deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-8666
Published: 2024-10-25
Description: The Shoutcast Icecast HTML5 Radio Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'html5radio' shortcode in all versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3398173/; https://www.wordfence.com/threat-intel/vulnerabilities/id/7e870ae2-abae-457a-b3d1-75a96ec09d41?source=cve
CVE: CVE-2024-10376
Published: 2024-10-25
Description: A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects the function actionPassOrNotAutoSign of the file /com/esafenet/servlet/service/processsign/AutoSignService.java. The manipulation of the argument UniqueId leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://flowus.cn/share/127494ce-0d4c-4773-9fc0-810e26841c4b?code=G8A6P3; https://vuldb.com/?ctiid.281806; https://vuldb.com/?id.281806
CVE: CVE-2024-10377
Published: 2024-10-25
Description: A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. This issue affects the function actionPassDecryptApplication1 of the file /com/esafenet/servlet/client/DecryptApplicationService.java. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This is a different issue than CVE-2024-10069. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://flowus.cn/share/1234f712-c774-4a26-a922-809e0a356405?code=G8A6P3; https://vuldb.com/?ctiid.281807; https://vuldb.com/?id.281807
CVE: CVE-2024-44098
Published: 2024-10-25
Description: In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.4 (HIGH)
CWE: CWE-415
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-44099
Published: 2024-10-25
Description: There is a possible Local bypass of user interaction due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-44100
Published: 2024-10-25
Description: Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-44101
Published: 2024-10-25
Description: there is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47012
Published: 2024-10-25
Description: In mm_GetMobileIdIndexForNsUpdate of mm_GmmPduCodec.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-276
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47013
Published: 2024-10-25
Description: In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible arbitrary write due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47014
Published: 2024-10-25
Description: Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-330537292.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47015
Published: 2024-10-25
Description: In ProtocolMiscHwConfigChangeAdapter::GetData() of protocolmiscadapter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47016
Published: 2024-10-25
Description: there is a possible privilege escalation due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47017
Published: 2024-10-25
Description: In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47018
Published: 2024-10-25
Description: In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47019
Published: 2024-10-25
Description: In ProtocolEmbmsSaiListAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47020
Published: 2024-10-25
Description: Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488.
CVSS Score: 7.5 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47021
Published: 2024-10-25
Description: In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47022
Published: 2024-10-25
Description: Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-331255656.
CVSS Score: 7.5 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47023
Published: 2024-10-25
Description: there is a possible man-in-the-middle attack due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.1 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47024
Published: 2024-10-25
Description: In vring_size of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190, CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47025
Published: 2024-10-25
Description: In ppmp_protect_buf of drm_fw.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47026
Published: 2024-10-25
Description: In gsc_gsa_rescue of gsc_gsa.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47027
Published: 2024-10-25
Description: In sm_mem_compat_get_vmm_obj of lib/sm/shared_mem.c, there is a possible arbitrary physical memory access due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47028
Published: 2024-10-25
Description: In ffu_flash_pack of ffu.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-190, CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47029
Published: 2024-10-25
Description: In TrustySharedMemoryManager::GetSharedMemory of ondevice/trusty/trusty_shared_memory_manager.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47030
Published: 2024-10-25
Description: Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-315191818.
CVSS Score: 5.1 (MEDIUM)
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47031
Published: 2024-10-25
Description: Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-329163861.
CVSS Score: 7.4 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47033
Published: 2024-10-25
Description: In lwis_allocator_free of lwis_allocator.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47034
Published: 2024-10-25
Description: there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47035
Published: 2024-10-25
Description: In vring_init of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47041
Published: 2024-10-25
Description: In valid_address of syscall.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-10-01
CVE: CVE-2024-47481
Published: 2024-10-25
Description: Dell Data Lakehouse, version(s) 1.0.0.0, 1.1.0., contain(s) an Improper Access Control vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://www.dell.com/support/kbdoc/en-us/000240535/dsa-2024-419-security-update-for-dell-data-lakehouse-system-software-for-multiple-third-party-component-vulnerabilities
CVE: CVE-2024-47483
Published: 2024-10-25
Description: Dell Data Lakehouse, version(s) 1.0.0.0 and 1.1.0.0, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.
