deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-0734
Published: 2024-01-19
Description: A vulnerability was found in Smsot up to 2.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /get.php. The manipulation of the argument tid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251557 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://note.zhaoj.in/share/vo1KOw3EYmBK; https://vuldb.com/?ctiid.251557; https://vuldb.com/?id.251557
CVE: CVE-2024-0735
Published: 2024-01-19
Description: A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. Affected by this issue is the function exec of the file admin/operations/expense.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-251558 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://blog.csdn.net/DMZNX/article/details/135683738; https://vuldb.com/?ctiid.251558; https://vuldb.com/?id.251558
CVE: CVE-2024-0736
Published: 2024-01-19
Description: A vulnerability classified as problematic has been found in EFS Easy File Sharing FTP 3.6. This affects an unknown part of the component Login. The manipulation of the argument password leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251559.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-404
References: https://0day.today/exploit/39249; https://vuldb.com/?ctiid.251559; https://vuldb.com/?id.251559
CVE: CVE-2024-0758
Published: 2024-01-19
Description: MolecularFaces before 0.3.0 is vulnerable to cross site scripting. A remote attacker can execute arbitrary JavaScript in the context of a victim browser via crafted molfiles.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/advisories/GHSA-2pwh-52h7-7j84; https://github.com/ipb-halle/MolecularFaces/security/advisories/GHSA-2pwh-52h7-7j84; https://vulncheck.com/advisories/vc-advisory-GHSA-2pwh-52h7-7j84
CVE: CVE-2024-22420
Published: 2024-01-19
Description: JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. This vulnerability depends on user interaction by opening a malicious Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user. JupyterLab version 4.0.11 has been patched. Users are advised to upgrade. Users unable to upgrade should disable the table of contents extension.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/jupyterlab/jupyterlab/commit/e1b3aabab603878e46add445a3114e838411d2df; https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-4m77-cmpx-vjc4; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQJKNRDRFMKGVRIYNNN6CKMNJDNYWO2H/
CVE: CVE-2024-22421
Published: 2024-01-19
Description: JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. Users of JupyterLab who click on a malicious link may get their `Authorization` and `XSRFToken` tokens exposed to a third party when running an older `jupyter-server` version. JupyterLab versions 4.1.0b2, 4.0.11, and 3.6.7 are patched. No workaround has been identified, however users should ensure to upgrade `jupyter-server` to version 2.7.2 or newer which includes a redirect vulnerability fix.
CVSS Score: 7.6 (HIGH)
CWE: CWE-23, CWE-200
References: https://github.com/jupyterlab/jupyterlab/commit/19bd9b96cb2e77170a67e43121637d0b5619e8c6; https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-44cc-43rp-5947; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQJKNRDRFMKGVRIYNNN6CKMNJDNYWO2H/
CVE: CVE-2024-23679
Published: 2024-01-19
Description: Enonic XP versions less than 7.7.4 are vulnerable to a session fixation issue. An remote and unauthenticated attacker can use prior sessions due to the lack of invalidating session attributes.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384, CWE-384
References: https://github.com/advisories/GHSA-4m5p-5w5w-3jcf; https://github.com/enonic/xp/commit/[PII_REDACTED]e9e6407a9fee87006f730e84f734ff; https://github.com/enonic/xp/commit/1f44674eb9ab3fbab7103e8d08067846e88bace4
CVE: CVE-2024-23680
Published: 2024-01-19
Description: AWS Encryption SDK for Java versions 2.0.0 to 2.2.0 and less than 1.9.0 incorrectly validates some invalid ECDSA signatures.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-347, CWE-347
References: https://github.com/advisories/GHSA-55xh-53m6-936r; https://github.com/aws/aws-encryption-sdk-java/security/advisories/GHSA-55xh-53m6-936r; https://vulncheck.com/advisories/vc-advisory-GHSA-55xh-53m6-936r
CVE: CVE-2024-23681
Published: 2024-01-19
Description: Artemis Java Test Sandbox versions before 1.11.2 are vulnerable to a sandbox escape when an attacker loads untrusted libraries using System.load or System.loadLibrary. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code.
CVSS Score: 8.2 (HIGH)
CWE: CWE-284
References: https://github.com/advisories/GHSA-98hq-4wmw-98w9; https://github.com/ls1intum/Ares/security/advisories/GHSA-98hq-4wmw-98w9; https://vulncheck.com/advisories/vc-advisory-GHSA-98hq-4wmw-98w9
CVE: CVE-2024-23682
Published: 2024-01-19
Description: Artemis Java Test Sandbox versions before 1.8.0 are vulnerable to a sandbox escape when an attacker includes class files in a package that Ares trusts. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code.
