CVE-2024-34024
Published: 2024-06-18
Description: Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not.
CVSS Score: 6.3 (MEDIUM)
References: https://jvn.jp/en/jp/JVN65171386/; https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html; https://jvn.jp/en/jp/JVN65171386/
CVE: CVE-2024-37079
Published: 2024-06-18
Description: vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-37079
CVE: CVE-2024-37080
Published: 2024-06-18
Description: vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-122
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453
CVE: CVE-2024-37081
Published: 2024-06-18
Description: The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance.
CVSS Score: 7.8 (HIGH)
CWE: CWE-556
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453
CVE: CVE-2024-3276
Published: 2024-06-18
Description: The Lightbox & Modal Popup WordPress Plugin  WordPress plugin before 2.7.28, foobox-image-lightbox-premium WordPress plugin before 2.7.28 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/996d3247-ebdd-49d1-a1a3-ceedcf9f2f95/; https://wpscan.com/vulnerability/996d3247-ebdd-49d1-a1a3-ceedcf9f2f95/
CVE: CVE-2024-4094
Published: 2024-06-18
Description: The Simple Share Buttons Adder WordPress plugin before 8.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/04b2feba-e009-4fce-8539-5dfdb4300433/; https://wpscan.com/vulnerability/04b2feba-e009-4fce-8539-5dfdb4300433/
CVE: CVE-2024-5172
Published: 2024-06-18
Description: The Expert Invoice WordPress plugin through 1.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/65d84e69-0548-4c7d-bcde-5777d72da555/; https://wpscan.com/vulnerability/65d84e69-0548-4c7d-bcde-5777d72da555/
CVE: CVE-2024-5533
Published: 2024-06-18
Description: The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.25.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20, CWE-79
References: https://www.elegantthemes.com/api/changelog/divi.txt; https://www.wordfence.com/threat-intel/vulnerabilities/id/6571a899-f217-434f-bbed-b1faf77a8d8b?source=cve; https://www.elegantthemes.com/api/changelog/divi.txt
CVE: CVE-2024-5899
Published: 2024-06-18
Description: When Bazel Plugin in intellij imports a project (either using "import project" or "Auto import") the dialog for trusting the project is not displayed. This comes from the fact that both call the method ProjectBuilder.createProject which then calls ProjectManager.getInstance().createProject. This method, as its name suggests is intended to create a new project, not to import an existing one. 
We recommend upgrading to version 2024.06.04.0.2 or beyond for the IntelliJ, CLion and Android Studio Bazel plugins.
CVSS Score: 3.3 (LOW)
CWE: CWE-862
References: https://github.com/bazelbuild/intellij/releases/tag/v2024.06.04-aswb-stable; https://github.com/bazelbuild/intellij/security/advisories/GHSA-hh9f-wmhw-46vg; https://github.com/bazelbuild/intellij/releases/tag/v2024.06.04-aswb-stable
CVE: CVE-2024-5953
Published: 2024-06-18
Description: A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-1288
References: https://access.redhat.com/errata/RHSA-2024:4633; https://access.redhat.com/errata/RHSA-2024:4997; https://access.redhat.com/errata/RHSA-2024:5192
CVE: CVE-2024-6108
Published: 2024-06-18
Description: A vulnerability was found in Genexis Tilgin Home Gateway 322_AS0500-03_05_13_05. It has been classified as problematic. Affected is an unknown function of the file /vood/cgi-bin/vood_view.cgi?act=index&lang=EN# of the component Login. The manipulation of the argument errmsg leads to basic cross site scripting. It is possible to launch the attack remotely. VDB-268854 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-80
References: https://vuldb.com/?ctiid.268854; https://vuldb.com/?id.268854; https://vuldb.com/?submit.353708
CVE: CVE-2024-38504
Published: 2024-06-18
Description: In JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to articles
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-38505
Published: 2024-06-18
Description: In JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-38506
Published: 2024-06-18
Description: In JetBrains YouTrack before 2024.2.34646 user without appropriate permissions could enable the auto-attach option for workflows
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-38507
Published: 2024-06-18
Description: In JetBrains Hub before 2024.2.34646 stored XSS via project description was possible
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-5967
Published: 2024-06-18
Description: A vulnerability was found in Keycloak. The LDAP testing endpoint allows changing the Connection URL  independently without re-entering the currently configured LDAP bind credentials. This flaw allows an attacker with admin access (permission manage-realm) to change the LDAP host URL ("Connection URL") to a machine they control. The Keycloak server will connect to the attacker's host and try to authenticate with the configured credentials, thus leaking them to the attacker. As a consequence, an attacker who has compromised the admin console or compromised a user with sufficient privileges can leak domain credentials and attack the domain.
