deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-5650
Published: 2024-06-17
Description: DLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa Electric Corporation. If an attacker is somehow able to intrude into a computer that installed affected product or access to a shared folder, by replacing the DLL file with a tampered one, it is possible to execute arbitrary programs with the authority of the SYSTEM account.

The affected products and versions are as follows:
CENTUM CS 3000 R3.08.10 to R3.09.50
CENTUM VP R4.01.00 to R4.03.00, R5.01.00 to R5.04.20, R6.01.00 to R6.11.10.
CVSS Score: 8.5 (HIGH)
CWE: CWE-284
References: https://web-material3.yokogawa.com/1/36044/files/YSAR-24-0002-E.pdf; https://web-material3.yokogawa.com/1/36044/files/YSAR-24-0002-E.pdf
CVE: CVE-2024-36277
Published: 2024-06-17
Description: Improper verification of cryptographic signature issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS. The affected app cannot detect event data with invalid signatures.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-347
References: https://apps.apple.com/us/app/freefrom-the-nostr-client/id[PII_REDACTED]; https://freefrom.space/; https://jvn.jp/en/jp/JVN55045256/
CVE: CVE-2024-36279
Published: 2024-06-17
Description: Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS. If this vulnerability is exploited, the content of direct messages (DMs) between users may be manipulated by a man-in-the-middle attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-649
References: https://apps.apple.com/us/app/freefrom-the-nostr-client/id[PII_REDACTED]; https://freefrom.space/; https://jvn.jp/en/jp/JVN55045256/
CVE: CVE-2024-36289
Published: 2024-06-17
Description: Reusing a nonce, key pair in encryption issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS. If this vulnerability is exploited, the content of direct messages (DMs) between users may be manipulated by a man-in-the-middle attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-323
References: https://apps.apple.com/us/app/freefrom-the-nostr-client/id[PII_REDACTED]; https://freefrom.space/; https://jvn.jp/en/jp/JVN55045256/
CVE: CVE-2024-6048
Published: 2024-06-17
Description: Openfind's MailGates and MailAudit fail to properly filter user input when analyzing email attachments. An unauthenticated remote attacker can exploit this vulnerability to inject system commands and execute them on the remote server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.twcert.org.tw/en/cp-139-7886-20b61-2.html; https://www.twcert.org.tw/tw/cp-132-7885-a8013-1.html; https://www.twcert.org.tw/en/cp-139-7886-20b61-2.html
CVE: CVE-2024-5741
Published: 2024-06-17
Description: Stored XSS in inventory tree rendering in Checkmk before 2.3.0p7, 2.2.0p28, 2.1.0p45 and 2.0.0 (EOL)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://checkmk.com/werk/17009; https://checkmk.com/werk/17009
CVE: CVE-2024-6055
Published: 2024-06-17
Description: Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32.0 and earlier on Windows allows an attacker that obtains the exported settings to recover powershell credentials configured on the data source via stealing the configuration file.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-212
References: https://devolutions.net/security/advisories/DEVO-2024-0008; https://devolutions.net/security/advisories/DEVO-2024-0008
CVE: CVE-2024-6057
Published: 2024-06-17
Description: Improper authentication in the vault password feature in Devolutions Remote Desktop Manager 2024.1.31.0 and earlier allows an attacker that has compromised an access to an RDM instance to bypass the vault master password via the offline mode feature.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://devolutions.net/security/advisories/DEVO-2024-0008; https://devolutions.net/security/advisories/DEVO-2024-0008
CVE: CVE-2024-36580
Published: 2024-06-17
Description: A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://gist.github.com/mestrtee/a75d75eca4622ad08f7cfa903a6cc9c3; https://gist.github.com/mestrtee/a75d75eca4622ad08f7cfa903a6cc9c3
CVE: CVE-2024-36583
Published: 2024-06-17
Description: A Prototype Pollution issue in byondreal accessor <= 1.0.0 allows an attacker to execute arbitrary code via @byondreal/accessor/index.
