deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-39895
Published: 2024-07-08
Description: Directus is a real-time API and App dashboard for managing SQL database content. A denial of service (DoS) attack by field duplication in GraphQL is a type of attack where an attacker exploits the flexibility of GraphQL to overwhelm a server by requesting the same field multiple times in a single query. This can cause the server to perform redundant computations and consume excessive resources, leading to a denial of service for legitimate users. Request to the endpoint /graphql are sent when visualizing graphs generated at a dashboard. By modifying the data sent and duplicating many times the fields a DoS attack is possible. This vulnerability is fixed in 10.12.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/directus/directus/commit/543b345695071c1de61a35004bd063fe59dba0c8; https://github.com/directus/directus/security/advisories/GHSA-7hmh-pfrp-vcx4; https://github.com/directus/directus/commit/543b345695071c1de61a35004bd063fe59dba0c8
CVE: CVE-2024-1305
Published: 2024-07-08
Description: tap-windows6 driver version 9.26 and earlier does not properly 
check the size data of incomming write operations which an attacker can 
use to overflow memory buffers, resulting in a bug check and potentially
 arbitrary code execution in kernel space
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://community.openvpn.net/openvpn/wiki/CVE-2024-1305; https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html; https://community.openvpn.net/openvpn/wiki/CVE-2024-1305
CVE: CVE-2024-39896
Published: 2024-07-08
Description: Directus is a real-time API and App dashboard for managing SQL database content. When relying on SSO providers in combination with local authentication it can be possible to enumerate existing SSO users in the instance. This is possible because if an email address exists in Directus and belongs to a known SSO provider then it will throw a "helpful" error that the user belongs to another provider. This vulnerability is fixed in 10.13.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/directus/directus/commit/454cb534d6ffa547feb11f4d74b932ae7368dae2; https://github.com/directus/directus/security/advisories/GHSA-jgf4-vwc3-r46v; https://github.com/directus/directus/commit/454cb534d6ffa547feb11f4d74b932ae7368dae2
CVE: CVE-2024-4882
Published: 2024-07-08
Description: The user may be redirected to an arbitrary site in Sitefinity 15.1.8321.0 and previous versions.
CWE: CWE-601
References: https://community.progress.com/s/article/Open-Redirect-vulnerability-CVE-2024-4882; https://www.progress.com/sitefinity-cms; https://community.progress.com/s/article/Open-Redirect-vulnerability-CVE-2024-4882
CVE: CVE-2024-6409
Published: 2024-07-08
Description: A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd). If a remote attacker does not authenticate within a set time period, then sshd's SIGALRM handler is called asynchronously. However, this signal handler calls various functions that are not async-signal-safe, for example, syslog(). As a consequence of a successful attack, in the worst case scenario, an attacker may be able to perform a remote code execution (RCE) as an unprivileged user running the sshd server.
CVSS Score: 7.0 (HIGH)
CWE: CWE-364
References: https://access.redhat.com/errata/RHSA-2024:4457; https://access.redhat.com/errata/RHSA-2024:4613; https://access.redhat.com/errata/RHSA-2024:4716
CVE: CVE-2024-6227
Published: 2024-07-08
Description: A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by configuring the remote tracking server to point at itself. This results in the server endlessly connecting to itself, rendering it unable to respond to other connections.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: https://huntr.com/bounties/abcea7c6-bb3b-45e9-aa15-9eb6b224451a; https://huntr.com/bounties/abcea7c6-bb3b-45e9-aa15-9eb6b224451a
CVE: CVE-2024-6580
Published: 2024-07-08
Description: The /n software IPWorks SSH library SFTPServer component can be induced to make unintended filesystem or network path requests when loading a SSH public key or certificate. To be exploitable, an application calling the SFTPServer component must grant user access without verifying the SSH public key or certificate (which would most likely be a separate vulnerability in the calling application). IPWorks SSH versions 22.0.8945 and 24.0.8945 were released to address this condition by blocking all filesystem and network path requests for SSH public keys or certificates.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1390, CWE-347
References: https://www.nsoftware.com/kb/articles/cve-2024-5806; https://www.nsoftware.com/kb/articles/cve-2024-5806
CVE: CVE-2024-38372
Published: 2024-07-08
Description: Undici is an HTTP/1.1 client, written from scratch for Node.js. Depending on network and process conditions of a `fetch()` request, `response.arrayBuffer()` might include portion of memory from the Node.js process. This has been patched in v6.19.2.
