deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-34010
Published: 2024-04-29
Description: Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758, Acronis Cyber Protect 16 (Windows) before build 38690, Acronis True Image (Windows) before build 42386, Acronis True Image OEM (Windows) before build 42575.
CVSS Score: 8.2 (HIGH)
CWE: CWE-428
References: https://security-advisory.acronis.com/advisories/SEC-7110; https://security-advisory.acronis.com/advisories/SEC-7110
CVE: CVE-2024-34011
Published: 2024-04-29
Description: Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-276
References: https://security-advisory.acronis.com/advisories/SEC-7171; https://security-advisory.acronis.com/advisories/SEC-7171
CVE: CVE-2024-34020
Published: 2024-04-29
Description: A stack-based buffer overflow was found in the putSDN() function of mail.c in hcode through 2.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-121
References: http://ftp.kaist.ac.kr/hangul/code/hcode/; https://bugzilla.suse.com/show_bug.cgi?id=1223534; http://ftp.kaist.ac.kr/hangul/code/hcode/
CVE: CVE-2024-31621
Published: 2024-04-29
Description: An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 component.
CVSS Score: 7.6 (HIGH)
CWE: CWE-94
References: https://flowiseai.com/; https://www.exploit-db.com/exploits/52001; https://flowiseai.com/
CVE: CVE-2024-32269
Published: 2024-04-29
Description: An issue in Yonganda YAD-LOJ V3.0.561 allows a remote attacker to cause a denial of service via a crafted packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/kzLiu2017/Tuya_Cam_CVE_Doc/blob/main/YAD-LOJ-Camera.pdf; https://github.com/kzLiu2017/Tuya_Cam_CVE_Doc/blob/main/YAD-LOJ-Camera.pdf
CVE: CVE-2024-32491
Published: 2024-04-29
Description: An issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in user can upload a file (via a manipulated AJAX Request) to an arbitrary writable location by traversing paths. Arbitrary code can be executed if this location is publicly available through the web server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://www.znuny.org/en/advisories/zsa-2024-01; https://znuny.com; https://www.znuny.org/en/advisories/zsa-2024-01
CVE: CVE-2024-32492
Published: 2024-04-29
Description: An issue was discovered in Znuny 7.0.1 through 7.0.16 where the ticket detail view in the customer front allows the execution of external JavaScript.
CVSS Score: 7.1 (HIGH)
CWE: CWE-94
References: https://www.znuny.org/en/advisories/zsa-2024-02; https://znuny.com; https://www.znuny.org/en/advisories/zsa-2024-02
CVE: CVE-2024-32493
Published: 2024-04-29
Description: An issue was discovered in Znuny LTS 6.5.1 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in agent is able to inject SQL in the draft form ID parameter of an AJAX request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.znuny.org/en/advisories/zsa-2024-03; https://znuny.com; https://www.znuny.org/en/advisories/zsa-2024-03
CVE: CVE-2024-33444
Published: 2024-04-29
Description: SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/LioTree/1971a489dd5ff619b89e7a9e1da91152; https://github.com/liu21st/onethink; https://github.com/liu21st/onethink/issues/39
CVE: CVE-2024-33445
Published: 2024-04-29
Description: An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the SystemPlugins.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://gist.github.com/LioTree/04a4ece38df53af4027d52b2aeb7aff6; https://github.com/hisiphp/hisiphp/issues/11; https://gist.github.com/LioTree/04a4ece38df53af4027d52b2aeb7aff6
CVE: CVE-2024-33449
Published: 2024-04-29
Description: An SSRF issue in the PDFMyURL service allows a remote attacker to obtain sensitive information and execute arbitrary code via a POST request in the url parameter
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-352
References: https://grumpz.net/uncovering-an-ssrf-vulnerability-in-pdfmyurl-affecting-numerous-users; https://pdfmyurl.com/; https://grumpz.net/uncovering-an-ssrf-vulnerability-in-pdfmyurl-affecting-numerous-users
CVE: CVE-2023-51254
Published: 2024-04-29
Description: Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the friendship link component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/yukino-hiki/CVE/blob/main/4/There%20is%20a%20stored%20xss%20at%20the%20friendship%20link.md; https://github.com/yukino-hiki/CVE/blob/main/4/There%20is%20a%20stored%20xss%20at%20the%20friendship%20link.md
CVE: CVE-2023-52080
Published: 2024-04-29
Description: IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use of the gRT->GetVariable() function. Attackers with access to local NVRAM variables can exploit this by modifying these variables on SPI Flash, resulting in memory data being tampered with. When critical data in memory data is tampered with,a crash may occur.
