deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-5221
Published: 2024-06-06
Description: The Qi Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's file uploader in all versions up to, and including, 1.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3097241%40qi-blocks%2Ftrunk&old=3094374%40qi-blocks%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/bdf00861-e31e-485c-a562-12dba56af1c7?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3097241%40qi-blocks%2Ftrunk&old=3094374%40qi-blocks%2Ftrunk&sfp_email=&sfph_mail=
CVE: CVE-2024-5259
Published: 2024-06-06
Description: The MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hover_animation’ parameter in all versions up to, and including, 4.1.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/dc-woocommerce-multi-vendor/trunk/packages/mvx-elementor/widgets/class-mvx-widget-storesocial.php#L150; https://plugins.trac.wordpress.org/changeset/3097002/; https://wordpress.org/plugins/dc-woocommerce-multi-vendor/#developers
CVE: CVE-2024-5329
Published: 2024-06-06
Description: The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to blind SQL Injection via the ‘data[addonID]’ parameter in all versions up to, and including, 1.5.109 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://plugins.trac.wordpress.org/browser/unlimited-elements-for-elementor/trunk/inc_php/unitecreator_addons.class.php#L999; https://plugins.trac.wordpress.org/changeset/3097249/#file6; https://wordpress.org/plugins/unlimited-elements-for-elementor/#developers
CVE: CVE-2024-5038
Published: 2024-06-06
Description: The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.0.276 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/colibri-page-builder/trunk/extend-builder/shortcodes/blog/post-item.php#L132; https://plugins.trac.wordpress.org/changeset/3097694/; https://www.wordfence.com/threat-intel/vulnerabilities/id/08[PII_REDACTED]-4a07-b5db-f4ba5bf2d633?source=cve
CVE: CVE-2024-5188
Published: 2024-06-06
Description: The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'get_manual_calendar_events' function in all versions up to, and including, 5.9.22 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/trunk/includes/Elements/Event_Calendar.php#L3255; https://plugins.trac.wordpress.org/changeset/3097900/; https://www.wordfence.com/threat-intel/vulnerabilities/id/5a1d5fd1-80b6-4d62-9837-59ee1e020373?source=cve
CVE: CVE-2024-5657
Published: 2024-06-06
Description: The CraftCMS plugin Two-Factor Authentication in versions 3.3.1, 3.3.2 and 3.3.3 discloses the password hash of the currently authenticated user after submitting a valid TOTP.
CVSS Score: 3.7 (LOW)
CWE: CWE-499, CWE-522
References: http://www.openwall.com/lists/oss-security/2024/06/06/1; https://github.com/born05/craft-twofactorauthentication/releases/tag/3.3.4; https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20240202-01_CraftCMS_Plugin_Two-Factor_Authentication_Password_Hash_Disclosure
CVE: CVE-2024-5658
Published: 2024-06-06
Description: The CraftCMS plugin Two-Factor Authentication through 3.3.3 allows reuse of TOTP tokens multiple times within the validity period.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-303, CWE-287
References: http://www.openwall.com/lists/oss-security/2024/06/06/2; https://github.com/born05/craft-twofactorauthentication/releases/tag/3.3.4; https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20240202-02_CraftCMS_Plugin_Two-Factor_Authentication_TOTP_Valid_After_Use
CVE: CVE-2024-5673
Published: 2024-06-06
Description: Vulnerability in Dulldusk's PHP File Manager affecting version 1.7.8. This vulnerability consists of an XSS through the fm_current_dir parameter of index.php. An attacker could send a specially crafted JavaScript payload to an authenticated user and partially hijack their browser session.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-php-file-manager-dulldusk; https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-php-file-manager-dulldusk
CVE: CVE-2024-5489
Published: 2024-06-06
Description: The Wbcom Designs – Custom Font Uploader plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'cfu_delete_customfont' function in all versions up to, and including, 2.3.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete any custom font.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/custom-font-uploader/trunk/inc/cfup-functions.php#L20; https://plugins.trac.wordpress.org/changeset/3097373/; https://www.wordfence.com/threat-intel/vulnerabilities/id/2339ebbf-2302-4e83-9743-ca79fda20f05?source=cve
CVE: CVE-2024-36779
Published: 2024-06-06
Description: Sourcecodester Stock Management System v1.0 is vulnerable to SQL Injection via editCategories.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/CveSecLook/cve/issues/42; https://github.com/CveSecLook/cve/issues/42
CVE: CVE-2024-5675
Published: 2024-06-06
Description: Untrusted data deserialization vulnerability has been found in Mentor - Employee Portal, affecting version 3.83.35. This vulnerability could allow an attacker to execute arbitrary code, by injecting a malicious payload into the “ViewState” field.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-502
