deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-36950
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

firewire: ohci: mask bus reset interrupts between ISR and bottom half

In the FireWire OHCI interrupt handler, if a bus reset interrupt has
occurred, mask bus reset interrupts until bus_reset_work has serviced and
cleared the interrupt.

Normally, we always leave bus reset interrupts masked. We infer the bus
reset from the self-ID interrupt that happens shortly thereafter. A
scenario where we unmask bus reset interrupts was introduced in 2008 in
a007bb857e0b26f5d8b73c2ff90782d9c0972620: If
OHCI_PARAM_DEBUG_BUSRESETS (8) is set in the debug parameter bitmask, we
will unmask bus reset interrupts so we can log them.

irq_handler logs the bus reset interrupt. However, we can't clear the bus
reset event flag in irq_handler, because we won't service the event until
later. irq_handler exits with the event flag still set. If the
corresponding interrupt is still unmasked, the first bus reset will
usually freeze the system due to irq_handler being called again each
time it exits. This freeze can be reproduced by loading firewire_ohci
with "modprobe firewire_ohci debug=-1" (to enable all debugging output).
Apparently there are also some cases where bus_reset_work will get called
soon enough to clear the event, and operation will continue normally.

This freeze was first reported a few months after a007bb85 was committed,
but until now it was never fixed. The debug level could safely be set
to -1 through sysfs after the module was loaded, but this would be
ineffectual in logging bus reset interrupts since they were only
unmasked during initialization.

irq_handler will now leave the event flag set but mask bus reset
interrupts, so irq_handler won't be called again and there will be no
freeze. If OHCI_PARAM_DEBUG_BUSRESETS is enabled, bus_reset_work will
unmask the interrupt after servicing the event, so future interrupts
will be caught as desired.

As a side effect to this change, OHCI_PARAM_DEBUG_BUSRESETS can now be
enabled through sysfs in addition to during initial module loading.
However, when enabled through sysfs, logging of bus reset interrupts will
be effective only starting with the second bus reset, after
bus_reset_work has executed.
CVSS Score: 4.4 (MEDIUM)
References: https://git.kernel.org/stable/c/31279bbca40d2f40cb3bbb6d538ec9620a645dec; https://git.kernel.org/stable/c/4f9cc355c328fc4f41cbd9c4cd58b235184fa420; https://git.kernel.org/stable/c/5982887de60c1b84f9c0ca07c835814d07fd1da0
CVE: CVE-2024-36951
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: range check cp bad op exception interrupts

Due to a CP interrupt bug, bad packet garbage exception codes are raised.
Do a range check so that the debugger and runtime do not receive garbage
codes.
Update the user api to guard exception code type checking as well.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/0cac183b98d8a8c692c98e8dba37df15a9e9210d; https://git.kernel.org/stable/c/41dc[PII_REDACTED]dd41100b85647ed489e1d5c2f2; https://git.kernel.org/stable/c/b6735bfe941486c5dfc9c3085d2d75d4923f9449
CVE: CVE-2024-36952
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Move NPIV's transport unregistration to after resource clean up

There are cases after NPIV deletion where the fabric switch still believes
the NPIV is logged into the fabric.  This occurs when a vport is
unregistered before the Remove All DA_ID CT and LOGO ELS are sent to the
fabric.

Currently fc_remove_host(), which calls dev_loss_tmo for all D_IDs including
the fabric D_ID, removes the last ndlp reference and frees the ndlp rport
object.  This sometimes causes the race condition where the final DA_ID and
LOGO are skipped from being sent to the fabric switch.

Fix by moving the fc_remove_host() and scsi_remove_host() calls after DA_ID
and LOGO are sent.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-459
References: https://git.kernel.org/stable/c/0936809d968ecf81e0726fbd02ff2a5732d960c3; https://git.kernel.org/stable/c/4ddf01f2f1504fa08b766e8cfeec558e9f8eef6c; https://git.kernel.org/stable/c/718602cd15f4c[PII_REDACTED]ea3066a89eeb46278
CVE: CVE-2024-36953
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()

vgic_v2_parse_attr() is responsible for finding the vCPU that matches
the user-provided CPUID, which (of course) may not be valid. If the ID
is invalid, kvm_get_vcpu_by_id() returns NULL, which isn't handled
gracefully.