CVSS Score: 7.7 (HIGH)
CWE: CWE-120
References: https://ieisystem.com; https://support.ieisystem.com/lcjtww/psirt/security-advisories/2751271/index.html; https://ieisystem.com
CVE: CVE-2024-28320
Published: 2024-04-29
Description: Insecure Direct Object References (IDOR) vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for unauthorized access and modifications via crafted POST request to /patient/edit-user.php.
CVSS Score: 7.6 (HIGH)
CWE: CWE-639
References: https://packetstormsecurity.com/files/177326/Hospital-Management-System-1.0-Insecure-Direct-Object-Reference-Account-Takeover.html; https://sospiro014.github.io/Hospital-Management-System-1.0-Insecure-Direct-Object-Reference-+-Account-Takeover; https://packetstormsecurity.com/files/177326/Hospital-Management-System-1.0-Insecure-Direct-Object-Reference-Account-Takeover.html
CVE: CVE-2024-31705
Published: 2024-04-29
Description: An issue in Infotel Conseil GLPI v.10.X.X and after allows a remote attacker to execute arbitrary code via the insufficient validation of user-supplied input.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/V3locidad/GLPI_POC_Plugins_Shell; https://seclists.org/fulldisclosure/2024/Apr/23; http://seclists.org/fulldisclosure/2024/Apr/23
CVE: CVE-2024-31820
Published: 2024-04-29
Description: An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the getLangFolderForEdit method of the Languages.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/LioTree/890b0eea95fce6225d820afe4e3510e9; https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/d22b54e8915f167a135046ceb857caaf8479c4da; https://liotree.github.io/2023/Ecommerce-CodeIgniter-Bootstrap.html
CVE: CVE-2024-31821
Published: 2024-04-29
Description: SQL Injection vulnerability in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the manageQuantitiesAndProcurement method of the Orders_model.php component.
CVSS Score: 8.0 (HIGH)
CWE: CWE-89
References: https://gist.github.com/LioTree/5c963a37e2c335c22e74ca3d9aea32bb; https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/d22b54e8915f167a135046ceb857caaf8479c4da; https://liotree.github.io/2023/Ecommerce-CodeIgniter-Bootstrap.html
CVE: CVE-2024-31822
Published: 2024-04-29
Description: An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the saveLanguageFiles method of the Languages.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://gist.github.com/LioTree/f83e25b2c5e144c0b3ad8919e6483c7a; https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/d22b54e8915f167a135046ceb857caaf8479c4da; https://liotree.github.io/2023/Ecommerce-CodeIgniter-Bootstrap.html
CVE: CVE-2024-31823
Published: 2024-04-29
Description: An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://gist.github.com/LioTree/4989e0f20b6a885604dd3178fa4b66b5; https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/d22b54e8915f167a135046ceb857caaf8479c4da; https://liotree.github.io/2023/Ecommerce-CodeIgniter-Bootstrap.html
CVE: CVE-2024-33338
Published: 2024-04-29
Description: Cross Site Scripting vulnerability in jizhicms v.2.5.4 allows a remote attacker to obtain sensitive information via a crafted article publication request.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: https://github.com/7akahash1/POC/blob/main/1.md; https://github.com/Cherry-toto/jizhicms/issues/86; https://nvd.nist.gov/vuln/detail/CVE-2023-31862
CVE: CVE-2024-33345
Published: 2024-04-29
Description: D-Link DIR-823G A1V1.0.2B05 was found to contain a Null-pointer dereference in the main function of upload_firmware.cgi, which allows remote attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-823G; https://github.com/n0wstr/IOTVuln/tree/main/DIR-823g/UploadFirmware; http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-823G
CVE: CVE-2024-33438
Published: 2024-04-29
Description: File Upload vulnerability in CubeCart before 6.5.5 allows an authenticated user to execute arbitrary code via a crafted .phar file.
CVSS Score: 8.0 (HIGH)
CWE: CWE-434
References: https://forums.cubecart.com/topic/59046-cubecart-655-released-minor-security-update/; https://github.com/cubecart/v6; https://github.com/cubecart/v6/commit/31a5ec39b0924b2111fbc3aa419bd8c5c3fc1841
CVE: CVE-2024-33443
Published: 2024-04-29
Description: An issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a crafted script to the AddonsController.class.php component.