CVSS Score: 8.1 (HIGH)
CWE: CWE-1321
References: https://gist.github.com/mestrtee/97bc2fbfbcbde3a54d5536c9adeee34c; https://gist.github.com/mestrtee/97bc2fbfbcbde3a54d5536c9adeee34c
CVE: CVE-2024-37158
Published: 2024-06-17
Description: Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. Preliminary checks on actions computed by the clawback vesting accounts are performed in the ante handler. Evmos core, implements two different ante handlers: one for Cosmos transactions and one for Ethereum transactions. Checks performed on the two implementation are different. The vulnerability discovered allowed a clawback account to bypass Cosmos ante handler checks by sending an Ethereum transaction targeting a precompile used to interact with a Cosmos SDK module. This vulnerability is fixed in 18.0.0.


CVSS Score: 3.5 (LOW)
CWE: CWE-691
References: https://github.com/evmos/evmos/commit/b2a09ca66613d8b04decd3f2dcba8e1e77709dcb; https://github.com/evmos/evmos/security/advisories/GHSA-pxv8-qhrh-jc7v; https://github.com/evmos/evmos/commit/b2a09ca66613d8b04decd3f2dcba8e1e77709dcb
CVE: CVE-2024-37159
Published: 2024-06-17
Description: Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. This vulnerability allowed a user to create a validator using vested tokens to deposit the self-bond. This vulnerability is fixed in 18.0.0.
CVSS Score: 3.5 (LOW)
CWE: CWE-285
References: https://github.com/evmos/evmos/commit/b2a09ca66613d8b04decd3f2dcba8e1e77709dcb; https://github.com/evmos/evmos/security/advisories/GHSA-pxv8-qhrh-jc7v; https://github.com/evmos/evmos/commit/b2a09ca66613d8b04decd3f2dcba8e1e77709dcb
CVE: CVE-2024-37619
Published: 2024-06-17
Description: StrongShop v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the spec_group_id parameter at /spec/index.blade.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Hebing123/cve/issues/45; https://www.strongshop.cn/; https://github.com/Hebing123/cve/issues/45
CVE: CVE-2024-37620
Published: 2024-06-17
Description: PHPVOD v4.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /view/admin/view.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Hebing123/cve/issues/46; https://www.phpvod.com/; https://github.com/Hebing123/cve/issues/46
CVE: CVE-2024-37621
Published: 2024-06-17
Description: StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the component /shippingOptionConfig/index.blade.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-97, CWE-1336
References: https://github.com/Hebing123/cve/issues/47; https://www.strongshop.cn; https://github.com/Hebing123/cve/issues/47
CVE: CVE-2024-37622
Published: 2024-06-17
Description: Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the num parameter at /flow/flow.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/rainrocka/xinhu/issues/4; https://github.com/rainrocka/xinhu/issues/4
CVE: CVE-2024-37623
Published: 2024-06-17
Description: Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /kaoqin/tpl_kaoqin_locationchange.html component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/rainrocka/xinhu/issues/5; https://github.com/rainrocka/xinhu/issues/5
CVE: CVE-2024-37624
Published: 2024-06-17
Description: Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /chajian/inputChajian.php. component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/rainrocka/xinhu/issues/6; https://github.com/rainrocka/xinhu/issues/6
CVE: CVE-2024-37625
Published: 2024-06-17
Description: zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /index.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/zhimengzhe/iBarn; https://github.com/zhimengzhe/iBarn/issues/20; https://github.com/zhimengzhe/iBarn
CVE: CVE-2024-37848
Published: 2024-06-17
Description: SQL Injection vulnerability in Online-Bookstore-Project-In-PHP v1.0 allows a local attacker to execute arbitrary code via the admin_delete.php component.
CVSS Score: 8.4 (HIGH)
CWE: CWE-89
References: https://github.com/Lanxiy7th/lx_CVE_report-/issues/13; https://github.com/Lanxiy7th/lx_CVE_report-/issues/13
CVE: CVE-2024-38469
Published: 2024-06-17
Description: zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /pay.php.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-80
References: https://github.com/zhimengzhe/iBarn; https://github.com/zhimengzhe/iBarn/issues/20; https://github.com/zhimengzhe/iBarn
CVE: CVE-2024-38470
Published: 2024-06-17
Description: zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /own.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/zhimengzhe/iBarn; https://github.com/zhimengzhe/iBarn/issues/20; https://github.com/zhimengzhe/iBarn
CVE: CVE-2024-1469
Published: 2024-06-17
Description: Rejected reason: ** REJECT ** Duplicate assignment. Please use CVE-2024-0845 instead.