Similar to the GICv3 uaccess flow, check that kvm_get_vcpu_by_id()
actually returns something and fail the ioctl if not.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/01981276d64e542c177b243f7c979fee855d5487; https://git.kernel.org/stable/c/17db92da8be5dd3bf63c01f4109fe47db64fc66f; https://git.kernel.org/stable/c/3a5b0378ac6776c7c31b18e0f3c1389bd6005e80
CVE: CVE-2024-36954
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

tipc: fix a possible memleak in tipc_buf_append

__skb_linearize() doesn't free the skb when it fails, so move
'*buf = NULL' after __skb_linearize(), so that the skb can be
freed on the err path.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/01cd1b7b685751ee422d00d050292a3d277652d6; https://git.kernel.org/stable/c/2f87fd9476cf9725d774e6dcb7d17859c6a6d1ae; https://git.kernel.org/stable/c/3210d34fda4caff212cb53729e6bd46de604d565
CVE: CVE-2024-36955
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node()

The documentation for device_get_named_child_node() mentions this
important point:

"
The caller is responsible for calling fwnode_handle_put() on the
returned fwnode pointer.
"

Add fwnode_handle_put() to avoid a leaked reference.
CVSS Score: 7.7 (HIGH)
CWE: CWE-200
References: https://git.kernel.org/stable/c/722d33c442e66e4aabd3e778958d696ff3a2777e; https://git.kernel.org/stable/c/7db626d2730d3d80fd[PII_REDACTED]4b1e507f07bf; https://git.kernel.org/stable/c/7ef6ecf98ce309b1f4e5a25cddd5965d01feea07
CVE: CVE-2024-36956
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

thermal/debugfs: Free all thermal zone debug memory on zone removal

Because thermal_debug_tz_remove() does not free all memory allocated for
thermal zone diagnostics, some of that memory becomes unreachable after
freeing the thermal zone's struct thermal_debugfs object.

Address this by making thermal_debug_tz_remove() free all of the memory
in question.

Cc :6.8+ <stable@vger.kernel.org> # 6.8+
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/72c1afffa4c645fe0e0f1c03e5f34395ed65b5f4; https://git.kernel.org/stable/c/f51564e4b3992b53df79460ed5781a5330b5b1d5; https://git.kernel.org/stable/c/72c1afffa4c645fe0e0f1c03e5f34395ed65b5f4
CVE: CVE-2024-36957
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: avoid off-by-one read from userspace

We try to access count + 1 byte from userspace with memdup_user(buffer,
count + 1). However, the userspace only provides buffer of count bytes and
only these count bytes are verified to be okay to access. To ensure the
copied buffer is NUL terminated, we use memdup_user_nul instead.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-193
References: https://git.kernel.org/stable/c/0a0285cee11c7dcc2657bcd456e469958a5009e7; https://git.kernel.org/stable/c/8f11fe3ea3fc261640cfc8a5addd838000407c67; https://git.kernel.org/stable/c/bcdac70adceb44373da204c3c297f2a98e13216e
CVE: CVE-2024-36958
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

NFSD: Fix nfsd4_encode_fattr4() crasher

Ensure that args.acl is initialized early. It is used in an
unconditional call to kfree() on the way out of
nfsd4_encode_fattr4().
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/18180a4550d08be4eb0387fe83f02f703f92d4e7; https://git.kernel.org/stable/c/6a7b07689af6e4e023404bf69b1230f43b2a15bc; https://git.kernel.org/stable/c/18180a4550d08be4eb0387fe83f02f703f92d4e7
CVE: CVE-2024-36959
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()