CVSS Score: 7.1 (HIGH)
CWE: CWE-94
References: https://gist.github.com/LioTree/a81111fb0c598a920cb49aaf0bd64e58; https://github.com/liu21st/onethink/issues/40; https://gist.github.com/LioTree/a81111fb0c598a920cb49aaf0bd64e58
CVE: CVE-2023-51710
Published: 2024-04-29
Description: EMS SQL Manager 3.6.2 (build 55333) for Oracle allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-427
References: https://excellium-services.com/cert-xlm-advisory/CVE-2023-51710; https://excellium-services.com/cert-xlm-advisory/CVE-2023-51710
CVE: CVE-2024-0840
Published: 2024-04-29
Description: The Grandstream UCM Series IP PBX before firmware version 1.0.20.52 is affected by a parameter injection vulnerability in the HTTP interface. A remote and authenticated attacker can execute arbitrary code by sending a crafted HTTP request. Authentication may be possible using a default user and password. Affected models are the UCM6202, UCM6204, UCM6208, and UCM6510.

CVSS Score: 8.8 (HIGH)
CWE: CWE-141
References: https://vulncheck.com/advisories/grand-stream-param-injection; https://vulncheck.com/advisories/grand-stream-param-injection
CVE: CVE-2024-31747
Published: 2024-04-29
Description: An issue in Yealink VP59 Microsoft Teams Phone firmware 91.15.0.118 (fixed in 122.15.0.142) allows a physically proximate attacker to disable the phone lock via the Walkie Talkie menu option.
CVSS Score: 2.1 (LOW)
References: https://medium.com/%40deepsahu1/yealink-vp59-microsoft-teams-phone-lock-bypass-b7fee9dd9c8c; https://medium.com/%40deepsahu1/yealink-vp59-microsoft-teams-phone-lock-bypass-b7fee9dd9c8c
CVE: CVE-2023-46565
Published: 2024-04-29
Description: Buffer Overflow vulnerability in osrg gobgp commit 419c50dfac578daa4d11256904d0dc182f1a9b22 allows a remote attacker to cause a denial of service via the handlingError function in pkg/server/fsm.go.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/osrg/gobgp/issues/2725; https://github.com/osrg/gobgp/issues/2725
CVE: CVE-2024-31801
Published: 2024-04-29
Description: Directory Traversal vulnerability in NEXSYS-ONE before v.Rev.15320 allows a remote attacker to obtain sensitive information via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://dishdev.nexsysone.com/nexsysonev3/; https://gist.github.com/hamoshwani/6e207aa4ea513438cd75b97c1fc8abfe; https://www.nexsysone.com/
CVE: CVE-2024-33266
Published: 2024-04-29
Description: SQL Injection vulnerability in Helloshop deliveryorderautoupdate v.2.8.1 and before allows an attacker to run arbitrary SQL commands via the DeliveryorderautoupdateOrdersModuleFrontController::initContent function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://security.friendsofpresta.org/modules/2024/04/25/deliveryorderautoupdate.html; https://security.friendsofpresta.org/modules/2024/04/25/deliveryorderautoupdate.html
CVE: CVE-2024-33268
Published: 2024-04-29
Description: SQL Injection vulnerability in Digincube mdgiftproduct before 1.4.1 allows an attacker to run arbitrary SQL commands via the MdGiftRule::addGiftToCart method.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://security.friendsofpresta.org/modules/2024/04/25/mdgiftproduct.html; https://security.friendsofpresta.org/modules/2024/04/25/mdgiftproduct.html
CVE: CVE-2024-33269
Published: 2024-04-29
Description: SQL Injection vulnerability in Prestaddons flashsales 1.9.7 and before allows an attacker to run arbitrary SQL commands via the FsModel::getFlashSales method.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://security.friendsofpresta.org/modules/2024/04/25/flashsales.html; https://security.friendsofpresta.org/modules/2024/04/25/flashsales.html
CVE: CVE-2024-33271
Published: 2024-04-29
Description: An issue in FME Modules eventsmanager before 4.4.0 allows an attacker to obtain sensitive information from the ps_customer component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-359
References: https://security.friendsofpresta.org/modules/2024/04/25/eventsmanager.html; https://security.friendsofpresta.org/modules/2024/04/25/eventsmanager.html
CVE: CVE-2024-33272
Published: 2024-04-29