CVSS Score: 8.2 (HIGH)
CWE: CWE-501, CWE-653
References: https://github.com/advisories/GHSA-227w-wv4j-67h4; https://github.com/ls1intum/Ares/issues/15; https://github.com/ls1intum/Ares/releases/tag/1.8.0
CVE: CVE-2024-23683
Published: 2024-01-19
Description: Artemis Java Test Sandbox versions less than 1.7.6 are vulnerable to a sandbox escape when an attacker crafts a special subclass of InvocationTargetException. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code.
CVSS Score: 8.2 (HIGH)
CWE: CWE-653
References: https://github.com/advisories/GHSA-883x-6fch-6wjx; https://github.com/ls1intum/Ares/commit/af4f28a56e2fe600d8750b3b415352a0a3217392; https://github.com/ls1intum/Ares/issues/15#issuecomment-996449371
CVE: CVE-2024-23684
Published: 2024-01-19
Description: Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation (CBOR) versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use of this library, this may be a remote attacker.
CVSS Score: 7.5 (HIGH)
CWE: CWE-407, CWE-407
References: https://github.com/advisories/GHSA-fj2w-wfgv-mwq6; https://github.com/peteroupc/CBOR-Java/security/advisories/GHSA-fj2w-wfgv-mwq6; https://vulncheck.com/advisories/vc-advisory-GHSA-fj2w-wfgv-mwq6
CVE: CVE-2024-23685
Published: 2024-01-19
Description: Hard-coded credentials in mod-remote-storage versions under 1.7.2 and from 2.0.0 to 2.0.3 allows unauthorized users to gain read access to mod-inventory-storage records including instances, holdings, items, contributor-types, and identifier-types.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-798, CWE-798
References: https://github.com/advisories/GHSA-m8v7-469p-5x89; https://github.com/folio-org/mod-remote-storage/commit/57df495f76e9aa5be9ce7ce3a65f89b6dbcbc13b; https://github.com/folio-org/mod-remote-storage/security/advisories/GHSA-m8v7-469p-5x89
CVE: CVE-2024-23689
Published: 2024-01-19
Description: Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized users to gain access to client certificate passwords via client exception logs. This occurs when 'sslkey' is specified and an exception, such as a ClickHouseException or SQLException, is thrown during database operations; the certificate password is then included in the logged exception message.
CVSS Score: 8.8 (HIGH)
CWE: CWE-209, CWE-209
References: https://github.com/ClickHouse/clickhouse-java/issues/1331; https://github.com/ClickHouse/clickhouse-java/pull/1334; https://github.com/ClickHouse/clickhouse-java/releases/tag/v0.4.6
CVE: CVE-2024-0737
Published: 2024-01-19
Description: A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unknown code of the component Login. The manipulation of the argument user leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251560.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-404
References: https://packetstormsecurity.com/files/176553/LightFTP-1.1-Denial-Of-Service.html; https://vuldb.com/?ctiid.251560; https://vuldb.com/?id.251560
CVE: CVE-2024-0738
Published: 2024-01-19
Description: A vulnerability, which was classified as critical, has been found in 个人开源 mldong 1.0. This issue affects the function ExpressionEngine of the file com/mldong/modules/wf/engine/model/DecisionModel.java. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251561 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-94
References: https://github.com/biantaibao/mldong_RCE/blob/main/RCE.md; https://vuldb.com/?ctiid.251561; https://vuldb.com/?id.251561
CVE: CVE-2024-0739
Published: 2024-01-19
Description: A vulnerability, which was classified as critical, was found in Hecheng Leadshop up to 1.4.20. Affected is an unknown function of the file /web/leadshop.php. The manipulation of the argument install leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-251562 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-502
References: https://note.zhaoj.in/share/vLswXhWxUrs8; https://vuldb.com/?ctiid.251562; https://vuldb.com/?id.251562
CVE: CVE-2024-23686
Published: 2024-01-19
Description: DependencyCheck for Maven 9.0.0 to 9.0.6, for CLI version 9.0.0 to 9.0.5, and for Ant versions 9.0.0 to 9.0.5, when used in debug mode, allows an attacker to recover the NVD API Key from a log file.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://github.com/advisories/GHSA-qqhq-8r2c-c3f5; https://github.com/jeremylong/DependencyCheck/security/advisories/GHSA-qqhq-8r2c-c3f5; https://vulncheck.com/advisories/vc-advisory-GHSA-qqhq-8r2c-c3f5
CVE: CVE-2024-23687
Published: 2024-01-19
Description: Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on, and manipulate fees/fines.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://github.com/advisories/GHSA-vf78-3q9f-92g3; https://github.com/folio-org/mod-data-export-spring/commit/93aff4566bff59e30f4121b5a2bda5b0b508a446; https://github.com/folio-org/mod-data-export-spring/security/advisories/GHSA-vf78-3q9f-92g3
CVE: CVE-2024-23688
Published: 2024-01-19
Description: Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session. which should ideally be unique for every message. The node's private key isn't compromised, only the session key generated for specific peer communication is exposed.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-323, CWE-330