If we fail to allocate propname buffer, we need to drop the reference
count we just took. Because the pinctrl_dt_free_maps() includes the
droping operation, here we call it directly.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/026e24cf31733dbd97f41cc9bc5273ace428eeec; https://git.kernel.org/stable/c/06780473cb8a858d1d6cab2673e021b072a852d1; https://git.kernel.org/stable/c/35ab679e8bb5a81a4f922d3efbd43e32bce69274
CVE: CVE-2024-3300
Published: 2024-05-30
Description: An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to pre-authentication remote code execution.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-502
References: https://www.3ds.com/vulnerability/advisories; https://www.3ds.com/vulnerability/advisories
CVE: CVE-2024-3301
Published: 2024-05-30
Description: An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to post-authentication remote code execution.
CVSS Score: 8.5 (HIGH)
CWE: CWE-502
References: https://www.3ds.com/vulnerability/advisories; https://www.3ds.com/vulnerability/advisories
CVE: CVE-2024-5518
Published: 2024-05-30
Description: A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file change_profile_picture.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266589 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/L1OudFd8cl09/CVE/issues/1; https://vuldb.com/?ctiid.266589; https://vuldb.com/?id.266589
CVE: CVE-2024-5519
Published: 2024-05-30
Description: A vulnerability classified as critical was found in ItsourceCode Learning Management System Project In PHP 1.0. This vulnerability affects unknown code of the file login.php. The manipulation of the argument user_email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-266590 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/L1OudFd8cl09/CVE/issues/2; https://vuldb.com/?ctiid.266590; https://vuldb.com/?id.266590
CVE: CVE-2024-35349
Published: 2024-05-30
Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/category/view_category.php. Manipulating the argument id can result in SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://vuln.pentester.stream/pentester-vulnerability-research/post/2298565/vuln4-blind-sql-injection-time-based; https://vuln.pentester.stream/pentester-vulnerability-research/post/2298565/vuln4-blind-sql-injection-time-based
CVE: CVE-2024-35350
Published: 2024-05-30
Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/?page=borrow/view_borrow. Manipulating the argument id can result in SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://vuln.pentester.stream/pentester-vulnerability-research/post/2298666/vuln6-blind-sql-injection-time-based; https://vuln.pentester.stream/pentester-vulnerability-research/post/2298666/vuln6-blind-sql-injection-time-based
CVE: CVE-2024-35351
Published: 2024-05-30
Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/SystemSettings.php?f=update_settings. Manipulating the parameter name results in cross-site scripting.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://vuln.pentester.stream/pentester-vulnerability-research/post/2298534/vuln2-execution-after-redirect-ear-stored-cross-site-scripting-xss; https://vuln.pentester.stream/pentester-vulnerability-research/post/2298534/vuln2-execution-after-redirect-ear-stored-cross-site-scripting-xss
CVE: CVE-2024-35352
Published: 2024-05-30
Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/Users.php?f=save. Manipulating the parameter middlename results in cross-site scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://vuln.pentester.stream/pentester-vulnerability-research/post/2298742/vuln7-stored-cross-site-scripting-xss; https://vuln.pentester.stream/pentester-vulnerability-research/post/2298742/vuln7-stored-cross-site-scripting-xss
CVE: CVE-2024-35353
Published: 2024-05-30
Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Users.php?f=save. Manipulating the argument id can result in improper authorization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://vuln.pentester.stream/pentester-vulnerability-research/post/2298777/vuln8-insecure-direct-object-references-idor; https://vuln.pentester.stream/pentester-vulnerability-research/post/2298777/vuln8-insecure-direct-object-references-idor
CVE: CVE-2024-35359
Published: 2024-05-30
Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_item. Manipulating the argument id can result in SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://vuln.pentester.stream/pentester-vulnerability-research/post/2298737/vuln15-blind-sql-injection-time-based; https://vuln.pentester.stream/pentester-vulnerability-research/post/2298737/vuln15-blind-sql-injection-time-based
CVE: CVE-2024-35428
Published: 2024-05-30
Description: ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via BaseMediaFile. An authenticated user can delete local files from the server which can lead to DoS.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35428.md; https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35428.md
CVE: CVE-2024-35429
Published: 2024-05-30
Description: ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via eventRecord.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-31
References: https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35429.md; https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35429.md
CVE: CVE-2024-35431
Published: 2024-05-30
Description: ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64. An unauthenticated user can download local files from the server. NOTE: Third parties have indicated other versions are also vulnerable including up to 6.4.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-31
References: https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35431.md; https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35431.md
CVE: CVE-2024-36118
Published: 2024-05-30
Description: MeterSphere is a test management and interface testing tool. In affected versions users without workspace permissions can view functional test cases of other workspaces beyond their authority. This issue has been addressed in version 2.10.15-lts. Users of MeterSphere are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-200
