deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-41687
Published: 2024-07-26
Description: This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to transmission of password in plain text. A remote attacker could exploit this vulnerability by intercepting transmission within an HTTP session on the vulnerable system.

Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the targeted system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-319
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0225; https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0225
CVE: CVE-2024-41688
Published: 2024-07-26
Description: This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due lack of encryption in storing of usernames and passwords within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext credentials on the vulnerable system.

Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the targeted system.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-312, CWE-312
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0225; https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0225
CVE: CVE-2024-41689
Published: 2024-07-26
Description: This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to unencrypted storing of WPA/ WPS credentials within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext WPA/ WPS credentials on the vulnerable system.

Successful exploitation of this vulnerability could allow the attacker to bypass WPA/ WPS and gain access to the Wi-Fi network of the targeted system.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-798, CWE-312
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0225; https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0225
CVE: CVE-2024-41690
Published: 2024-07-26
Description: This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to storing of default username and password credentials in plaintext within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext default credentials on the vulnerable system.

Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the targeted system.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-312, CWE-312
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0225; https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0225
CVE: CVE-2024-41691
Published: 2024-07-26
Description: This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to storing of FTP credentials in plaintext within the SquashFS-root filesystem associated with the router's firmware. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext FTP credentials from the vulnerable system.

Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the FTP server associated with the targeted system.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-312, CWE-312
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0225; https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0225
CVE: CVE-2024-7062
Published: 2024-07-26
Description: Nimble Commander suffers from a privilege escalation vulnerability due to the server (info.filesmanager.Files.PrivilegedIOHelperV2) performing improper/insufficient validation of a client’s authorization before executing an operation. Consequently, it is possible to execute system-level commands as the root user, such as changing permissions and ownership, obtaining a handle (file descriptor) of an arbitrary file, and terminating processes, among other operations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863, CWE-863
References: https://pentraze.com/vulnerability-reports/CVE-2024-7062/; https://pentraze.com/vulnerability-reports/CVE-2024-7062/
CVE: CVE-2024-41692
Published: 2024-07-26
Description: This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the root shell on the vulnerable system.

Successful exploitation of this vulnerability could allow the attacker to execute arbitrary commands with root privileges on the targeted system.
CWE: CWE-1191
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0225; https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0225
CVE: CVE-2024-40689
Published: 2024-07-26
Description: IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.  IBM X-Force ID:  297719.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-89
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/297719; https://www.ibm.com/support/pages/node/7160579; https://exchange.xforce.ibmcloud.com/vulnerabilities/297719
CVE: CVE-2024-6922
Published: 2024-07-26
Description: Automation Anywhere Automation 360 v21-v32 is vulnerable to Server-Side Request Forgery in a web API component. An attacker with unauthenticated access to the Automation 360 Control Room HTTPS service (port 443) or HTTP service (port 80) can trigger arbitrary web requests from the server.
