deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-21607
Published: 2024-01-12
Description: 
An Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on MX Series and EX9200 Series allows an unauthenticated, network-based attacker to cause partial impact to the integrity of the device.

If the "tcp-reset" option is added to the "reject" action in an IPv6 filter which matches on "payload-protocol", packets are permitted instead of rejected. This happens because the payload-protocol match criteria is not supported in the kernel filter causing it to accept all packets without taking any other action. As a fix the payload-protocol match will be treated the same as a "next-header" match to avoid this filter bypass.

This issue doesn't affect IPv4 firewall filters.

This issue affects Juniper Networks Junos OS on MX Series and EX9200 Series:



  *  All versions earlier than 20.4R3-S7;
  *  21.1 versions earlier than 21.1R3-S5;
  *  21.2 versions earlier than 21.2R3-S5;
  *  21.3 versions earlier than 21.3R3-S4;
  *  21.4 versions earlier than 21.4R3-S4;
  *  22.1 versions earlier than 22.1R3-S2;
  *  22.2 versions earlier than 22.2R3-S2;
  *  22.3 versions earlier than 22.3R2-S2, 22.3R3;
  *  22.4 versions earlier than 22.4R1-S2, 22.4R2-S2, 22.4R3.







CVSS Score: 5.3 (MEDIUM)
CWE: CWE-447
References: https://supportportal.juniper.net/JSA75748; https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N; https://supportportal.juniper.net/JSA75748
CVE: CVE-2024-21611
Published: 2024-01-12
Description: 
A Missing Release of Memory after Effective Lifetime vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).

In a Juniper Flow Monitoring (jflow) scenario route churn that causes BGP next hops to be updated will cause a slow memory leak and eventually a crash and restart of rpd.

Thread level memory utilization for the areas where the leak occurs can be checked using the below command:

user@host> show task memory detail | match so_in
so_in6 28 32[PII_REDACTED]2400[PII_REDACTED]2320
so_in 8 16 [PII_REDACTED]6[PII_REDACTED] 29467744
This issue affects:

Junos OS



  *  21.4 versions earlier than 21.4R3;
  *  22.1 versions earlier than 22.1R3;
  *  22.2 versions earlier than 22.2R3.




Junos OS Evolved



  *  21.4-EVO versions earlier than 21.4R3-EVO;
  *  22.1-EVO versions earlier than 22.1R3-EVO;
  *  22.2-EVO versions earlier than 22.2R3-EVO.




This issue does not affect:

Juniper Networks Junos OS versions earlier than 21.4R1.

Juniper Networks Junos OS Evolved versions earlier than 21.4R1.




CVSS Score: 7.5 (HIGH)
CWE: CWE-401, CWE-401
References: https://supportportal.juniper.net/JSA75752; https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L; https://supportportal.juniper.net/JSA75752
CVE: CVE-2024-21612
Published: 2024-01-12
Description: 




An Improper Handling of Syntactically Invalid Structure vulnerability in Object Flooding Protocol (OFP) service of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).

On all Junos OS Evolved platforms, when specific TCP packets are received on an open OFP port, the OFP crashes leading to a restart of Routine Engine (RE). Continuous receipt of these specific TCP packets will lead to a sustained Denial of Service (DoS) condition.





This issue affects:

Juniper Networks Junos OS Evolved



  *  All versions earlier than 21.2R3-S7-EVO;
  *  21.3 versions earlier than 21.3R3-S5-EVO ;
  *  21.4 versions earlier than 21.4R3-S5-EVO;
  *  22.1 versions earlier than 22.1R3-S4-EVO;
  *  22.2 versions earlier than 22.2R3-S3-EVO ;
  *  22.3 versions earlier than 22.3R3-EVO;
  *  22.4 versions earlier than 22.4R2-EVO, 22.4R3-EVO.







CVSS Score: 7.5 (HIGH)
CWE: CWE-228
References: https://supportportal.juniper.net/JSA75753; https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N; https://supportportal.juniper.net/JSA75753
CVE: CVE-2024-21613
Published: 2024-01-12
Description: 
A Missing Release of Memory after Effective Lifetime vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause an rpd crash, leading to Denial of Service (DoS).