CVE: CVE-2024-36581
Published: 2024-06-17
Description: A Prototype Pollution issue in abw badger-database 1.2.1 allows an attacker to execute arbitrary code via dist/badger-database.esm.
CVSS Score: 7.6 (HIGH)
CWE: CWE-94
References: https://gist.github.com/mestrtee/f6b2ed1b3b4bc0df994c7455fc6110bd; https://gist.github.com/mestrtee/f6b2ed1b3b4bc0df994c7455fc6110bd
CVE: CVE-2024-36582
Published: 2024-06-17
Description: alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend() method of Module.deepAssign (/src/index.js)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://gist.github.com/mestrtee/9fe4d3a862c62ce6b2b0d20d4c5fd346; https://gist.github.com/mestrtee/9fe4d3a862c62ce6b2b0d20d4c5fd346
CVE: CVE-2024-4032
Published: 2024-06-17
Description: The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries.

CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior.
CVSS Score: 7.5 (HIGH)
CWE: CWE-697
References: http://www.openwall.com/lists/oss-security/2024/06/17/3; https://github.com/python/cpython/commit/22adf29da8d99933ffed8647d3e0726edd16f7f8; https://github.com/python/cpython/commit/40d75c2b7f5c67e254d0a025e0f2e2c7ada7f69f
CVE: CVE-2024-0397
Published: 2024-06-17
Description: A defect was discovered in the Python “ssl” module where there is a memory
race condition with the ssl.SSLContext methods “cert_store_stats()” and
“get_ca_certs()”. The race condition can be triggered if the methods are
called at the same time as certificates are loaded into the SSLContext,
such as during the TLS handshake with a certificate directory configured.
This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.
CVSS Score: 7.4 (HIGH)
CWE: CWE-362
References: http://www.openwall.com/lists/oss-security/2024/06/17/2; https://github.com/python/cpython/commit/01c37f1d0714f5822d34063ca7180b595abf589d; https://github.com/python/cpython/commit/29c97287d205bf2f410f4895ebce3f43b5160524
CVE: CVE-2024-36573
Published: 2024-06-17
Description: almela obx before v.0.0.4 has a Prototype Pollution issue which allows arbitrary code execution via the obx/build/index.js:656), reduce (@almela/obx/build/index.js:470), Object.set (obx/build/index.js:269) component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://gist.github.com/mestrtee/fd8181bbc180d775f8367a2b9e0ffcd1; https://gist.github.com/mestrtee/fd8181bbc180d775f8367a2b9e0ffcd1
CVE: CVE-2024-36574
Published: 2024-06-17
Description: A Prototype Pollution issue in flatten-json 1.0.1 allows an attacker to execute arbitrary code via module.exports.unflattenJSON (flatten-json/index.js:42)
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-1321
References: https://gist.github.com/mestrtee/d5a0c93459599f77557b5bbe78b57325; https://gist.github.com/mestrtee/d5a0c93459599f77557b5bbe78b57325
CVE: CVE-2024-36575
Published: 2024-06-17
Description: A Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via global.accessor.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://gist.github.com/mestrtee/0d830798f20839d634278d7af0155f9e; https://gist.github.com/mestrtee/0d830798f20839d634278d7af0155f9e
CVE: CVE-2024-36577
Published: 2024-06-17
Description: apphp js-object-resolver < 3.1.1 is vulnerable to Prototype Pollution via Module.setNestedProperty.