References: https://github.com/metersphere/metersphere/security/advisories/GHSA-qxx2-p3w2-w4r6; https://github.com/metersphere/metersphere/security/advisories/GHSA-qxx2-p3w2-w4r6
CVE: CVE-2024-5537
Published: 2024-05-30
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-2420
Published: 2024-05-30
Description: LenelS2 NetBox access control and event monitoring system was discovered to contain Hardcoded Credentials in versions prior to and including 5.6.1 which allows an attacker to bypass authentication requirements.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-259
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-151-01; https://www.corporate.carrier.com/Images/CARR-PSA-2024-01-NetBox_tcm558-227956.pdf; https://www.cisa.gov/news-events/ics-advisories/icsa-24-151-01
CVE: CVE-2024-2421
Published: 2024-05-30
Description: LenelS2 NetBox access control and event monitoring system was discovered to contain an unauthenticated RCE in versions prior to and including 5.6.1, which allows an attacker to execute malicious commands with elevated permissions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-151-01; https://www.corporate.carrier.com/Images/CARR-PSA-2024-01-NetBox_tcm558-227956.pdf; https://www.cisa.gov/news-events/ics-advisories/icsa-24-151-01
CVE: CVE-2024-2422
Published: 2024-05-30
Description: LenelS2 NetBox access control and event monitoring system was discovered to contain an authenticated RCE in versions prior to and including 5.6.1, which allows an attacker to execute malicious commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-88
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-151-01; https://www.corporate.carrier.com/Images/CARR-PSA-2024-01-NetBox_tcm558-227956.pdf; https://www.cisa.gov/news-events/ics-advisories/icsa-24-151-01
CVE: CVE-2024-35433
Published: 2024-05-30
Description: ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Incorrect Access Control. An authenticated user, without the permissions of managing users, can create a new admin user.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284
References: https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35433.md; https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35433.md
CVE: CVE-2024-35468
Published: 2024-05-30
Description: A SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://github.com/dovankha/CVE-2024-35468; https://www.sourcecodester.com/php/15740/human-resource-management-system-project-php-and-mysql-free-source-code.html; https://github.com/dovankha/CVE-2024-35468
CVE: CVE-2024-35469
Published: 2024-05-30
Description: A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/dovankha/CVE-2024-35469; https://www.sourcecodester.com/php/15740/human-resource-management-system-project-php-and-mysql-free-source-code.html; https://github.com/dovankha/CVE-2024-35469
CVE: CVE-2024-35228
Published: 2024-05-30
Description: Wagtail is an open source content management system built on Django. Due to an improperly applied permission check in the `wagtail.contrib.settings` module, a user with access to the Wagtail admin and knowledge of the URL of the edit view for a settings model can access and update that setting, even when they have not been granted permission over the model. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin. Patched versions have been released as Wagtail 6.0.5 and 6.1.2. Wagtail releases prior to 6.0 are unaffected. Users are advised to upgrade. Site owners who are unable to upgrade to a patched version can avoid the vulnerability in `ModelViewSet` by registering the model as a snippet instead. No workaround is available for `wagtail.contrib.settings`.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-280
References: https://github.com/wagtail/wagtail/commit/284f75a6f91f7ab18cc304d7d34f33b559ae37b1; https://github.com/wagtail/wagtail/security/advisories/GHSA-xxfm-vmcf-g33f; https://github.com/wagtail/wagtail/commit/284f75a6f91f7ab18cc304d7d34f33b559ae37b1
CVE: CVE-2024-32877
Published: 2024-05-30
Description: Yii 2 is a PHP application framework. During internal penetration testing of a product based on Yii2, users discovered a Cross-site Scripting (XSS) vulnerability within the framework itself. This issue is relevant for the latest version of Yii2 (2.0.49.3). This issue lies in the mechanism for displaying function argument values in the stack trace. The vulnerability manifests when an argument's value exceeds 32 characters. For convenience, argument values exceeding this limit are truncated and displayed with an added "...". The full argument value becomes visible when hovering over it with the mouse, as it is displayed in the title attribute of a span tag. However, the use of a double quote (") allows an attacker to break out of the title attribute's value context and inject their own attributes into the span tag, including malicious JavaScript code through event handlers such as onmousemove. This vulnerability allows an attacker to execute arbitrary JavaScript code in the security context of the victim's site via a specially crafted link. This could lead to the theft of cookies (including httpOnly cookies, which are accessible on the page), content substitution, or complete takeover of user accounts. This issue has been addressed in version 2.0.50. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-79
References: https://github.com/yiisoft/yii2/commit/f7baab16e79f2369d4838ab5653c3c07ecf26615; https://github.com/yiisoft/yii2/security/advisories/GHSA-qg5r-95m4-mjgj; https://github.com/yiisoft/yii2/commit/f7baab16e79f2369d4838ab5653c3c07ecf26615
CVE: CVE-2024-34171
Published: 2024-05-30
Description: Fuji Electric Monitouch V-SFT 
is vulnerable to a stack-based buffer overflow, which could allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-151-02; https://www.cisa.gov/news-events/ics-advisories/icsa-24-151-02