References: https://www.incibe.es/en/incibe-cert/notices/aviso/unreliable-data-deserialization-vulnerability-mentor; https://www.incibe.es/en/incibe-cert/notices/aviso/unreliable-data-deserialization-vulnerability-mentor
CVE: CVE-2024-5684
Published: 2024-06-06
Description: An attacker with access to the private network (the charger is connected to) or local access to the Ethernet-Interface can exploit a faulty implementation of the JWT-library in order to bypass the password authentication to the web configuration interface and then has full access as the user would have. However, an attacker will not have developer or admin rights. If the implementation of the JWT-library is wrongly configured to accept "none"-algorithms, the server will pass insecure JWT. A local, unauthenticated attacker can exploit this vulnerability to bypass the authentication mechanism.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-345, CWE-345
References: https://asrg.io/security-advisories/vulnerability-in-id-charger-connect-and-pro-from-volkswagen-group-charging-gmbh-elli-evbox-versions-spr3-2b-spr3-51-and-spr3-52/; https://asrg.io/security-advisories/vulnerability-in-id-charger-connect-and-pro-from-volkswagen-group-charging-gmbh-elli-evbox-versions-spr3-2b-spr3-51-and-spr3-52/
CVE: CVE-2024-34832
Published: 2024-06-06
Description: Directory Traversal vulnerability in CubeCart v.6.5.5 and before allows an attacker to execute arbitrary code via a crafted file uploaded to the _g and node parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://github.com/julio-cfa/CVE-2024-34832; https://github.com/julio-cfa/CVE-2024-34832
CVE: CVE-2024-36106
Published: 2024-06-06
Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. It’s possible for authenticated users to enumerate clusters by name by inspecting error messages. It’s also possible to enumerate the names of projects with project-scoped clusters if you know the names of the clusters. This vulnerability is fixed in 2.11.3, 2.10.12, and 2.9.17.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209, CWE-209
References: https://github.com/argoproj/argo-cd/commit/c2647055c261a550e5da075793260f6524e65ad9; https://github.com/argoproj/argo-cd/security/advisories/GHSA-3cqf-953p-h5cp; https://github.com/argoproj/argo-cd/commit/c2647055c261a550e5da075793260f6524e65ad9
CVE: CVE-2024-35178
Published: 2024-06-06
Description: The Jupyter Server provides the backend for Jupyter web applications. Jupyter Server on Windows has a vulnerability that lets unauthenticated attackers leak the NTLMv2 password hash of the Windows user running the Jupyter server. An attacker can crack this password to gain access to the Windows machine hosting the Jupyter server, or access other network-accessible machines or 3rd party services using that credential. Or an attacker perform an NTLM relay attack without cracking the credential to gain access to other network-accessible machines. This vulnerability is fixed in 2.14.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/jupyter-server/jupyter_server/commit/79fbf801c5908f4d1d9bc90004b74cfaaeeed2df; https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-hrw6-wg82-cm62; https://github.com/jupyter-server/jupyter_server/commit/79fbf801c5908f4d1d9bc90004b74cfaaeeed2df
CVE: CVE-2024-36399
Published: 2024-06-06
Description: Kanboard is project management software that focuses on the Kanban methodology. The vuln is in app/Controller/ProjectPermissionController.php function addUser(). The users permission to add users to a project only get checked on the URL parameter project_id. If the user is authorized to add users to this project the request gets processed. The users permission for the POST BODY parameter project_id does not get checked again while processing. An attacker with the 'Project Manager' on a single project may take over any other project. The vulnerability is fixed in 1.2.37.
CVSS Score: 8.2 (HIGH)
CWE: CWE-284, CWE-285, CWE-639, CWE-639
References: https://github.com/kanboard/kanboard/commit/b6703688aac8187f5ea4d4d704fc7afeeffeafa7; https://github.com/kanboard/kanboard/security/advisories/GHSA-x8v7-3ghx-65cv; https://github.com/kanboard/kanboard/commit/b6703688aac8187f5ea4d4d704fc7afeeffeafa7
CVE: CVE-2024-37150
Published: 2024-06-06
Description: An issue in `.npmrc` support in Deno 1.44.0 was discovered where Deno would send `.npmrc` credentials for the scope to the tarball URL when the registry provided URLs for a tarball on a different domain. All users relying on .npmrc are potentially affected by this vulnerability if their private registry references tarball URLs at a different domain. This includes usage of deno install subcommand, auto-install for npm: specifiers and LSP usage. It is recommended to upgrade to Deno 1.44.1 and if your private registry ever serves tarballs at a different domain to rotate your registry credentials.