CVSS Score: 8.3 (HIGH)
CWE: CWE-79, CWE-1321
References: https://gist.github.com/mestrtee/c90189f3d8480a5f267395ec40701373; https://gist.github.com/mestrtee/c90189f3d8480a5f267395ec40701373
CVE: CVE-2024-36578
Published: 2024-06-17
Description: akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-1321
References: https://gist.github.com/mestrtee/8bc749ec2b5453d887b2f4a362a65897; https://gist.github.com/mestrtee/8bc749ec2b5453d887b2f4a362a65897
CVE: CVE-2018-25103
Published: 2024-06-17
Description: There exists use-after-free vulnerabilities in lighttpd <= 1.4.50 request parsing which might read from invalid pointers to memory used in the same request, not from other requests.
CVSS Score: 5.3 (MEDIUM)
References: https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/2024/AMI-SA-2024002.pdf; https://blogvdoo.wordpress.com/2018/11/06/giving-back-securing-open-source-iot-projects/#more-736; https://github.com/lighttpd/lighttpd1.4/commit/d161f53de04bc826ce1bdaeb3dce2c72ca50a3f8
CVE: CVE-2024-36527
Published: 2024-06-17
Description: puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Attackers can exploit the URL parameter using the file protocol to read sensitive information from the server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://gist.github.com/7a6163/25fef08f75eed219c8ca21e332d6e911; https://gist.github.com/7a6163/25fef08f75eed219c8ca21e332d6e911
CVE: CVE-2024-36973
Published: 2024-06-17
Description: In the Linux kernel, the following vulnerability has been resolved:

misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe()

When auxiliary_device_add() returns error and then calls
auxiliary_device_uninit(), callback function
gp_auxiliary_device_release() calls ida_free() and
kfree(aux_device_wrapper) to free memory. We should't
call them again in the error handling path.

Fix this by skipping the redundant cleanup functions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://git.kernel.org/stable/c/086c6cbcc563c81d55257f9b27e14faf1d0963d3; https://git.kernel.org/stable/c/1efe[PII_REDACTED]24d05a367aa2b6ec3d275d5742; https://git.kernel.org/stable/c/34ae447b138680b5ed3660f7d935ff3faf88ba1a
CVE: CVE-2024-37661
Published: 2024-06-17
Description: TP-LINK TL-7DR5130 v1.0.23 is vulnerable to forged ICMP redirect message attacks. An attacker in the same WLAN as the victim can hijack the traffic between the victim and any remote server by sending out forged ICMP redirect messages.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-346
References: https://github.com/ouuan/router-vuln-report/blob/master/icmp-redirect/tl-7dr5130-redirect.md; https://github.com/ouuan/router-vuln-report/blob/master/icmp-redirect/tl-7dr5130-redirect.md
CVE: CVE-2024-37662
Published: 2024-06-17
Description: TP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-940
References: https://github.com/ouuan/router-vuln-report/blob/master/nat-rst/tl-7dr5130-nat-rst.md; https://github.com/ouuan/router-vuln-report/blob/master/nat-rst/tl-7dr5130-nat-rst.md
CVE: CVE-2024-37663
Published: 2024-06-17
Description: Redmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks. An attacker in the same WLAN as the victim can hijack the traffic between the victim and any remote server by sending out forged ICMP redirect messages.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-940
References: https://github.com/ouuan/router-vuln-report/blob/master/icmp-redirect/redmi-rb03-redirect.md; https://github.com/ouuan/router-vuln-report/blob/master/icmp-redirect/redmi-rb03-redirect.md
CVE: CVE-2024-37664
Published: 2024-06-17
Description: Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-940
References: https://github.com/ouuan/router-vuln-report/blob/master/nat-rst/redmi-rb03-nat-rst.md; https://github.com/ouuan/router-vuln-report/blob/master/nat-rst/redmi-rb03-nat-rst.md
CVE: CVE-2024-37794
Published: 2024-06-17
Description: Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service (DoS) via a crafted SMT2 input file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/cvc5/cvc5/issues/10813; https://github.com/cvc5/cvc5/issues/10813
CVE: CVE-2024-37795
Published: 2024-06-17
Description: A segmentation fault in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service (DoS) via a crafted SMT-LIB input file containing the `set-logic` command with specific formatting errors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/cvc5/cvc5/issues/10813; https://github.com/cvc5/cvc5/issues/10813