On all Junos OS and Junos OS Evolved platforms, when traffic engineering is enabled for OSPF or ISIS, and a link flaps, a patroot memory leak is observed. This memory leak, over time, will lead to an rpd crash and restart.

The memory usage can be monitored using the below command.

user@host> show task memory detail | match patroot
This issue affects:

Juniper Networks Junos OS



  *  All versions earlier than 21.2R3-S3;
  *  21.3 versions earlier than 21.3R3-S5;
  *  21.4 versions earlier than 21.4R3-S3;
  *  22.1 versions earlier than 22.1R3;
  *  22.2 versions earlier than 22.2R3.




Juniper Networks Junos OS Evolved



  *  All versions earlier than 21.3R3-S5-EVO;
  *  21.4 versions earlier than 21.4R3-EVO;
  *  22.1 versions earlier than 22.1R3-EVO;
  *  22.2 versions earlier than 22.2R3-EVO.







CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://supportportal.juniper.net/JSA75754; https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N; https://supportportal.juniper.net/JSA75754
CVE: CVE-2024-21614
Published: 2024-01-12
Description: 
An Improper Check for Unusual or Exceptional Conditions vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause rpd to crash, leading to Denial of Service (DoS).

On all Junos OS and Junos OS Evolved platforms, when NETCONF and gRPC are enabled, and a specific query is executed via Dynamic Rendering (DREND), rpd will crash and restart. Continuous execution of this specific query will cause a sustained Denial of Service (DoS) condition.

This issue affects:

Juniper Networks Junos OS



  *  22.2 versions earlier than 22.2R2-S2, 22.2R3;
  *  22.3 versions earlier than 22.3R2, 22.3R3.




Juniper Networks Junos OS Evolved



  *  22.2 versions earlier than 22.2R2-S2-EVO, 22.2R3-EVO;
  *  22.3 versions earlier than 22.3R2-EVO, 22.3R3-EVO.




This issue does not affect Juniper Networks:

Junos OS versions earlier than 22.2R1;

Junos OS Evolved versions earlier than 22.2R1-EVO.




CVSS Score: 7.5 (HIGH)
CWE: CWE-754, CWE-754
References: https://supportportal.juniper.net/JSA75755; https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N; https://supportportal.juniper.net/JSA75755
CVE: CVE-2024-21616
Published: 2024-01-12
Description: 
An Improper Validation of Syntactic Correctness of Input vulnerability in Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS).

On all Junos OS MX Series and SRX Series platforms, when SIP ALG is enabled, and a specific SIP packet is received and processed, NAT IP allocation fails for genuine traffic, which causes Denial of Service (DoS). Continuous receipt of this specific SIP ALG packet will cause a sustained DoS condition.

NAT IP usage can be monitored by running the following command.

user@srx> show security nat resource-usage source-pool <source_pool_name>


Pool name: source_pool_name
..
Address Factor-index Port-range Used Avail Total Usage
X.X.X.X
0 Single Ports 50258 52342 62464 96% <<<<<
- Alg Ports 0 2048 2048 0%
This issue affects:

Juniper Networks Junos OS on MX Series and SRX Series



  *  All versions earlier than 21.2R3-S6;
  *  21.3 versions earlier than 21.3R3-S5;
  *  21.4 versions earlier than 21.4R3-S5;
  *  22.1 versions earlier than 22.1R3-S4;
  *  22.2 versions earlier than 22.2R3-S3;
  *  22.3 versions earlier than 22.3R3-S1;
  *  22.4 versions earlier than 22.4R2-S2, 22.4R3;
  *  23.2 versions earlier than 23.2R1-S1, 23.2R2.







CVSS Score: 7.5 (HIGH)
CWE: CWE-1286
References: https://supportportal.juniper.net/JSA75757; https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N; https://supportportal.juniper.net/JSA75757
CVE: CVE-2024-21617
Published: 2024-01-12
Description: 
An Incomplete Cleanup vulnerability in Nonstop active routing (NSR) component of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause memory leak leading to Denial of Service (DoS).