CVSS Score: 7.6 (HIGH)
CWE: CWE-200, CWE-706
References: https://github.com/denoland/deno/commit/566adb7c0a0c0845e90a6e867a2c0ef5d2ada575; https://github.com/denoland/deno/security/advisories/GHSA-rfc6-h225-3vxv; https://github.com/npm/cli/wiki/%22No-auth-for-URI,-but-auth-present-for-scoped-registry%22
CVE: CVE-2024-37152
Published: 2024-06-06
Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The vulnerability allows unauthorized access to the sensitive settings exposed by  /api/v1/settings endpoint without authentication. All sensitive settings are hidden except passwordPattern. This vulnerability is fixed in 2.11.3, 2.10.12, and 2.9.17.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287, CWE-306, CWE-306
References: https://github.com/argoproj/argo-cd/commit/256d90178b11b04bc8174d08d7b663a2a7b1771b; https://github.com/argoproj/argo-cd/security/advisories/GHSA-87p9-x75h-p4j2; https://github.com/argoproj/argo-cd/commit/256d90178b11b04bc8174d08d7b663a2a7b1771b
CVE: CVE-2024-37156
Published: 2024-06-06
Description: The SuluFormBundle adds support for creating dynamic forms in Sulu Admin. The TokenController get parameter formName is not sanitized in the returned input field which leads to XSS. This vulnerability is fixed in 2.5.3.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-80, CWE-79
References: https://github.com/sulu/SuluFormBundle/commit/3f341b71a7309cbc8fd2c5bff894c654d1679b17; https://github.com/sulu/SuluFormBundle/security/advisories/GHSA-rrvc-c7xg-7cf3; https://github.com/sulu/SuluFormBundle/commit/3f341b71a7309cbc8fd2c5bff894c654d1679b17
CVE: CVE-2024-33655
Published: 2024-06-06
Description: The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service (resource consumption) by arranging for DNS queries to be accumulated for seconds, such that responses are later sent in a pulsing burst (which can be considered traffic amplification in some cases), aka the "DNSBomb" issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://alas.aws.amazon.com/ALAS-2024-1934.html; https://datatracker.ietf.org/doc/html/rfc1035; https://github.com/NLnetLabs/unbound/commit/c3206f4568f60c486be6d165b1f2b5b254fea3de
CVE: CVE-2024-36742
Published: 2024-06-06
Description: An issue in the oneflow.scatter_nd parameter OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when index parameter exceeds the range of shape.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://gist.github.com/Redmept1on/761f0d0d09a912b8b93e0cf8dd877e94; https://gist.github.com/Redmept1on/761f0d0d09a912b8b93e0cf8dd877e94
CVE: CVE-2024-1879
Published: 2024-06-06
Description: A Cross-Site Request Forgery (CSRF) vulnerability in significant-gravitas/autogpt version v0.5.0 allows attackers to execute arbitrary commands on the AutoGPT server. The vulnerability stems from the lack of protections on the API endpoint receiving instructions, enabling an attacker to direct a user running AutoGPT in their local network to a malicious website. This site can then send crafted requests to the AutoGPT server, leading to command execution. The issue is exacerbated by CORS being enabled for arbitrary origins by default, allowing the attacker to read the response of all cross-site queries. This vulnerability was addressed in version 5.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/significant-gravitas/autogpt/commit/26324f29849967fa72c207da929af612f1740669; https://huntr.com/bounties/125c2d0c-0481-4e5c-ae90-fec263acdf32; https://github.com/significant-gravitas/autogpt/commit/26324f29849967fa72c207da929af612f1740669
CVE: CVE-2024-2914
Published: 2024-06-06
Description: A TarSlip vulnerability exists in the deepjavalibrary/djl, affecting version 0.26.0 and fixed in version 0.27.0. This vulnerability allows an attacker to manipulate file paths within tar archives to overwrite arbitrary files on the target system. Exploitation of this vulnerability could lead to remote code execution, privilege escalation, data theft or manipulation, and denial of service. The vulnerability is due to improper validation of file paths during the extraction of tar files, as demonstrated in multiple occurrences within the library's codebase, including but not limited to the files_util.py and extract_imagenet.py scripts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-29, CWE-22
References: https://github.com/deepjavalibrary/djl/commit/5235be508cec9e8cb6f496a4ed2fa40e4f62c370; https://huntr.com/bounties/b064bd2f-bf6e-4fc0-898e-7d02a9b97e24; https://github.com/deepjavalibrary/djl/commit/5235be508cec9e8cb6f496a4ed2fa40e4f62c370
CVE: CVE-2024-30368
Published: 2024-06-06
Description: A10 Thunder ADC CsrRequestView Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of A10 Thunder ADC. Authentication is required to exploit this vulnerability.