CVE: CVE-2024-6056
Published: 2024-06-17
Description: A vulnerability was found in nasirkhan Laravel Starter up to 11.8.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /forgot-password of the component Password Reset Handler. The manipulation of the argument Email leads to observable response discrepancy. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-268784. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.7 (LOW)
CWE: CWE-204, CWE-203
References: https://powerful-bulb-c36.notion.site/idor-c6eb58e8fc40416ba53c7915ca0174c4?pvs=4; https://vuldb.com/?ctiid.268784; https://vuldb.com/?id.268784
CVE: CVE-2024-6058
Published: 2024-06-17
Description: A vulnerability classified as problematic has been found in LabVantage LIMS 2017. This affects an unknown part of the file /labvantage/rc?command=page&page=SampleHistoricalList&_iframename=list&__crc=crc_[PII_REDACTED]60. The manipulation of the argument height/width leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-268785 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://gentle-khaan-c53.notion.site/Reflected-XSS-in-Labvantage-LIMS-cc960e84650a4df58ecabe82338e0272; https://vuldb.com/?ctiid.268785; https://vuldb.com/?id.268785
CVE: CVE-2024-36543
Published: 2024-06-17
Description: Incorrect access control in the Kafka Connect REST API in the STRIMZI Project 0.41.0 and earlier allows an attacker to deny the service for Kafka Mirroring, potentially mirror the topics' content to his Kafka cluster via a malicious connector (bypassing Kafka ACL if it exists), and potentially steal Kafka SASL credentials, by querying the MirrorMaker Kafka REST API.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-400
References: http://strimzi.com; https://github.com/almounah/vulnerability-research/tree/main/CVE-2024-36543; http://strimzi.com
CVE: CVE-2024-37840
Published: 2024-06-17
Description: SQL injection vulnerability in processscore.php in Itsourcecode Learning Management System Project In PHP With Source Code v1.0 allows remote attackers to execute arbitrary SQL commands via the LessonID parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/ganzhi-qcy/cve/issues/4; https://github.com/ganzhi-qcy/cve/issues/4
CVE: CVE-2024-38449
Published: 2024-06-17
Description: A Directory Traversal vulnerability in KasmVNC 1.3.1.230e50f7b89663316c70de7b0e3db6f6b9340489 and possibly earlier versions allows remote authenticated attackers to browse parent directories and read the content of files outside the scope of the application.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22
References: https://github.com/kasmtech/KasmVNC/issues/254; https://kasmweb.atlassian.net/servicedesk/customer/portal/3/topic/30ffee7f-4b85-4783-b118-6ae4fd8b0c52; https://kasmweb.com/kasmvnc
CVE: CVE-2024-6059
Published: 2024-06-17
Description: A vulnerability, which was classified as problematic, has been found in Ingenico Estate Manager 2023. This issue affects some unknown processing of the file /emgui/rest/ums/messages of the component News Feed. The manipulation of the argument message leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268787. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://gentle-khaan-c53.notion.site/Stored-XSS-in-Ingenico-The-Estate-Manager-90089eaef5574b929fe019c3d0686b63; https://vuldb.com/?ctiid.268787; https://vuldb.com/?id.268787
CVE: CVE-2024-37305
Published: 2024-06-17
Description: oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using post-quantum algorithms from liboqs. Flaws have been identified in the way oqs-provider handles lengths decoded with DECODE_UINT32 at the start of serialized hybrid (traditional + post-quantum) keys and signatures. Unchecked length values are later used for memory reads and writes; malformed input can lead to crashes or information leakage. Handling of plain/non-hybrid PQ key operation is not affected. This issue has been patched in in v0.6.1. All users are advised to upgrade. There are no workarounds for this issue.
CVSS Score: 8.2 (HIGH)
CWE: CWE-120, CWE-130, CWE-190, CWE-680, CWE-805
References: https://github.com/open-quantum-safe/oqs-provider/pull/416; https://github.com/open-quantum-safe/oqs-provider/security/advisories/GHSA-pqvr-5cr8-v6fx; https://github.com/open-quantum-safe/oqs-provider/pull/416