CWE: CWE-918
References: https://www.automationanywhere.com/products/automation-360; https://www.automationanywhere.com/products/automation-360
CVE: CVE-2024-7128
Published: 2024-07-26
Description: A flaw was found in the OpenShift console. Several endpoints in the application use the authHandler() and authHandlerWithUser() middleware functions. When the default authentication provider ("openShiftAuth") is set, these functions do not perform any authentication checks, relying instead on the targeted service to handle authentication and authorization. This issue leads to various degrees of data exposure due to a lack of proper credential verification.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://access.redhat.com/errata/RHSA-2025:13336; https://access.redhat.com/errata/RHSA-2025:4427; https://access.redhat.com/errata/RHSA-2025:4723
CVE: CVE-2024-41670
Published: 2024-07-26
Description: In the module "PayPal Official" for PrestaShop 7+ releases prior to version 6.4.2 and for PrestaShop 1.6 releases prior to version 3.18.1, a malicious customer can confirm an order even if payment is finally declined by PayPal. A logical weakness during the capture of a payment in case of disabled webhooks can be exploited to create an accepted order. This could allow a threat actor to confirm an order with a fraudulent payment support. Versions 6.4.2 and 3.18.1 contain a patch for the issue. Additionally, users enable webhooks and check they are callable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-285, CWE-863
References: https://github.com/202ecommerce/paypal/security/advisories/GHSA-w3w3-j3mh-3354; https://github.com/202ecommerce/paypal/security/advisories/GHSA-w3w3-j3mh-3354
CVE: CVE-2024-41805
Published: 2024-07-26
Description: Tracks, a Getting Things Done (GTD) web application, is vulnerable to reflected cross-site scripting in versions prior to 2.7.1. Reflected cross-site scripting enables execution of malicious JavaScript in the context of a user’s browser if that user clicks on a malicious link, allowing phishing attacks that could lead to credential theft. Tracks version 2.7.1 is patched. No known complete workarounds are available.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/TracksApp/tracks/commit/b0d288d2efd0f8020d04ca95b8e0738a9eab6c51; https://github.com/TracksApp/tracks/commit/c23ca0574ec[PII_REDACTED]32ffd66643aec6aac2; https://github.com/TracksApp/tracks/releases/tag/v2.7.1
CVE: CVE-2024-41355
Published: 2024-07-26
Description: phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/tools/request-ip/index.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2024-41355.md; https://github.com/phpipam/phpipam/issues/4151; https://github.com/phpipam/phpipam/issues/4151
CVE: CVE-2024-41356
Published: 2024-07-26
Description: phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\firewall-zones\zones-edit-network.php.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://github.com/phpipam/phpipam/issues/4146; https://github.com/phpipam/phpipam/issues/4146
CVE: CVE-2024-41357
Published: 2024-07-26
Description: phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edit.php.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2024-41357.md; https://github.com/phpipam/phpipam/issues/4149; https://github.com/phpipam/phpipam/issues/4149
CVE: CVE-2024-41807
Published: 2024-07-26
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. Consult IDs: CVE-2023-4759. Reason: This record is a reservation duplicate of CVE-2023-4759. Notes: All CVE users should reference CVE-2023-4759 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2024-7050
Published: 2024-07-26
Description: Improper Authentication vulnerability in OpenText OpenText Directory Services may allow Multi-factor Authentication Bypass in particular scenarios.This issue affects OpenText Directory Services: 24.2.
CWE: CWE-287
References: https://support.opentext.com/csm?id=kb_article_view&sysparm_article=KB0821213; https://support.opentext.com/csm?id=kb_article_view&sysparm_article=KB0821213
CVE: CVE-2023-50700
Published: 2024-07-26
Description: Insecure Permissions vulnerability in Deepin dde-file-manager 6.0.54 and earlier allows privileged operations to be called by unprivileged users via the D-Bus method.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://bugzilla.opensuse.org/show_bug.cgi?id=1134131; https://bugzilla.opensuse.org/show_bug.cgi?id=1134132; https://github.com/linuxdeepin/developer-center/issues/10007
CVE: CVE-2024-24257
Published: 2024-07-26
Description: An issue in skteco.com Central Control Attendance Machine web management platform v.3.0 allows an attacker to obtain sensitive information via a crafted script to the csl/user component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-75
References: https://idssgmcc.github.io/aran.github.io/1.html; https://idssgmcc.github.io/aran.github.io/1.html
CVE: CVE-2024-26520
Published: 2024-07-26
Description: An issue in Hangzhou Xiongwei Technology Development Co., Ltd. Restaurant Digital Comprehensive Management platform v1 allows an attacker to bypass authentication and perform arbitrary password resets.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-620
References: https://idssgmcc.github.io/aran.github.io/2.html; https://idssgmcc.github.io/aran.github.io/2.html
CVE: CVE-2024-27357
Published: 2024-07-26
Description: An issue was discovered in WithSecure Elements Agent through 23.x for macOS, WithSecure Elements Client Security through 23.x for macOS, and WithSecure MDR through 23.x for macOS. Local Privilege Escalation can occur during installations or updates by admins.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-269
References: https://www.withsecure.com/en/support/security-advisories/cve-2024-27357; https://www.withsecure.com/en/support/security-advisories/cve-2024-27357
CVE: CVE-2024-27358
Published: 2024-07-26
Description: An issue was discovered in WithSecure Elements Agent through 23.x for macOS and WithSecure Elements Client Security through 23.x for macOS. Local users can block an admin from completing an installation, aka a Denial-of-Service (DoS).