CVSS Score: 2.7 (LOW)
CWE: CWE-276
References: https://access.redhat.com/errata/RHSA-2024:6493; https://access.redhat.com/errata/RHSA-2024:6494; https://access.redhat.com/errata/RHSA-2024:6495
CVE: CVE-2024-6109
Published: 2024-06-18
Description: A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file addmeasurement.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268855.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/PHJ-doit/cve/issues/1; https://vuldb.com/?ctiid.268855; https://vuldb.com/?id.268855
CVE: CVE-2024-6110
Published: 2024-06-18
Description: A vulnerability was found in itsourcecode Magbanua Beach Resort Online Reservation System up to 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file controller.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-268856.
CVSS Score: 7.3 (HIGH)
CWE: CWE-434
References: https://github.com/Laster-dev/CVE/issues/1; https://vuldb.com/?ctiid.268856; https://vuldb.com/?id.268856
CVE: CVE-2024-6111
Published: 2024-06-18
Description: A vulnerability classified as critical has been found in itsourcecode Pool of Bethesda Online Reservation System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-268857 was assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/wangyuan-ui/CVE/issues/1; https://vuldb.com/?ctiid.268857; https://vuldb.com/?id.268857
CVE: CVE-2024-6112
Published: 2024-06-18
Description: A vulnerability classified as critical was found in itsourcecode Pool of Bethesda Online Reservation System 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument log_email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-268858 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/wangyuan-ui/CVE/issues/2; https://vuldb.com/?ctiid.268858; https://vuldb.com/?id.268858
CVE: CVE-2024-6114
Published: 2024-06-18
Description: A vulnerability classified as critical has been found in itsourcecode Monbela Tourist Inn Online Reservation System up to 1.0. Affected is an unknown function of the file controller.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-268866 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-434
References: https://github.com/wangyuan-ui/CVE/issues/4; https://vuldb.com/?ctiid.268866; https://vuldb.com/?id.268866
CVE: CVE-2024-6115
Published: 2024-06-18
Description: A vulnerability classified as critical was found in itsourcecode Simple Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file add_room.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268867.
CVSS Score: 7.3 (HIGH)
CWE: CWE-434
References: https://github.com/wangyuan-ui/CVE/issues/5; https://vuldb.com/?ctiid.268867; https://vuldb.com/?id.268867
CVE: CVE-2023-47726
Published: 2024-06-18
Description: IBM QRadar Suite Software 1.10.12.0 through 1.10.21.0 and IBM Cloud Pak for Security 1.10.12.0 through 1.10.21.0 could allow an authenticated user to execute certain arbitrary commands due to improper input validation.  IBM X-Force ID:  272087.
CVSS Score: 7.1 (HIGH)
CWE: CWE-1287
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/272087; https://https://www.ibm.com/support/pages/node/7157750; https://exchange.xforce.ibmcloud.com/vulnerabilities/272087
CVE: CVE-2024-5750
Published: 2024-06-18
Description: Rejected reason: ** REJECT ** Not a valid security issue.
CVE: CVE-2024-6116
Published: 2024-06-18
Description: A vulnerability, which was classified as critical, has been found in itsourcecode Simple Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file edit_room.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-268868.
CVSS Score: 7.3 (HIGH)
CWE: CWE-434
References: https://github.com/wangyuan-ui/CVE/issues/6; https://vuldb.com/?ctiid.268868; https://vuldb.com/?id.268868
CVE: CVE-2024-5275
Published: 2024-06-18
Description: A hard-coded password in the FileCatalyst TransferAgent can be found which can be used to unlock the keystore from which contents may be read out, for example, the private key for certificates. Exploit of this vulnerability could lead to a machine-in-the-middle (MiTM) attack against users of the agent. This issue affects all versions of FileCatalyst Direct from 3.8.10 Build 138 and earlier and all versions of FileCatalyst Workflow from 5.1.6 Build 130 and earlier.
CVSS Score: 7.8 (HIGH)
CWE: CWE-259
References: https://support.fortra.com/filecatalyst/kb-articles/action-required-by-june-18th-2024-filecatalyst-transferagent-ssl-and-localhost-changes-MWQwYjI3ZGItZmQyMS1lZjExLTg0MGItMDAyMjQ4MGE0MDNm; https://www.fortra.com/security/advisory/fi-2024-007; https://support.fortra.com/filecatalyst/kb-articles/action-required-by-june-18th-2024-filecatalyst-transferagent-ssl-and-localhost-changes-MWQwYjI3ZGItZmQyMS1lZjExLTg0MGItMDAyMjQ4MGE0MDNm
CVE: CVE-2024-21685
Published: 2024-06-18
Description: This High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0, and 9.15.0 of Jira Core Data Center. 
	