References: https://github.com/ConsenSys/discovery/security/advisories/GHSA-w3hj-wr2q-x83g; https://github.com/advisories/GHSA-w3hj-wr2q-x83g; https://vulncheck.com/advisories/vc-advisory-GHSA-w3hj-wr2q-x83g
CVE: CVE-2024-23332
Published: 2024-01-19
Description: The Notary Project is a set of specifications and tools intended to provide a cross-industry standard for securing software supply chains by using authentic container images and other OCI artifacts. An external actor with control of a compromised container registry can provide outdated versions of OCI artifacts, such as Images. This could lead artifact consumers with relaxed trust policies (such as `permissive` instead of `strict`) to potentially use artifacts with signatures that are no longer valid, making them susceptible to any exploits those artifacts may contain. In Notary Project, an artifact publisher can control the validity period of artifact by specifying signature expiry during the signing process. Using shorter signature validity periods along with processes to periodically resign artifacts, allows artifact producers to ensure that their consumers will only receive up-to-date artifacts. Artifact consumers should correspondingly use a `strict` or equivalent trust policy that enforces signature expiry. Together these steps enable use of up-to-date artifacts and safeguard against rollback attack in the event of registry compromise. The Notary Project offers various signature validation options such as `permissive`, `audit` and `skip` to support various scenarios. These scenarios includes 1) situations demanding urgent workload deployment, necessitating the bypassing of expired or revoked signatures; 2) auditing of artifacts lacking signatures without interrupting workload; and 3) skipping of verification for specific images that might have undergone validation through alternative mechanisms. Additionally, the Notary Project supports revocation to ensure the signature freshness. Artifact publishers can sign with short-lived certificates and revoke older certificates when necessary. This revocation serves as a signal to inform artifact consumers that the corresponding unexpired artifact is no longer approved by the publisher. This enables the artifact publisher to control the validity of the signature independently of their ability to manage artifacts in a compromised registry.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-672
References: https://github.com/notaryproject/specifications/commit/cdabdd1042de2999c685fa5d422a785ded9c983a; https://github.com/notaryproject/specifications/security/advisories/GHSA-57wx-m636-g3g8; https://github.com/notaryproject/specifications/commit/cdabdd1042de2999c685fa5d422a785ded9c983a
CVE: CVE-2021-31314
Published: 2024-01-20
Description: File upload vulnerability in ejinshan v8+ terminal security system allows attackers to upload arbitrary files to arbitrary locations on the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/huahaiYa/jinshansoft/blob/main/Kingsoft%20Security%20Arbitrary%20File%20Upload%20%2B%20File%20Contains%20Vulnerabilities.md; https://github.com/huahaiYa/jinshansoft/blob/main/Kingsoft%20Security%20Arbitrary%20File%20Upload%20%2B%20File%20Contains%20Vulnerabilities.md
CVE: CVE-2023-51892
Published: 2024-01-20
Description: An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController component.
CVSS Score: 9.8 (CRITICAL)
References: http://e-cology.com; https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about/51892.txt; https://www.weaver.com.cn/
CVE: CVE-2023-51926
Published: 2024-01-20
Description: YonBIP v3_23.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs.framework.comn.serv.CommonServletDispatcher component.
CVSS Score: 7.5 (HIGH)
References: http://yonbip.com; https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about/51926.txt; https://www.yonyou.com/
CVE: CVE-2023-51927
Published: 2024-01-20
Description: YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript() method.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://yonbip.com; https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about/51927.txt; https://www.yonyou.com/
CVE: CVE-2023-51928
Published: 2024-01-20
Description: An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: http://yonbip.com; https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about/51928.txt; https://www.yonyou.com/
CVE: CVE-2023-47024
Published: 2024-01-20
Description: Cross-Site Request Forgery (CSRF) in NCR Terminal Handler v.1.5.1 leads to a one-click account takeover. This is achieved by exploiting multiple vulnerabilities, including an undisclosed function in the WSDL that has weak security controls and can accept custom content types.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://docs.google.com/document/d/18EOsFghBsAme0b3Obur8Oc6h5xV9zUCNKyQLw5ERs9Q/edit?usp=sharing; https://github.com/Patrick0x41/Security-Advisories/tree/main/CVE-2023-47024; https://docs.google.com/document/d/18EOsFghBsAme0b3Obur8Oc6h5xV9zUCNKyQLw5ERs9Q/edit?usp=sharing
CVE: CVE-2023-51906
Published: 2024-01-20
Description: An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component.
