deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-23368
Published: 2024-07-01
Description: Memory corruption when allocating and accessing an entry in an SMEM partition.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html
CVE: CVE-2024-23372
Published: 2024-07-01
Description: Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.
CVSS Score: 8.4 (HIGH)
CWE: CWE-190, CWE-190
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html
CVE: CVE-2024-23373
Published: 2024-07-01
Description: Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416, CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html
CVE: CVE-2024-23380
Published: 2024-07-01
Description: Memory corruption while handling user packets during VBO bind operation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416, CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html; https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html
CVE: CVE-2024-34696
Published: 2024-07-01
Description: GeoServer is an open source server that allows users to share and edit geospatial data. Starting in version 2.10.0 and prior to versions 2.24.4 and 2.25.1, GeoServer's Server Status page and REST API lists all environment variables and Java properties to any GeoServer user with administrative rights as part of those modules' status message. These variables/properties can also contain sensitive information, such as database passwords or API keys/tokens. Additionally, many community-developed GeoServer container images `export` other credentials from their start-up scripts as environment variables to the GeoServer (`java`) process. The precise scope of the issue depends on which container image is used and how it is configured.

The `about status` API endpoint which powers the Server Status page is only available to administrators.Depending on the operating environment, administrators might have legitimate access to credentials in other ways, but this issue defeats more sophisticated controls (like break-glass access to secrets or role accounts).By default, GeoServer only allows same-origin authenticated API access. This limits the scope for a third-party attacker to use an administrator’s credentials to gain access to credentials. The researchers who found the vulnerability were unable to determine any other conditions under which the GeoServer REST API may be available more broadly.

Users should update container images to use GeoServer 2.24.4 or 2.25.1 to get the bug fix. As a workaround, leave environment variables and Java system properties hidden by default. Those who provide the option to re-enable it should communicate the impact and risks so that users can make an informed choice.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/geoserver/geoserver/security/advisories/GHSA-j59v-vgcr-hxvf; https://github.com/geoserver/geoserver/security/advisories/GHSA-j59v-vgcr-hxvf
CVE: CVE-2024-6375
Published: 2024-07-01
Description: A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, prior to 5.0.22, MongoDB Server v6.0 versions, prior to 6.0.11 and MongoDB Server v7.0 versions prior to 7.0.3.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-285, CWE-862
References: https://jira.mongodb.org/browse/SERVER-79327; https://jira.mongodb.org/browse/SERVER-79327
CVE: CVE-2024-6376
Published: 2024-07-01
Description: MongoDB Compass may be susceptible to code injection due to insufficient sandbox protection settings with the usage of ejson shell parser in Compass' connection handling. This issue affects MongoDB Compass versions prior to version 1.42.2
CVSS Score: 7.0 (HIGH)
CWE: CWE-20, CWE-94
References: https://jira.mongodb.org/browse/COMPASS-7496; https://jira.mongodb.org/browse/COMPASS-7496
CVE: CVE-2024-36401
Published: 2024-07-01
Description: GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users through specially crafted input against a default GeoServer installation due to unsafely evaluating property names as XPath expressions.

The GeoTools library API that GeoServer calls evaluates property/attribute names for feature types in a way that unsafely passes them to the commons-jxpath library which can execute arbitrary code when evaluating XPath expressions. This XPath evaluation is intended to be used only by complex feature types (i.e., Application Schema data stores) but is incorrectly being applied to simple feature types as well which makes this vulnerability apply to **ALL** GeoServer instances. No public PoC is provided but this vulnerability has been confirmed to be exploitable through WFS GetFeature, WFS GetPropertyValue, WMS GetMap, WMS GetFeatureInfo, WMS GetLegendGraphic and WPS Execute requests. This vulnerability can lead to executing arbitrary code.

Versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2 contain a patch for the issue. A workaround exists by removing the `gt-complex-x.y.jar` file from the GeoServer where `x.y` is the GeoTools version (e.g., `gt-complex-31.1.jar` if running GeoServer 2.25.1). This will remove the vulnerable code from GeoServer but may break some GeoServer functionality or prevent GeoServer from deploying if the gt-complex module is needed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-95, CWE-94
References: https://github.com/Warxim/CVE-2022-41852?tab=readme-ov-file#workaround-for-cve-2022-41852; https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv; https://github.com/geotools/geotools/pull/4797
CVE: CVE-2024-36420
Published: 2024-07-01
Description: Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, the `/api/v1/openai-assistants-file` endpoint in `index.ts` is vulnerable to arbitrary file read due to lack of sanitization of the `fileName` body parameter. No known patches for this issue are available.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74, CWE-74
References: https://github.com/FlowiseAI/Flowise/blob/e93ce07851cdc0fcde12374f301b8070f2043687/packages/server/src/index.ts#L982; https://securitylab.github.com/advisories/GHSL-2023-232_GHSL-2023-234_Flowise/; https://github.com/FlowiseAI/Flowise/blob/e93ce07851cdc0fcde12374f301b8070f2043687/packages/server/src/index.ts#L982
CVE: CVE-2024-36421
Published: 2024-07-01
Description: Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, A CORS misconfiguration sets the Access-Control-Allow-Origin header to all, allowing arbitrary origins to connect to the website. In the default configuration (unauthenticated), arbitrary origins may be able to make requests to Flowise, stealing information from the user. This CORS misconfiguration may be chained with the path injection to allow an attacker attackers without access to Flowise to read arbitrary files from the Flowise server. As of time of publication, no known patches are available.
CVSS Score: 7.5 (HIGH)
CWE: CWE-346, CWE-346
References: https://github.com/FlowiseAI/Flowise/blob/e93ce07851cdc0fcde12374f301b8070f2043687/packages/server/src/index.ts#L122; https://securitylab.github.com/advisories/GHSL-2023-232_GHSL-2023-234_Flowise/; https://github.com/FlowiseAI/Flowise/blob/e93ce07851cdc0fcde12374f301b8070f2043687/packages/server/src/index.ts#L122
CVE: CVE-2024-36422
Published: 2024-07-01
Description: Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, a reflected cross-site scripting vulnerability occurs in the `api/v1/chatflows/id` endpoint. If the default configuration is used (unauthenticated), an attacker may be able to craft a specially crafted URL that injects Javascript into the user sessions, allowing the attacker to steal information, create false popups, or even redirect the user to other websites without interaction. If the chatflow ID is not found, its value is reflected in the 404 page, which has type text/html. This allows an attacker to attach arbitrary scripts to the page, allowing an attacker to steal sensitive information. This XSS may be chained with the path injection to allow an attacker without direct access to Flowise to read arbitrary files from the Flowise server. As of time of publication, no known patches are available.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/FlowiseAI/Flowise/blob/flowise-ui%401.4.0/packages/server/src/index.ts#L312-L312; https://securitylab.github.com/advisories/GHSL-2023-232_GHSL-2023-234_Flowise/; https://github.com/FlowiseAI/Flowise/blob/flowise-ui%401.4.0/packages/server/src/index.ts#L312-L312
CVE: CVE-2024-20399
Published: 2024-07-01
Description: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device.

This vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root.
Note: To successfully exploit this vulnerability on a Cisco NX-OS device, an attacker must have Administrator credentials. The following Cisco devices already allow administrative users to access the underlying operating system through the bash-shell feature, so, for these devices, this vulnerability does not grant any additional privileges:

Nexus 3000 Series Switches
Nexus 7000 Series Switches that are running Cisco NX-OS Software releases 8.1(1) and later
Nexus 9000 Series Switches in standalone NX-OS mode
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmd-injection-xD9OhyOP; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmd-injection-xD9OhyOP; https://www.sygnia.co/threat-reports-and-advisories/china-nexus-threat-group-velvet-ant-exploits-cisco-0-day/
CVE: CVE-2024-21586
Published: 2024-07-01
Description: An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX Series and NFX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).

If an affected device receives specific valid traffic destined to the device, it will cause the PFE to crash and restart.  Continued receipt and processing of this traffic will create a sustained DoS condition.

This issue affects Junos OS on SRX Series:

  *  21.4 versions before 21.4R3-S7.9,
  *  22.1 versions before 22.1R3-S5.3,
  *  22.2 versions before 22.2R3-S4.11,
  *  22.3 versions before 22.3R3,
  *  22.4 versions before 22.4R3.






This issue affects Junos OS on NFX Series:

  *  21.4 versions before 21.4R3-S8,
  *  22.1 versions after 22.1R1,
  *  22.2 versions before 22.2R3-S5,
  *  22.3 versions before 22.3R3,
  *  22.4 versions before 22.4R3.