The specific flaw exists within the CsrRequestView class. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of a10user. Was ZDI-CAN-22517.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-77
References: https://support.a10networks.com/support/security_advisory/cve-2024-30368-cve-2024-30369; https://www.zerodayinitiative.com/advisories/ZDI-24-524/; https://support.a10networks.com/support/security_advisory/cve-2024-30368-cve-2024-30369
CVE: CVE-2024-30369
Published: 2024-06-06
Description: A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of A10 Thunder ADC. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The specific flaw exists within the installer. The issue results from incorrect permissions on a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-22754.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732, CWE-732
References: https://support.a10networks.com/support/security_advisory/cve-2024-30368-cve-2024-30369; https://www.zerodayinitiative.com/advisories/ZDI-24-525/; https://support.a10networks.com/support/security_advisory/cve-2024-30368-cve-2024-30369
CVE: CVE-2024-30374
Published: 2024-06-06
Description: Luxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of KSP files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22449.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-24-566/; https://www.zerodayinitiative.com/advisories/ZDI-24-566/
CVE: CVE-2024-30375
Published: 2024-06-06
Description: Luxion KeyShot Viewer KSP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of KSP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22515.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.zerodayinitiative.com/advisories/ZDI-24-565/; https://www.zerodayinitiative.com/advisories/ZDI-24-565/
CVE: CVE-2024-36736
Published: 2024-06-06
Description: An issue in the oneflow.permute component of OneFlow-Inc. Oneflow v0.9.1 causes an incorrect calculation when the same dimension operation is performed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-682, CWE-682
References: https://gist.github.com/Redmept1on/6de04fb6c7af6956973fe2765c4d4576; https://gist.github.com/Redmept1on/6de04fb6c7af6956973fe2765c4d4576
CVE: CVE-2024-36737
Published: 2024-06-06
Description: Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting a negative value into the oneflow.full parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-229
References: https://gist.github.com/Redmept1on/3a77cc722f82b57f99ccbe835aacf27d; https://gist.github.com/Redmept1on/3a77cc722f82b57f99ccbe835aacf27d
CVE: CVE-2024-36743
Published: 2024-06-06
Description: An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when an empty array is processed with oneflow.dot.
CVSS Score: 7.5 (HIGH)
CWE: CWE-129, CWE-400
References: https://gist.github.com/Redmept1on/64aa53d37e99975725a7d3e2dc9d9761; https://gist.github.com/Redmept1on/64aa53d37e99975725a7d3e2dc9d9761
CVE: CVE-2024-36745
Published: 2024-06-06
Description: An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting a negative value into the oneflow.index_select parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://gist.github.com/Redmept1on/42caad5576101cdd93deb6470d979952; https://gist.github.com/Redmept1on/42caad5576101cdd93deb6470d979952
CVE: CVE-2024-3033
Published: 2024-06-06
Description: An improper authorization vulnerability exists in the mintplex-labs/anything-llm application, specifically within the '/api/v/' endpoint and its sub-routes. This flaw allows unauthenticated users to perform destructive actions on the VectorDB, including resetting the database and deleting specific namespaces, without requiring any authorization or permissions. The issue affects all versions up to and including the latest version, with a fix introduced in version 1.0.0. Exploitation of this vulnerability can lead to complete data loss of document embeddings across all workspaces, rendering workspace chats and embeddable chat widgets non-functional. Additionally, attackers can list all namespaces, potentially exposing private workspace names.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-863, CWE-863
References: https://github.com/mintplex-labs/anything-llm/commit/bf8df60c02b9ddc7ba682809ca12c[PII_REDACTED]a; https://huntr.com/bounties/8a98a0b4-7886-41c5-8624-fc5c21972e5a; https://github.com/mintplex-labs/anything-llm/commit/bf8df60c02b9ddc7ba682809ca12c[PII_REDACTED]a