	This Information Disclosure vulnerability, with a CVSS Score of 7.4, allows an unauthenticated attacker to view sensitive information via an Information Disclosure vulnerability which has high impact to confidentiality, no impact to integrity, no impact to availability, and requires user interaction. 
	
	Atlassian recommends that Jira Core Data Center customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:
		
		Jira Core Data Center 9.4: Upgrade to a release greater than or equal to 9.4.21
		
		Jira Core Data Center 9.12: Upgrade to a release greater than or equal to 9.12.8
		
		Jira Core Data Center 9.16: Upgrade to a release greater than or equal to 9.16.0
		
		
	
	See the release notes. You can download the latest version of Jira Core Data Center from the download center. 
	
	This vulnerability was found internally.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://confluence.atlassian.com/pages/viewpage.action?pageId=[PII_REDACTED]; https://jira.atlassian.com/browse/JRASERVER-77713; https://confluence.atlassian.com/pages/viewpage.action?pageId=[PII_REDACTED]
CVE: CVE-2024-37799
Published: 2024-06-18
Description: CodeProjects Restaurant Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the reserv_id parameter at view_reservations.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://code-projects.org/restaurant-reservation-system-in-php-with-source-code/; https://github.com/himanshubindra/CVEs/blob/main/CVE-2024-37799; https://code-projects.org/restaurant-reservation-system-in-php-with-source-code/
CVE: CVE-2024-37800
Published: 2024-06-18
Description: CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Date parameter at index.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://code-projects.org/restaurant-reservation-system-in-php-with-source-code/; https://github.com/SandeepRajauriya/CVEs/blob/main/CVE-2024-37800; https://code-projects.org/restaurant-reservation-system-in-php-with-source-code/
CVE: CVE-2024-37802
Published: 2024-06-18
Description: CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Patient Info module via the searvalu parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://code-projects.org/health-care-hospital-in-php-css-js-and-mysql-free-download/; https://github.com/SandeepRajauriya/CVEs/blob/main/CVE-2024-37802; https://code-projects.org/health-care-hospital-in-php-css-js-and-mysql-free-download/
CVE: CVE-2024-37803
Published: 2024-06-18
Description: Multiple stored cross-site scripting (XSS) vulnerabilities in CodeProjects Health Care hospital Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname and lname parameters under the Staff Info page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://code-projects.org/health-care-hospital-in-php-css-js-and-mysql-free-download/; https://github.com/himanshubindra/CVEs/blob/main/CVE-2024-37803; https://code-projects.org/health-care-hospital-in-php-css-js-and-mysql-free-download/
CVE: CVE-2024-37904
Published: 2024-06-18
Description: Minder is an open source Software Supply Chain Security Platform. Minder's Git provider is vulnerable to a denial of service from a maliciously configured GitHub repository. The Git provider clones users repositories using the `github.com/go-git/go-git/v5` library on lines `L55-L89`. The Git provider does the following on the lines `L56-L62`. First, it sets the `CloneOptions`, specifying the url, the depth etc. It then validates the options. It then sets up an in-memory filesystem, to which it clones and Finally, it clones the repository. The `(g *Git) Clone()` method is vulnerable to a DoS attack: A Minder user can instruct Minder to clone a large repository which will exhaust memory and crash the Minder server. The root cause of this vulnerability is a combination of the following conditions: 1. Users can control the Git URL which Minder clones, 2. Minder does not enforce a size limit to the repository, 3. Minder clones the entire repository into memory. This issue has been addressed in commit `7979b43` which has been included in release version v0.0.52. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-400