On all Junos OS platforms, when NSR is enabled, a BGP flap will cause memory leak. A manual reboot of the system will restore the services.

Note: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability.
The memory usage can be monitored using the below commands.

user@host> show chassis routing-engine no-forwarding
user@host> show system memory | no-more
This issue affects:

Juniper Networks Junos OS



  *  21.2 versions earlier than 21.2R3-S5;
  *  21.3 versions earlier than 21.3R3-S4;
  *  21.4 versions earlier than 21.4R3-S4;
  *  22.1 versions earlier than 22.1R3-S2;
  *  22.2 versions earlier than 22.2R3-S2;
  *  22.3 versions earlier than 22.3R2-S1, 22.3R3;
  *  22.4 versions earlier than 22.4R1-S2, 22.4R2.




This issue does not affect Junos OS versions earlier than 20.4R3-S7.




CVSS Score: 6.5 (MEDIUM)
CWE: CWE-459, CWE-459
References: https://supportportal.juniper.net/JSA75758; https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N; https://supportportal.juniper.net/JSA75758
CVE: CVE-2023-40250
Published: 2024-01-12
Description: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Hancom HCell on Windows allows Overflow Buffers.This issue affects HCell: 12.0.0.893.


CVSS Score: 8.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://www.hancom.com/cs_center/csDownload.do?gnb0=25gnb1=80; https://www.hancom.com/cs_center/csDownload.do?gnb0=25gnb1=80
CVE: CVE-2023-52339
Published: 2024-01-12
Description: In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in buffer overflows.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://github.com/Matroska-Org/libebml/blob/v1.x/NEWS.md; https://github.com/Matroska-Org/libebml/compare/release-1.4.4...release-1.4.5; https://github.com/Matroska-Org/libebml/issues/147
CVE: CVE-2023-6040
Published: 2024-01-12
Description: An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function enables an attacker to achieve out-of-bounds access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: http://packetstormsecurity.com/files/177029/Kernel-Live-Patch-Security-Notice-LSN-0100-1.html; http://www.openwall.com/lists/oss-security/2024/01/12/1; https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6040
CVE: CVE-2024-0454
Published: 2024-01-12
Description: ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor.
This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity.
Version which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-290, CWE-290
References: https://www.emc.com.tw/emc/tw/vulnerability-disclosure-policy; https://github.com/advisories/GHSA-w3jx-33qh-77f8; https://www.emc.com.tw/emc/tw/vulnerability-disclosure-policy
CVE: CVE-2016-20021
Published: 2024-01-12
Description: In Gentoo Portage before 3.0.47, there is missing PGP validation of executed code: the standalone emerge-webrsync downloads a .gpgsig file but does not perform signature verification. Unless emerge-webrsync is used, Portage is not vulnerable.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-347, CWE-347
References: https://bugs.gentoo.org/597800; https://gitweb.gentoo.org/proj/portage.git/tree/NEWS; https://wiki.gentoo.org/wiki/Portage
CVE: CVE-2022-48619
Published: 2024-01-12
Description: An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause a denial of service (panic) because input_set_capability mishandles the situation in which an event code falls outside of a bitmap.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-755
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.10; https://github.com/torvalds/linux/commit/409353cbe9fe48f6bc196114c442b1cff05a39bc; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.10
CVE: CVE-2022-4960
Published: 2024-01-12
Description: A vulnerability, which was classified as problematic, has been found in cloudfavorites favorites-web 1.3.0. Affected by this issue is some unknown functionality of the component Nickname Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-250238 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/cloudfavorites/favorites-web/issues/127; https://vuldb.com/?ctiid.250238; https://vuldb.com/?id.250238
CVE: CVE-2022-48620
Published: 2024-01-12
Description: uev (aka libuev) before 2.4.1 has a buffer overflow in epoll_wait if maxevents is a large number.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/troglobit/libuev/commit/2d9f1c9ce655cc38511aeeb6e95ac30914f7aec9; https://github.com/troglobit/libuev/compare/v2.4.0...v2.4.1; https://github.com/troglobit/libuev/issues/27