Junos OS versions prior to 21.4R1 are not affected by this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://supportportal.juniper.net/JSA83195; https://supportportal.juniper.net/JSA83195
CVE: CVE-2024-36982
Published: 2024-07-01
Description: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an attacker could trigger a null pointer reference on the cluster/config REST endpoint, which could result in a crash of the Splunk daemon.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://advisory.splunk.com/advisories/SVD-2024-0702; https://advisory.splunk.com/advisories/SVD-2024-0702
CVE: CVE-2024-36983
Published: 2024-07-01
Description: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an authenticated user could create an external lookup that calls a legacy internal function. The authenticated user could use this internal function to insert code into the Splunk platform installation directory. From there, the user could execute arbitrary code on the Splunk platform Instance.
CVSS Score: 8.0 (HIGH)
CWE: CWE-77, CWE-77
References: https://advisory.splunk.com/advisories/SVD-2024-0703; https://research.splunk.com/application/1cf58ae1-9177-40b8-a26c-8966040f11ae/; https://advisory.splunk.com/advisories/SVD-2024-0703
CVE: CVE-2024-36984
Published: 2024-07-01
Description: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 on Windows, an authenticated user could execute a specially crafted query that they could then use to serialize untrusted data. The attacker could use the query to execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://advisory.splunk.com/advisories/SVD-2024-0704; https://research.splunk.com/application/1cf58ae1-9177-40b8-a26c-8966040f11ae/; https://advisory.splunk.com/advisories/SVD-2024-0704
CVE: CVE-2024-36985
Published: 2024-07-01
Description: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10, a low-privileged user that does not hold the admin or power Splunk roles could cause a Remote Code Execution through an external lookup that references the “splunk_archiver“ application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-687
References: https://advisory.splunk.com/advisories/SVD-2024-0705; https://research.splunk.com/application/8598f9de-bba8-42a4-8ef0-12e1adda4131; https://advisory.splunk.com/advisories/SVD-2024-0705
CVE: CVE-2024-36986
Published: 2024-07-01
Description: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, an authenticated user could run risky commands using the permissions of a higher-privileged user to bypass SPL safeguards for risky commands in the Analytics Workspace. The vulnerability requires the authenticated user to phish the victim by tricking them into initiating a request within their browser. The authenticated user should not be able to exploit the vulnerability at will.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-200
References: https://advisory.splunk.com/advisories/SVD-2024-0706; https://research.splunk.com/application/1cf58ae1-9177-40b8-a26c-8966040f11ae/; https://advisory.splunk.com/advisories/SVD-2024-0706
CVE: CVE-2024-36987
Published: 2024-07-01
Description: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, an authenticated, low-privileged user who does not hold the admin or power Splunk roles could upload a file with an arbitrary extension using the indexing/preview REST endpoint.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://advisory.splunk.com/advisories/SVD-2024-0707; https://advisory.splunk.com/advisories/SVD-2024-0707
CVE: CVE-2024-36989
Published: 2024-07-01
Description: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, a low-privileged user that does not hold the admin or power Splunk roles could create notifications in Splunk Web Bulletin Messages that all users on the instance receive.
CVSS Score: 7.1 (HIGH)
CWE: CWE-284
References: https://advisory.splunk.com/advisories/SVD-2024-0709; https://research.splunk.com/application/4b7f368f-4322-47f8-8363-2c466f0b7030; https://advisory.splunk.com/advisories/SVD-2024-0709
CVE: CVE-2024-36990
Published: 2024-07-01
Description: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.2.2403.100, an authenticated, low-privileged user that does not hold the admin or power Splunk roles could send a specially crafted HTTP POST request to the datamodel/web REST endpoint in Splunk Enterprise, potentially causing a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835, CWE-835
References: https://advisory.splunk.com/advisories/SVD-2024-0710; https://research.splunk.com/application/45766810-dbb2-44d4-b889-b4ba3ee0d1f5; https://advisory.splunk.com/advisories/SVD-2024-0710
CVE: CVE-2024-36991
Published: 2024-07-01
Description: In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Windows. This vulnerability should only affect Splunk Enterprise on Windows.
CVSS Score: 7.5 (HIGH)
CWE: CWE-35, CWE-22
References: https://advisory.splunk.com/advisories/SVD-2024-0711; https://research.splunk.com/application/e7c2b064-524e-4d65-8002-efce808567aa; https://advisory.splunk.com/advisories/SVD-2024-0711
CVE: CVE-2024-36992
Published: 2024-07-01