References: https://github.com/stacklok/minder/blob/85985445c8ac3e51f03372e99c7b2f08a6d274aa/internal/providers/git/git.go#L55-L89; https://github.com/stacklok/minder/blob/85985445c8ac3e51f03372e99c7b2f08a6d274aa/internal/providers/git/git.go#L56-L62; https://github.com/stacklok/minder/commit/7979b43
CVE: CVE-2024-38347
Published: 2024-06-18
Description: CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Room Information module via the id parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://code-projects.org/health-care-hospital-in-php-css-js-and-mysql-free-download/; https://github.com/SandeepRajauriya/CVEs/blob/main/CVE-2024-38347; https://code-projects.org/health-care-hospital-in-php-css-js-and-mysql-free-download/
CVE: CVE-2024-38348
Published: 2024-06-18
Description: CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module via the searvalu parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://code-projects.org/health-care-hospital-in-php-css-js-and-mysql-free-download/; https://github.com/SandeepRajauriya/CVEs/blob/main/CVE-2024-38348; https://code-projects.org/health-care-hospital-in-php-css-js-and-mysql-free-download/
CVE: CVE-2024-38351
Published: 2024-06-18
Description: Pocketbase is an open source web backend written in go. In affected versions a malicious user may be able to compromise other user accounts. In order to be exploited users must have both OAuth2 and Password auth methods enabled. A possible attack scenario could be: 1. a malicious actor register with the targeted user's email (it is unverified), 2. at some later point in time the targeted user stumble on your app and decides to sign-up with OAuth2 (_this step could be also initiated by the attacker by sending an invite email to the targeted user_), 3. on successful OAuth2 auth we search for an existing PocketBase user matching with the OAuth2 user's email and associate them, 4. because we haven't changed the password of the existing PocketBase user during the linking, the malicious actor has access to the targeted user account and will be able to login with the initially created email/password. To prevent this for happening we now reset the password for this specific case if the previously created user wasn't verified (an exception to this is if the linking is explicit/manual, aka. when you send `Authorization:TOKEN` with the OAuth2 auth call). Additionally to warn existing users we now send an email alert in case the user has logged in with password but has at least one OAuth2 account linked. The flow will be further improved with ongoing refactoring and we will start sending emails for "unrecognized device" logins (OTP and MFA is already implemented and will be available with the next v0.23.0 release in the near future). For the time being users are advised to update to version 0.22.14. There are no known workarounds for this vulnerability.


CVSS Score: 5.4 (MEDIUM)
CWE: CWE-287
References: https://github.com/pocketbase/pocketbase/discussions/4355; https://github.com/pocketbase/pocketbase/security/advisories/GHSA-m93w-4fxv-r35v; https://github.com/pocketbase/pocketbase/discussions/4355
CVE: CVE-2022-23829
Published: 2024-06-18
Description: A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native System Management Mode (SMM) ROM protections.
CVSS Score: 8.2 (HIGH)
CWE: CWE-284
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-1041.html; https://www.amd.com/en/resources/product-security/bulletin/amd-sb-1041.html