CVSS Score: 2.0 (LOW)
CWE: CWE-201
References: https://github.com/nodejs/undici/commit/f979ec3204ca489abf30e7d20e9fee9ea7711d36; https://github.com/nodejs/undici/issues/3328; https://github.com/nodejs/undici/issues/3337
CVE: CVE-2024-5971
Published: 2024-07-08
Description: A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource consumption, leaving the server side to a denial of service attack. This happens only with Java 17 TLSv1.3 scenarios.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://access.redhat.com/errata/RHSA-2024:4392; https://access.redhat.com/errata/RHSA-2024:4884; https://access.redhat.com/errata/RHSA-2024:5143
CVE: CVE-2024-28882
Published: 2024-07-08
Description: OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-772
References: https://community.openvpn.net/openvpn/wiki/CVE-2024-28882; https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07634.html; https://community.openvpn.net/openvpn/wiki/CVE-2024-28882
CVE: CVE-2024-3653
Published: 2024-07-08
Description: A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-401
References: https://access.redhat.com/errata/RHSA-2024:4392; https://access.redhat.com/errata/RHSA-2024:5143; https://access.redhat.com/errata/RHSA-2024:5144
CVE: CVE-2024-5549
Published: 2024-07-09
Description: A CORS misconfiguration in the stitionai/devika repository allows attackers to steal sensitive information such as logs, browser sessions, and settings containing private API keys from other services. This vulnerability also enables attackers to perform actions on behalf of the user, such as deleting projects or sending messages. The issue arises from the lack of proper origin validation, allowing unauthorized cross-origin requests to be executed. The vulnerability is present in all versions of the repository, as no fixed version has been specified.
CVSS Score: 8.1 (HIGH)
CWE: CWE-346
References: https://github.com/stitionai/devika/commit/6acce21fb08c3d1123ef05df6a33912bf0ee77c2; https://huntr.com/bounties/7ffeb896-27c8-429d-b241-4f7d6dda0afd; https://github.com/stitionai/devika/commit/6acce21fb08c3d1123ef05df6a33912bf0ee77c2
CVE: CVE-2024-5569
Published: 2024-07-09
Description: A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggered when processing a specially crafted zip file that leads to an infinite loop. This issue also impacts the zipfile module of CPython, as features from the third-party zipp library are later merged into CPython, and the affected code is identical in both projects. The infinite loop can be initiated through the use of functions affecting the `Path` module in both zipp and zipfile, such as `joinpath`, the overloaded division operator, and `iterdir`. Although the infinite loop is not resource exhaustive, it prevents the application from responding. The vulnerability was addressed in version 3.19.1 of jaraco/zipp.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-835
References: https://github.com/jaraco/zipp/commit/fd604bd34f[PII_REDACTED]a36da1fbd22e793e14fd; https://huntr.com/bounties/be898306-11f9-46b4-b28c-f4c4aa4ffbae; https://github.com/jaraco/zipp/commit/fd604bd34f[PII_REDACTED]a36da1fbd22e793e14fd
CVE: CVE-2024-22020
Published: 2024-07-09
Description: A security flaw in Node.js  allows a bypass of network import restrictions.
By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security.
Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports.