CVSS Score: 9.8 (CRITICAL)
References: http://yonbip.com; https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about/51906.txt; https://www.yonyou.com/
CVE: CVE-2023-51924
Published: 2024-01-20
Description: An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: http://yonbip.com; https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about/51924.txt; https://www.yonyou.com/
CVE: CVE-2023-51925
Published: 2024-01-20
Description: An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: http://yonbip.com; https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about/51925.txt; https://www.yonyou.com/
CVE: CVE-2023-46447
Published: 2024-01-20
Description: The POPS! Rebel application 5.0 for Android, in POPS! Rebel Bluetooth Glucose Monitoring System, sends unencrypted glucose measurements over BLE.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://github.com/actuator/rebel/blob/main/CWE-319.md; https://play.google.com/store/apps/details?id=com.pops.pops; https://popsdiabetes.com/about-us/
CVE: CVE-2024-0623
Published: 2024-01-20
Description: The VK Block Patterns plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.31.1.1. This is due to missing or incorrect nonce validation on the vbp_clear_patterns_cache() function. This makes it possible for unauthenticated attackers to clear the patterns cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3023842%40vk-block-patterns&new=3023842%40vk-block-patterns&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/9af6c319-7660-4368-b2f8-1ed1d01ee73a?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3023842%40vk-block-patterns&new=3023842%40vk-block-patterns&sfp_email=&sfph_mail=
CVE: CVE-2024-0679
Published: 2024-01-20
Description: The ColorMag theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the plugin_action_callback() function in all versions up to, and including, 3.1.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to install and activate arbitrary plugins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862, CWE-862
References: https://themes.trac.wordpress.org/browser/colormag/3.1.2/functions.php#L237; https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=214568%40colormag&new=214568%40colormag&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/e982d457-29db-468f-88c3-5afe04002dcf?source=cve
CVE: CVE-2023-7063
Published: 2024-01-20
Description: The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission parameters in all versions up to, and including, 1.8.5.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://wpforms.com/docs/how-to-view-recent-changes-to-the-wpforms-plugin-changelog/#1-8-5-4-2023-12-27; https://www.wordfence.com/threat-intel/vulnerabilities/id/31c080b8-ba00-4e96-8961-2a1c3a017004?source=cve; https://wpforms.com/docs/how-to-view-recent-changes-to-the-wpforms-plugin-changelog/#1-8-5-4-2023-12-27
CVE: CVE-2024-0521
Published: 2024-01-20
Description: Code Injection in paddlepaddle/paddle
CVSS Score: 7.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://huntr.com/bounties/a569c64b-1e2b-4bed-a19f-47fd5a3da453; https://huntr.com/bounties/a569c64b-1e2b-4bed-a19f-47fd5a3da453
CVE: CVE-2024-23725
Published: 2024-01-21
Description: Ghost before 5.76.0 allows XSS via a post excerpt in excerpt.js. An XSS payload can be rendered in post summaries.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/TryGhost/Ghost/pull/17190; https://github.com/TryGhost/Ghost/releases/tag/v5.76.0; https://github.com/TryGhost/Ghost/pull/17190
CVE: CVE-2024-23726
Published: 2024-01-21
Description: Ubee DDW365 XCNDDW365 devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. A remote attacker (in proximity to a Wi-Fi network) can derive the default WPA2-PSK value by observing a beacon frame. A PSK is generated by using the first six characters of the SSID and the last six of the BSSID, decrementing the last digit.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798, CWE-798
References: https://github.com/actuator/cve/blob/main/Ubee/CWE-1392.md; https://github.com/actuator/cve/blob/main/Ubee/CWE-1392.md
CVE: CVE-2016-15037
Published: 2024-01-21
Description: A vulnerability, which was classified as problematic, has been found in go4rayyan Scumblr up to 2.0.1a. Affected by this issue is some unknown functionality of the component Task Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 2.0.2 is able to address this issue. The patch is identified as 5c9120f2362ddb7cbe48f2c4620715adddc4ee35. It is recommended to upgrade the affected component. VDB-251570 is the identifier assigned to this vulnerability.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://github.com/go4rayyan/CG1/commit/5c9120f2362ddb7cbe48f2c4620715adddc4ee35; https://github.com/go4rayyan/CG1/releases/tag/v2.0.2; https://vuldb.com/?ctiid.251570