CVE: CVE-2022-4961
Published: 2024-01-12
Description: A vulnerability was found in Weitong Mall 1.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file platform-shop\src\main\resources\com\platform\dao\OrderDao.xml. The manipulation of the argument sidx/order leads to sql injection. The associated identifier of this vulnerability is VDB-250243.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://gitee.com/fuyang_lipengjun/platform/issues/I5XC79; https://vuldb.com/?ctiid.250243; https://vuldb.com/?id.250243
CVE: CVE-2024-23171
Published: 2024-01-12
Description: An issue was discovered in the CampaignEvents extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:EventDetails page allows XSS via the x-xss language setting for internationalization (i18n).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://gerrit.wikimedia.org/r/q/I70d71c409193e904684dfb706d424b0a815fa6f6; https://phabricator.wikimedia.org/T348343; https://gerrit.wikimedia.org/r/q/I70d71c409193e904684dfb706d424b0a815fa6f6
CVE: CVE-2024-23172
Published: 2024-01-12
Description: An issue was discovered in the CheckUser extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. XSS can occur via message definitions. e.g., in SpecialCheckUserLog.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/989179; https://phabricator.wikimedia.org/T347708; https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/989179
CVE: CVE-2024-23173
Published: 2024-01-12
Description: An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:Drilldown page allows XSS via artist, album, and position parameters because of applied filter values in drilldown/CargoAppliedFilter.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/965214; https://phabricator.wikimedia.org/T348687; https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/965214
CVE: CVE-2024-23174
Published: 2024-01-12
Description: An issue was discovered in the PageTriage extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. XSS can occur via the rev-deleted-user, pagetriage-tags-quickfilter-label, pagetriage-triage, pagetriage-filter-date-range-format-placeholder, pagetriage-filter-date-range-to, pagetriage-filter-date-range-from, pagetriage-filter-date-range-heading, pagetriage-filter-set-button, or pagetriage-filter-reset-button message.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/PageTriage/+/989177; https://phabricator.wikimedia.org/T347704; https://gerrit.wikimedia.org/r/c/mediawiki/extensions/PageTriage/+/989177
CVE: CVE-2024-0393
Published: 2024-01-12
Description: Rejected reason: This CVE ID was unused by the CNA.
CVE: CVE-2024-23177
Published: 2024-01-12
Description: An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce%40lists.wikimedia.org/message/TDBUBCCOQJUT4SCHJNPHKQNPBUUETY52/; https://phabricator.wikimedia.org/T348979; https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce%40lists.wikimedia.org/message/TDBUBCCOQJUT4SCHJNPHKQNPBUUETY52/
CVE: CVE-2024-23178
Published: 2024-01-12
Description: An issue was discovered in the Phonos extension in MediaWiki before 1.40.2. PhonosButton.js allows i18n-based XSS via the phonos-purge-needed-error message.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce%40lists.wikimedia.org/message/TDBUBCCOQJUT4SCHJNPHKQNPBUUETY52/; https://phabricator.wikimedia.org/T349312; https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce%40lists.wikimedia.org/message/TDBUBCCOQJUT4SCHJNPHKQNPBUUETY52/
CVE: CVE-2024-23179
Published: 2024-01-12
Description: An issue was discovered in the GlobalBlocking extension in MediaWiki before 1.40.2. For a Special:GlobalBlock?uselang=x-xss URI, i18n-based XSS can occur via the parentheses message. This affects subtitle links in buildSubtitleLinks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce%40lists.wikimedia.org/message/TDBUBCCOQJUT4SCHJNPHKQNPBUUETY52/; https://phabricator.wikimedia.org/T347746; https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce%40lists.wikimedia.org/message/TDBUBCCOQJUT4SCHJNPHKQNPBUUETY52/
CVE: CVE-2023-34061
Published: 2024-01-12
Description: Cloud Foundry routing release versions from v0.163.0 to v0.283.0 are vulnerable to a DOS attack.  An unauthenticated attacker can use this vulnerability to force route pruning and therefore degrade the service availability of the Cloud Foundry deployment.




CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://www.cloudfoundry.org/blog/cve-2023-34061-gorouter-route-pruning/; https://www.cloudfoundry.org/blog/cve-2023-34061-gorouter-route-pruning/
CVE: CVE-2023-37117
Published: 2024-01-12
Description: A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-416
References: http://lists.live555.com/pipermail/live-devel/2023-June/022331.html; http://www.live555.com/liveMedia/public/changelog.txt; http://lists.live555.com/pipermail/live-devel/2023-June/022331.html
CVE: CVE-2024-22027
Published: 2024-01-12
Description: Improper input validation vulnerability in WordPress Quiz Maker Plugin prior to 6.5.0.6 allows a remote authenticated attacker to perform a Denial of Service (DoS) attack against external services.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://jvn.jp/en/jp/JVN37326856/; https://wordpress.org/plugins/quiz-maker/; https://jvn.jp/en/jp/JVN37326856/
CVE: CVE-2023-31211
Published: 2024-01-12
Description: Insufficient authentication flow in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows attacker to use locked credentials
CVSS Score: 8.8 (HIGH)
CWE: CWE-303, CWE-670
References: https://checkmk.com/werk/16227; https://checkmk.com/werk/16227
CVE: CVE-2023-40362
Published: 2024-01-12
Description: An issue was discovered in CentralSquare Click2Gov Building Permit before October 2023. Lack of access control protections allows remote attackers to arbitrarily delete the contractors from any user's account when the user ID and contractor information is known.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://github.com/ally-petitt/CVE-2023-40362; https://www.classaction.org/news/centralsquare-hit-with-class-action-over-2017-2018-click2gov-data-breach; https://github.com/ally-petitt/CVE-2023-40362
CVE: CVE-2023-50919
Published: 2024-01-12
Description: An issue was discovered on GL.iNet devices before version 4.5.0. There is an NGINX authentication bypass via Lua string pattern matching. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: http://packetstormsecurity.com/files/176708/GL.iNet-Unauthenticated-Remote-Command-Execution.html; https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Authentication-bypass.md; http://packetstormsecurity.com/files/176708/GL.iNet-Unauthenticated-Remote-Command-Execution.html
CVE: CVE-2023-50920
Published: 2024-01-12
Description: An issue was discovered on GL.iNet devices before version 4.5.0. They assign the same session ID after each user reboot, allowing attackers to share session identifiers between different sessions and bypass authentication or access control measures. Attackers can impersonate legitimate users or perform unauthorized actions. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-384, CWE-384
References: https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Authentication-bypass-seesion-ID.md; https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Authentication-bypass-seesion-ID.md
CVE: CVE-2023-6735
Published: 2024-01-12
Description: Privilege escalation in mk_tsm agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges
CVSS Score: 8.8 (HIGH)
CWE: CWE-95, CWE-269
References: https://checkmk.com/werk/16273; https://checkmk.com/werk/16273
CVE: CVE-2023-6740
Published: 2024-01-12
Description: Privilege escalation in jar_signature agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges
CVSS Score: 8.8 (HIGH)
CWE: CWE-427, CWE-269
References: https://checkmk.com/werk/16163; https://checkmk.com/werk/16163
CVE: CVE-2023-30014
Published: 2024-01-12
Description: SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via sub_event_id parameter in sub_event_stat_update.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/Pings1031/cve_report/blob/main/judging-management-system/SQLi-1.md; https://github.com/Pings1031/cve_report/blob/main/judging-management-system/SQLi-1.md
CVE: CVE-2023-30015
Published: 2024-01-12
Description: SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via txtsearch parameter in review_search.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/Pings1031/cve_report/blob/main/judging-management-system/SQLi-3.md; https://github.com/Pings1031/cve_report/blob/main/judging-management-system/SQLi-3.md