Exploiting this flaw can violate network import security, posing a risk to developers and servers.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: http://www.openwall.com/lists/oss-security/2024/07/11/6; http://www.openwall.com/lists/oss-security/2024/07/19/3; https://hackerone.com/reports/2092749
CVE: CVE-2024-34786
Published: 2024-07-09
Description: UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone (not using UniFi Network Application) that could cause the SSID name to change and/or the WiFi Password to be removed on the 5GHz Radio.

This vulnerability is fixed in UniFi iOS app 10.15.2 and later.
CVSS Score: 4.8 (MEDIUM)
References: https://community.ui.com/releases/Security-Advisory-Bulletin-040-040/b4b508c0-8453-405b-8660-1f55ade669c0; https://community.ui.com/releases/Security-Advisory-Bulletin-040-040/b4b508c0-8453-405b-8660-1f55ade669c0
CVE: CVE-2024-5793
Published: 2024-07-09
Description: The Houzez Theme - Functionality plugin for WordPress is vulnerable to SQL Injection via the ‘currency_code’ parameter in all versions up to, and including, 3.2.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Custom-level (seller) access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://favethemes.zendesk.com/hc/en-us/articles/[PII_REDACTED]32-Changelog; https://www.wordfence.com/threat-intel/vulnerabilities/id/5a9bbe79-a4c3-42eb-8d4d-47d26dbe9f43?source=cve; https://favethemes.zendesk.com/hc/en-us/articles/[PII_REDACTED]32-Changelog
CVE: CVE-2024-5855
Published: 2024-07-09
Description: The Media Hygiene: Remove or Delete Unused Images and More! plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the bulk_action_delete and delete_single_image_call AJAX actions in all versions up to, and including, 3.0.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary attachments. A nonce check was added in version 3.0.1, however, it wasn't until version 3.0.2 that a capability check was added.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3112249%40media-hygiene&new=3112249%40media-hygiene&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/44b02690-462a-458b-88c9-89acc9c209cb?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3112249%40media-hygiene&new=3112249%40media-hygiene&sfp_email=&sfph_mail=
CVE: CVE-2024-4944
Published: 2024-07-09
Description: A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileged.

CVSS Score: 7.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00010; https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00010
CVE: CVE-2024-5974
Published: 2024-07-09
Description: A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on the firewall.
This issue affects Fireware OS: from 11.9.6 through 12.10.3.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120, CWE-120
References: https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00011; https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00011
CVE: CVE-2024-34685
Published: 2024-07-09
Description: Due to weak encoding of user-controlled input in
SAP NetWeaver Knowledge Management XMLEditor which allows malicious scripts can
be executed in the application, potentially leading to a Cross-Site Scripting
(XSS) vulnerability. This has no impact on the availability of the application
but it has a low impact on its confidentiality and integrity.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://me.sap.com/notes/3468681; https://url.sap/sapsecuritypatchday; https://me.sap.com/notes/3468681
CVE: CVE-2024-37173
Published: 2024-07-09
Description: Due to insufficient input validation, SAP
  CRM WebClient UI allows an unauthenticated attacker to craft a URL link which
  embeds a malicious script. When a victim clicks on this link, the script will
  be executed in the victim's browser giving the attacker the ability to access
  and/or modify information with no effect on availability of the application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://me.sap.com/notes/3467377; https://url.sap/sapsecuritypatchday; https://me.sap.com/notes/3467377
CVE: CVE-2024-37174
Published: 2024-07-09
Description: Custom CSS support option in SAP CRM WebClient
UI does not sufficiently encode user-controlled inputs resulting in Cross-Site
Scripting vulnerability. On successful exploitation an attacker can cause
limited impact on confidentiality and integrity of the application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://me.sap.com/notes/3467377; https://url.sap/sapsecuritypatchday; https://me.sap.com/notes/3467377
CVE: CVE-2024-39592
Published: 2024-07-09
Description: Elements of PDCE does not perform necessary
authorization checks for an authenticated user, resulting in escalation of
privileges.