Description: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the admin or power Splunk roles could craft a malicious payload through a View that could result in execution of unauthorized JavaScript code in the browser of a user. The “url” parameter of the Dashboard element does not have proper input validation to reject invalid URLs, which could lead to a Persistent Cross-site Scripting (XSS) exploit.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://advisory.splunk.com/advisories/SVD-2024-0712; https://advisory.splunk.com/advisories/SVD-2024-0712
CVE: CVE-2024-36993
Published: 2024-07-01
Description: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the admin or power Splunk roles could craft a malicious payload through a Splunk Web Bulletin Messages that could result in execution of unauthorized JavaScript code in the browser of a user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://advisory.splunk.com/advisories/SVD-2024-0713; https://research.splunk.com/application/fd852b27-1882-4505-9f2c-64dfb96f4fc1; https://advisory.splunk.com/advisories/SVD-2024-0713
CVE: CVE-2024-36994
Published: 2024-07-01
Description: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the admin or power Splunk roles could craft a malicious payload through a View and Splunk Web Bulletin Messages that could result in execution of unauthorized JavaScript code in the browser of a user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://advisory.splunk.com/advisories/SVD-2024-0714; https://research.splunk.com/application/b0a67520-ae82-4cf6-b04e-9f6cce56830d; https://advisory.splunk.com/advisories/SVD-2024-0714
CVE: CVE-2024-36995
Published: 2024-07-01
Description: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the admin or power Splunk roles could create experimental items.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://advisory.splunk.com/advisories/SVD-2024-0715; https://research.splunk.com/application/84afda04-0cd6-466b-869e-70d6407d0a34; https://advisory.splunk.com/advisories/SVD-2024-0715
CVE: CVE-2024-36996
Published: 2024-07-01
Description: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109, an attacker could determine whether or not another user exists on the instance by deciphering the error response that they would likely receive from the instance when they attempt to log in. This disclosure could then lead to additional brute-force password-guessing attacks. This vulnerability would require that the Splunk platform instance uses the Security Assertion Markup Language (SAML) authentication scheme.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204, CWE-203
References: https://advisory.splunk.com/advisories/SVD-2024-0716; https://advisory.splunk.com/advisories/SVD-2024-0716
CVE: CVE-2024-36997
Published: 2024-07-01
Description: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312, an admin user could store and execute arbitrary JavaScript code in the browser context of another Splunk user through the conf-web/settings REST endpoint. This could potentially cause a persistent cross-site scripting (XSS) exploit.
CVSS Score: 8.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://advisory.splunk.com/advisories/SVD-2024-0717; https://research.splunk.com/application/ed1209ef-228d-4dab-9856-be9369925a5c; https://advisory.splunk.com/advisories/SVD-2024-0717
CVE: CVE-2024-39878
Published: 2024-07-01
Description: In JetBrains TeamCity before 2024.03.3 private key could be exposed via testing GitHub App Connection
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-39879
Published: 2024-07-01
Description: In JetBrains TeamCity before 2024.03.3 application token could be exposed in EC2 Cloud Profile settings
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-36387
Published: 2024-07-01
Description: Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-476
References: https://httpd.apache.org/security/vulnerabilities_24.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; http://www.openwall.com/lists/oss-security/2024/07/01/4
CVE: CVE-2024-36423
Published: 2024-07-01
Description: Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, a reflected cross-site scripting vulnerability occurs in the `/api/v1/public-chatflows/id` endpoint. If the default configuration is used (unauthenticated), an attacker may be able to craft a specially crafted URL that injects Javascript into the user sessions, allowing the attacker to steal information, create false popups, or even redirect the user to other websites without interaction. If the chatflow ID is not found, its value is reflected in the 404 page, which has type text/html. This allows an attacker to attach arbitrary scripts to the page, allowing an attacker to steal sensitive information. This XSS may be chained with the path injection to allow an attacker without direct access to Flowise to read arbitrary files from the Flowise server. As of time of publication, no known patches are available.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/FlowiseAI/Flowise/blob/flowise-ui%401.4.0/packages/server/src/index.ts#L322-L322; https://securitylab.github.com/advisories/GHSL-2023-232_GHSL-2023-234_Flowise/; https://github.com/FlowiseAI/Flowise/blob/flowise-ui%401.4.0/packages/server/src/index.ts#L322-L322