CVSS Score: 3.3 (LOW)
References: https://www.withsecure.com/en/support/security-advisories/cve-2024-27358; https://www.withsecure.com/en/support/security-advisories/cve-2024-27358
CVE: CVE-2024-41353
Published: 2024-07-26
Description: phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\groups\edit-group.php
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://github.com/phpipam/phpipam/issues/4147; https://github.com/phpipam/phpipam/issues/4147
CVE: CVE-2024-41354
Published: 2024-07-26
Description: phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/widgets/edit.php
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://github.com/phpipam/phpipam/issues/4150; https://github.com/phpipam/phpipam/issues/4150
CVE: CVE-2024-41373
Published: 2024-07-26
Description: ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/xjzzzxx/vulFound/blob/main/icecoder/icecoder8.1_PT.md; https://github.com/xjzzzxx/vulFound/blob/main/icecoder/icecoder8.1_PT.md
CVE: CVE-2024-41374
Published: 2024-07-26
Description: ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/settings-screen.php
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/xjzzzxx/vulFound/blob/main/icecoder/icecoder8.1_xss2.md; https://github.com/xjzzzxx/vulFound/blob/main/icecoder/icecoder8.1_xss2.md
CVE: CVE-2024-41375
Published: 2024-07-26
Description: ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/terminal-xhr.php
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/xjzzzxx/vulFound/blob/main/icecoder/icecoder8.1_xss1.md; https://github.com/xjzzzxx/vulFound/blob/main/icecoder/icecoder8.1_xss1.md
CVE: CVE-2024-41812
Published: 2024-07-26
Description: txtdot is an HTTP proxy that parses only text, links, and pictures from pages, removing ads and heavy scripts. Prior to version 1.7.0, a Server-Side Request Forgery (SSRF) vulnerability in the `/get` route of txtdot allows remote attackers to use the server as a proxy to send HTTP GET requests to arbitrary targets and retrieve information in the internal network. Version 1.7.0 prevents displaying the response of forged requests, but the requests can still be sent. For complete mitigation, a firewall between txtdot and other internal network resources should be set.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918, CWE-918
References: https://github.com/TxtDot/txtdot/blob/a7fdaf80fdf45abefe83b2eb5135ba112142dc74/src/handlers/distributor.ts#L43-L47; https://github.com/TxtDot/txtdot/commit/7c72d985f7a26ec1fd3cf628444717ca54986d2d; https://github.com/TxtDot/txtdot/security/advisories/GHSA-4gj5-xj97-j8fp
CVE: CVE-2024-41813
Published: 2024-07-26
Description: txtdot is an HTTP proxy that parses only text, links, and pictures from pages, removing ads and heavy scripts. Starting in version 1.4.0 and prior to version 1.6.1, a Server-Side Request Forgery (SSRF) vulnerability in the `/proxy` route of txtdot allows remote attackers to use the server as a proxy to send HTTP GET requests to arbitrary targets and retrieve information in the internal network. Version 1.6.1 patches the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918, CWE-918
References: https://github.com/TxtDot/txtdot/blob/a7fdaf80fdf45abefe83b2eb5135ba112142dc74/src/handlers/distributor.ts#L43-L47; https://github.com/TxtDot/txtdot/commit/f241a46e05b148a39b84bf956051b5aaa489949e; https://github.com/TxtDot/txtdot/security/advisories/GHSA-4c78-229v-hf6m
CVE: CVE-2024-38871
Published: 2024-07-26
Description: Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the reports module.