This
allows an attacker to read sensitive information causing high impact on the
confidentiality of the application.
CVSS Score: 7.7 (HIGH)
CWE: CWE-862
References: https://me.sap.com/notes/3483344; https://url.sap/sapsecuritypatchday; https://me.sap.com/notes/3483344
CVE: CVE-2024-39593
Published: 2024-07-09
Description: SAP Landscape Management allows an authenticated
user to read confidential data disclosed by the REST Provider Definition
response. Successful exploitation can cause high impact on confidentiality of
the managed entities.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-200
References: https://me.sap.com/notes/3466801; https://url.sap/sapsecuritypatchday; https://me.sap.com/notes/3466801
CVE: CVE-2024-39597
Published: 2024-07-09
Description: In SAP Commerce, a user can misuse the forgotten
password functionality to gain access to a Composable Storefront B2B site for
which early login and registration is activated, without requiring the merchant
to approve the account beforehand. If the site is not configured as isolated
site, this can also grant access to other non-isolated early login sites, even
if registration is not enabled for those other sites.
CVSS Score: 7.2 (HIGH)
CWE: CWE-285
References: https://me.sap.com/notes/3490515; https://url.sap/sapsecuritypatchday; https://me.sap.com/notes/3490515
CVE: CVE-2024-39598
Published: 2024-07-09
Description: SAP CRM (WebClient UI Framework) allows an
authenticated attacker to enumerate accessible HTTP endpoints in the internal
network by specially crafting HTTP requests. On successful exploitation this
can result in information disclosure. It has no impact on integrity and
availability of the application.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-918
References: https://me.sap.com/notes/3467377; https://url.sap/sapsecuritypatchday; https://me.sap.com/notes/3467377
CVE: CVE-2024-6365
Published: 2024-07-09
Description: The Product Table by WBW plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.1 via the 'saveCustomTitle' function. This is due to missing authorization and lack of sanitization of appended data in the languages/customTitle.php file. This makes it possible for unauthenticated attackers to execute code on the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://plugins.trac.wordpress.org/browser/woo-product-tables/trunk/languages/customTitle.php; https://plugins.trac.wordpress.org/browser/woo-product-tables/trunk/modules/wootablepress/models/wootablepress.php#L7; https://plugins.trac.wordpress.org/changeset/3113335/
CVE: CVE-2024-34689
Published: 2024-07-09
Description: WebFlow Services of SAP Business Workflow allows
an authenticated attacker to enumerate accessible HTTP endpoints in the
internal network by specially crafting HTTP requests. On successful
exploitation this can result in information disclosure. It has no impact on
integrity and availability of the application.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://me.sap.com/notes/3458789; https://url.sap/sapsecuritypatchday; https://me.sap.com/notes/3458789
CVE: CVE-2024-34692
Published: 2024-07-09
Description: Due to missing verification of file type or
content, SAP Enable Now allows an authenticated attacker to upload arbitrary
files. These files include executables which might be downloaded and executed
by the user which could host malware. On successful exploitation an attacker
can cause limited impact on confidentiality and Integrity of the application.