CVSS Score: 2.9 (LOW)
CWE: CWE-89
References: https://www.dell.com/support/kbdoc/en-us/000240535/dsa-2024-419-security-update-for-dell-data-lakehouse-system-software-for-multiple-third-party-component-vulnerabilities
CVE: CVE-2024-10374
Published: 2024-10-25
Description: The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpmem_loginout shortcode in all versions up to, and including, 3.4.9.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3172530/; https://wordpress.org/plugins/wp-members/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/5ea93a49-0e1a-4a24-8f6b-03e624f517d4?source=cve
CVE: CVE-2024-10378
Published: 2024-10-25
Description: A vulnerability classified as critical has been found in ESAFENET CDG 5. Affected is the function actionViewCDGRenewFile of the file /com/esafenet/servlet/client/CDGRenewApplicationService.java. The manipulation of the argument CDGRenewFileId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://flowus.cn/share/5d03f1d5-695a-421b-8[PII_REDACTED]ea97a?code=G8A6P3; https://vuldb.com/?ctiid.281808; https://vuldb.com/?id.281808
CVE: CVE-2024-10379
Published: 2024-10-25
Description: A vulnerability classified as problematic was found in ESAFENET CDG 5. Affected by this vulnerability is the function actionViewDecyptFile of the file /com/esafenet/servlet/client/DecryptApplicationService.java. The manipulation of the argument decryptFileId with the input ../../../Windows/System32/drivers/etc/hosts leads to path traversal: '../filedir'. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The affected function has a typo and is missing an R. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-24, CWE-22
References: https://flowus.cn/share/0b03c61a-76a5-4f45-9ee7-a88e0f21d539?code=G8A6P3; https://vuldb.com/?ctiid.281809; https://vuldb.com/?id.281809
CVE: CVE-2024-10380
Published: 2024-10-25
Description: A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/ajax_product.php. The manipulation of the argument drop_services leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/K1nako0/tmp_vuln5/blob/main/README.md; https://vuldb.com/?ctiid.281810; https://vuldb.com/?id.281810
CVE: CVE-2024-10381
Published: 2024-10-25
Description: This vulnerability exists in Matrix Door Controller Cosec Vega FAXQ due to improper implementation of session management at the web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the vulnerable device.

Successful exploitation of this vulnerability could allow remote attacker to gain unauthorized access and take complete control of the targeted device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0328
CVE: CVE-2024-49376
Published: 2024-10-25
Description: Autolab, a course management service that enables auto-graded programming assignments, has misconfigured reset password permissions in version 3.0.0. For email-based accounts, users with insufficient privileges could reset and theoretically access privileged users' accounts by resetting their passwords. This issue is fixed in version 3.0.1. No known workarounds exist.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287, CWE-863
References: https://github.com/autolab/Autolab/commit/301689ab5c5e39d13bab47b71eaf8998d04bcc9b; https://github.com/autolab/Autolab/security/advisories/GHSA-v46j-h43h-rwrm
CVE: CVE-2024-49378
Published: 2024-10-25
Description: smartUp, a web browser mouse gestures extension, has a universal cross-site scripting issue in the Edge and Firefox versions of smartUp 7.2.622.1170. The vulnerability allows another extension to execute arbitrary code in the context of the user’s tab. As of time of publication, no known patches exist.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/zimocode/smartup/blob/2144ec161697751b1a6702f1af866726ea689e4e/js/background.js#L3800; https://securitylab.github.com/advisories/GHSL-2024-011_smartup/
CVE: CVE-2024-9991
Published: 2024-10-25
Description: This vulnerability exists in Philips lighting devices due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the plaintext Wi-Fi credentials stored on the vulnerable device.

Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to the Wi-Fi network to which vulnerable device is connected.
CWE: CWE-312
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0329
CVE: CVE-2024-49380
Published: 2024-10-25
Description: Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The `/postLocal` endpoint is vulnerable to an arbitrary file write vulnerability when a plenti user serves their website. This issue may lead to Remote Code Execution. Version 0.7.2 fixes the vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74, CWE-78
References: https://github.com/plentico/plenti/blob/01825e0dcd3505fac57adc2edf29f772d585c008/cmd/serve.go#L205; https://github.com/plentico/plenti/releases/tag/v0.7.2; https://securitylab.github.com/advisories/GHSL-2024-297_GHSL-2024-298_plenti/
CVE: CVE-2024-49381
Published: 2024-10-25
Description: Plenti, a static site generator, has an arbitrary file deletion vulnerability in versions prior to 0.7.2. The `/postLocal` endpoint is vulnerable to an arbitrary file write deletion when a plenti user serves their website. This issue may lead to information loss. Version 0.7.2 fixes the vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74, CWE-22
References: https://github.com/plentico/plenti/blob/01825e0dcd3505fac57adc2edf29f772d585c008/cmd/serve.go#L205; https://github.com/plentico/plenti/releases/tag/v0.7.2; https://securitylab.github.com/advisories/GHSL-2024-297_GHSL-2024-298_plenti/
CVE: CVE-2024-49753
Published: 2024-10-25
Description: Zitadel is open-source identity infrastructure software. Versions prior to 2.64.1, 2.63.6, 2.62.8, 2.61.4, 2.60.4, 2.59.5, and 2.58.7 have a flaw in the URL validation mechanism of Zitadel actions allows bypassing restrictions intended to block requests to localhost (127.0.0.1). The isHostBlocked check, designed to prevent such requests, can be circumvented by creating a DNS record that resolves to 127.0.0.1. This enables actions to send requests to localhost despite the intended security measures. This vulnerability potentially allows unauthorized access to unsecured internal endpoints, which may contain sensitive information or functionalities. Versions 2.64.1, 2.63.6, 2.62.8, 2.61.4, 2.60.4, 2.59.5, and 2.58.7 contain a patch. No known workarounds are available.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: https://github.com/zitadel/zitadel/releases/tag/v2.58.7; https://github.com/zitadel/zitadel/releases/tag/v2.59.5; https://github.com/zitadel/zitadel/releases/tag/v2.60.4
CVE: CVE-2024-48428
Published: 2024-10-25
Description: An issue in Olive VLE allows an attacker to obtain sensitive information via the reset password function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640, CWE-640
References: https://medium.com/%40powerful-/account-takeover-ato-via-the-reset-password-cve-2024-48428-84892d6211d6; https://medium.com/h7w/full-account-takeover-via-password-reset-link-manipulation-840fb9402967; https://www.linkedin.com/posts/said-al-ghammari-301972285_0day-bugbountytips-bugbountytip-activity[PII_REDACTED]034412544-2ocu/
CVE: CVE-2024-49757
Published: 2024-10-25
Description: The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the registration button on the login page. Users could bypass this restriction by directly accessing the registration URL (/ui/login/loginname) and register a user that way. Versions 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7 contain a patch. No known workarounds are available.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://github.com/zitadel/zitadel/releases/tag/v2.58.7; https://github.com/zitadel/zitadel/releases/tag/v2.59.5; https://github.com/zitadel/zitadel/releases/tag/v2.60.4
CVE: CVE-2022-30354
Published: 2024-10-25
Description: OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam. Authentication is required. The information disclosed is associated with all registered user ID numbers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://cve.offsecguy.com/ovaledge/vulnerabilities/sensitive-data-exposure#cve-2022-30354
CVE: CVE-2022-30355
Published: 2024-10-25
Description: OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://cve.offsecguy.com/ovaledge/vulnerabilities/account-takeover#cve-2022-30355