CVSS Score: 8.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.manageengine.com/products/exchange-reports/advisory/CVE-2024-38871.html; https://www.manageengine.com/products/exchange-reports/advisory/CVE-2024-38871.html
CVE: CVE-2024-38872
Published: 2024-07-26
Description: Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module.
CVSS Score: 8.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.manageengine.com/products/exchange-reports/advisory/CVE-2024-38872.html; https://www.manageengine.com/products/exchange-reports/advisory/CVE-2024-38872.html
CVE: CVE-2024-39304
Published: 2024-07-26
Description: ChurchCRM is an open-source church management system. Versions of the application prior to 5.9.2 are vulnerable to an authenticated SQL injection due to an improper sanitization of user input. Authentication is required, but no elevated privileges are necessary. This allows attackers to inject SQL statements directly into the database query due to inadequate sanitization of the EID parameter in in a GET request to `/GetText.php`. Version 5.9.2 patches the issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/ChurchCRM/CRM/commit/e3bd7bfbf33f01148df0ef1acdb0cf2c2b878b08; https://github.com/ChurchCRM/CRM/security/advisories/GHSA-2rh6-gr3h-83j9; https://github.com/ChurchCRM/CRM/commit/e3bd7bfbf33f01148df0ef1acdb0cf2c2b878b08
CVE: CVE-2024-42007
Published: 2024-07-26
Description: SPX (aka php-spx) through 0.4.15 allows SPX_UI_URI Directory Traversal to read arbitrary files.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-22, CWE-548
References: https://github.com/NoiseByNorthwest/php-spx/issues/251; https://github.com/NoiseByNorthwest/php-spx/issues/251; https://www.vicarius.io/vsociety/posts/journey-to-discovery-and-exploitation-of-path-traversal-in-php-spx-cve-2024-42007
CVE: CVE-2024-38508
Published: 2024-07-26
Description: A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via a specially crafted request.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://support.lenovo.com/us/en/product_security/LEN-156781; https://support.lenovo.com/us/en/product_security/LEN-156781
CVE: CVE-2024-38509
Published: 2024-07-26
Description: A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted IPMI command.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121
References: https://support.lenovo.com/us/en/product_security/LEN-156781; https://support.lenovo.com/us/en/product_security/LEN-156781
CVE: CVE-2024-38510
Published: 2024-07-26
Description: A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://support.lenovo.com/us/en/product_security/LEN-156781; https://support.lenovo.com/us/en/product_security/LEN-156781
CVE: CVE-2024-38511
Published: 2024-07-26
Description: A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://support.lenovo.com/us/en/product_security/LEN-156781; https://support.lenovo.com/us/en/product_security/LEN-156781
CVE: CVE-2024-38512
Published: 2024-07-26
Description: A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://support.lenovo.com/us/en/product_security/LEN-156781; https://support.lenovo.com/us/en/product_security/LEN-156781
CVE: CVE-2024-40116
Published: 2024-07-26
Description: An issue in Solar-Log 1000 before v2.8.2 and build 52-23.04.2013 was discovered to store plaintext passwords in the export.html, email.html, and sms.html files -- fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Base.