CVSS Score: 3.3 (LOW)
CWE: CWE-434
References: https://me.sap.com/notes/3476340; https://url.sap/sapsecuritypatchday; https://me.sap.com/notes/3476340
CVE: CVE-2024-37171
Published: 2024-07-09
Description: SAP Transportation Management (Collaboration
Portal) allows an attacker with non-administrative privileges to send a crafted
request from a vulnerable web application. This will trigger the application
handler to send a request to an unintended service, which may reveal
information about that service. The information obtained could be used to
target internal systems behind firewalls that are normally inaccessible to an
attacker from the external network, resulting in a Server-Side Request Forgery
vulnerability. There is no effect on integrity or availability of the
application.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-918
References: https://me.sap.com/notes/3469958; https://url.sap/sapsecuritypatchday; https://me.sap.com/notes/3469958
CVE: CVE-2024-37172
Published: 2024-07-09
Description: SAP S/4HANA Finance (Advanced Payment
Management) does not perform necessary authorization check for an authenticated
user, resulting in escalation of privileges. As a result, it has a low impact
to confidentiality and availability but there is no impact on the integrity.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3457354; https://url.sap/sapsecuritypatchday; https://me.sap.com/notes/3457354
CVE: CVE-2024-37175
Published: 2024-07-09
Description: SAP CRM WebClient does not
perform necessary authorization check for an authenticated user, resulting in
escalation of privileges. This could allow an attacker to access some sensitive
information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3467377; https://url.sap/sapsecuritypatchday; https://me.sap.com/notes/3467377
CVE: CVE-2024-37180
Published: 2024-07-09
Description: Under certain conditions SAP NetWeaver
Application Server for ABAP and ABAP Platform allows an attacker to access
remote-enabled function module with no further authorization which would
otherwise be restricted, the function can be used to read non-sensitive
information with low impact on confidentiality of the application.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-200
References: https://me.sap.com/notes/3454858; https://url.sap/sapsecuritypatchday; https://me.sap.com/notes/3454858
CVE: CVE-2024-39594
Published: 2024-07-09
Description: SAP Business Warehouse - Business Planning and
Simulation application does not sufficiently encode user controlled inputs,
resulting in Reflected Cross-Site Scripting (XSS) vulnerability. After
successful exploitation, an attacker can cause low impact on the confidentiality
and integrity of the application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://me.sap.com/notes/3482217; https://url.sap/sapsecuritypatchday; https://me.sap.com/notes/3482217
CVE: CVE-2024-39595
Published: 2024-07-09
Description: SAP Business Warehouse - Business Planning and
Simulation application does not sufficiently encode user-controlled inputs,
resulting in Stored Cross-Site Scripting (XSS) vulnerability. This
vulnerability allows users to modify website content and on successful
exploitation, an attacker can cause low impact to the confidentiality and
integrity of the application.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://me.sap.com/notes/3482217; https://url.sap/sapsecuritypatchday; https://me.sap.com/notes/3482217
CVE: CVE-2024-39596
Published: 2024-07-09
Description: Due to missing authorization checks, SAP Enable
Now allows an author to escalate privileges to access information which should
otherwise be restricted. On successful exploitation, the attacker can cause
limited impact on confidentiality of the application.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3476348; https://url.sap/sapsecuritypatchday; https://me.sap.com/notes/3476348
CVE: CVE-2024-39599
Published: 2024-07-09
Description: Due to a Protection Mechanism Failure in SAP
NetWeaver Application Server for ABAP and ABAP Platform, a developer can bypass
the configured malware scanner API because of a programming error. This leads
to a low impact on the application's confidentiality, integrity, and
availability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-693
References: https://me.sap.com/notes/3456952; https://url.sap/sapsecuritypatchday; https://me.sap.com/notes/3456952
CVE: CVE-2024-39600
Published: 2024-07-09
Description: Under certain conditions, the memory of SAP GUI
for Windows contains the password used to log on to an SAP system, which might
allow an attacker to get hold of the password and impersonate the affected
user. As a result, it has a high impact on the confidentiality but there is no
impact on the integrity and availability.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: https://me.sap.com/notes/3461110; https://url.sap/sapsecuritypatchday; https://me.sap.com/notes/3461110
CVE: CVE-2024-4667
Published: 2024-07-09
Description: The Blog, Posts and Category Filter for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post and Category Filter widget in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user supplied 'post_types' attribute. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/blog-posts-and-category-for-elementor/trunk/widgets/post-category-filter.php#L885; https://wordpress.org/plugins/blog-posts-and-category-for-elementor/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/a24c2d7d-8df8-4a3a-a538-09e11ebc6dd5?source=cve