CVSS Score: 8.1 (HIGH)
CWE: CWE-256
References: https://github.com/nepenthe0320/cve_poc/blob/master/Solar-Log%201000%20-%20Unprotected%20Storage%20of%20Credentials; https://www.solar-log.com/en/support/firmware-database-1; https://github.com/nepenthe0320/cve_poc/blob/master/Solar-Log%201000%20-%20Unprotected%20Storage%20of%20Credentials
CVE: CVE-2024-40117
Published: 2024-07-26
Description: Incorrect access control in Solar-Log 1000 before v2.8.2 and build 52- 23.04.2013 allows attackers to obtain Administrative privileges via connecting to the web administration server. Not existing for SL 200, 500, 1000 / fixed in 4.2.8 for SL 250, 300, 1200, 2000, SL 50 Gateway / fixed in 5.1.2 / 6.0.0 for SL Base.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://github.com/nepenthe0320/cve_poc/blob/master/CVE-2024-40117; https://github.com/nepenthe0320/cve_poc/blob/master/Solar-Log%201000%20-%20Incorrect%20Access%20Control; https://www.solar-log.com/en/support/firmware-database-1
CVE: CVE-2024-41112
Published: 2024-07-26
Description: streamlit-geospatial is a streamlit multipage app for geospatial applications. Prior to commit c4f81d9616d40c60584e36abb15300853a66e489, the palette variable in `pages/1_📷_Timelapse.py` takes user input, which is later used in the `eval()` function on line 380, leading to remote code execution. Commit c4f81d9616d40c60584e36abb15300853a66e489 fixes this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/opengeos/streamlit-geospatial/blob/4b89495f3bdd481998aadf1fc74b10de0f71c237/pages/1_%F0%9F%93%B7_Timelapse.py#L373-L376; https://github.com/opengeos/streamlit-geospatial/blob/4b89495f3bdd481998aadf1fc74b10de0f71c237/pages/1_%F0%9F%93%B7_Timelapse.py#L380; https://github.com/opengeos/streamlit-geospatial/commit/c4f81d9616d40c60584e36abb15300853a66e489
CVE: CVE-2024-41113
Published: 2024-07-26
Description: streamlit-geospatial is a streamlit multipage app for geospatial applications. Prior to commit c4f81d9616d40c60584e36abb15300853a66e489, the `vis_params` variable on line 383 or line 390 in `pages/1_📷_Timelapse.py` takes user input, which is later used in the `eval()` function on line 395, leading to remote code execution. Commit c4f81d9616d40c60584e36abb15300853a66e489 fixes this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/opengeos/streamlit-geospatial/blob/4b89495f3bdd481998aadf1fc74b10de0f71c237/pages/1_%F0%9F%93%B7_Timelapse.py#L383-L388; https://github.com/opengeos/streamlit-geospatial/blob/4b89495f3bdd481998aadf1fc74b10de0f71c237/pages/1_%F0%9F%93%B7_Timelapse.py#L390-L393; https://github.com/opengeos/streamlit-geospatial/blob/4b89495f3bdd481998aadf1fc74b10de0f71c237/pages/1_%F0%9F%93%B7_Timelapse.py#L395
CVE: CVE-2024-4786
Published: 2024-07-26
Description: An improper validation vulnerability was reported in the Lenovo Tab K10 that could allow a specially crafted application to keep the device on.
CVSS Score: 2.8 (LOW)
CWE: CWE-295
References: https://support.lenovo.com/us/en/product_security/LEN-158501; https://support.lenovo.com/us/en/product_security/LEN-158501
CVE: CVE-2024-41114
Published: 2024-07-26
Description: streamlit-geospatial is a streamlit multipage app for geospatial applications. Prior to commit c4f81d9616d40c60584e36abb15300853a66e489, the `palette` variable on line 430 in `pages/1_📷_Timelapse.py` takes user input, which is later used in the `eval()` function on line 435, leading to remote code execution. Commit c4f81d9616d40c60584e36abb15300853a66e489 fixes this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/opengeos/streamlit-geospatial/blob/4b89495f3bdd481998aadf1fc74b10de0f71c237/pages/1_%F0%9F%93%B7_Timelapse.py#L430; https://github.com/opengeos/streamlit-geospatial/blob/4b89495f3bdd481998aadf1fc74b10de0f71c237/pages/1_%F0%9F%93%B7_Timelapse.py#L435; https://github.com/opengeos/streamlit-geospatial/commit/c4f81d9616d40c60584e36abb15300853a66e489