Description: SQL injection vulnerability in KnowBand for PrestaShop autosuggest before 2.0.0 allows an attacker to run arbitrary SQL commands via the AutosuggestSearchModuleFrontController::initContent(), and AutosuggestSearchModuleFrontController::getKbProducts() components.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: https://security.friendsofpresta.org/modules/2024/04/25/autosuggest.html; https://security.friendsofpresta.org/modules/2024/04/25/autosuggest.html
CVE: CVE-2024-33276
Published: 2024-04-29
Description: SQL Injection vulnerability in FME Modules preorderandnotication v.3.1.0 and before allows a remote attacker to run arbitrary SQL commands via the PreorderModel::getIdProductAttributesByIdAttributes() method.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://security.friendsofpresta.org/modules/2024/04/25/preorderandnotification.html; https://security.friendsofpresta.org/modules/2024/04/25/preorderandnotification.html
CVE: CVE-2024-33435
Published: 2024-04-29
Description: Insecure Permissions vulnerability in Guangzhou Yingshi Electronic Technology Co. Ncast Yingshi high-definition intelligent recording and playback system 2007-2017 allows a remote attacker to execute arbitrary code via the /manage/IPSetup.php backend function
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://github.com/vulreport3r/cve-reports/blob/main/Ncast_Yingshi_has_RCE_vulnerabilities/report.md; https://github.com/vulreport3r/cve-reports/blob/main/Ncast_Yingshi_has_RCE_vulnerabilities/report.md
CVE: CVE-2023-31889
Published: 2024-04-29
Description: An issue discovered in httpd in ASUS RT-AC51U with firmware version up to and including 3.0.0.4.380.8591 allows local attackers to cause a denial of service via crafted GET request.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://gitlab.com/donnm/cves/-/blob/master/dos_rtac51u_httpd.md; https://gitlab.com/donnm/cves/-/blob/master/dos_rtac51u_httpd.md
CVE: CVE-2023-46566
Published: 2024-04-29
Description: Buffer Overflow vulnerability in msoulier tftpy commit 467017b844bf6e31745138a30e2509145b0c529c allows a remote attacker to cause a denial of service via the parse function in the TftpPacketFactory class.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/msoulier/tftpy/issues/140; https://github.com/msoulier/tftpy/issues/140
CVE: CVE-2023-46960
Published: 2024-04-29
Description: Buffer Overflow vulnerability in PyPXE v.1.8.4 allows a remote attacker to cause a denial of service via the handle function in the tftp module.
CVSS Score: 8.6 (HIGH)
CWE: CWE-120
References: https://github.com/pypxe/PyPXE/issues/206; https://github.com/pypxe/PyPXE/issues/206
CVE: CVE-2024-27518
Published: 2024-04-29
Description: An issue in SUPERAntiSyware Professional X 10.0.1262 and 10.0.1264 allows unprivileged attackers to escalate privileges via a restore of a crafted DLL file into the C:\Program Files\SUPERAntiSpyware folder.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://github.com/secunnix/CVE-2024-27518; https://www.superantispyware.com/; https://www.youtube.com/watch?v=FM5XlZPdvdo
CVE: CVE-2024-28294
Published: 2024-04-29
Description: Limbas up to v5.2.14 was discovered to contain a SQL injection vulnerability via the ftid parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://gist.github.com/lx39214/248dc58c6d05455d4bd06c4d3df8e2d0; https://gist.github.com/lx39214/248dc58c6d05455d4bd06c4d3df8e2d0
CVE: CVE-2024-33350
Published: 2024-04-29
Description: Directory Traversal vulnerability in TaoCMS v.3.0.2 allows a remote attacker to execute arbitrary code and obtain sensitive information via the include/model/file.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/majic-banana/vulnerability/blob/main/POC/taocms-3.0.2%20Arbitrary%20File%20Writing%20Vulnerability.md; https://github.com/majic-banana/vulnerability/blob/main/POC/taocms-3.0.2%20Arbitrary%20File%20Writing%20Vulnerability.md
CVE: CVE-2023-50432
Published: 2024-04-29
Description: simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service (daemon crash) by sending a DHCP packet without any option fields, which causes free_packet in dhcp_packet.c to dereference a NULL pointer.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476
References: https://papers.mathyvanhoef.com/esorics2024.pdf; https://papers.mathyvanhoef.com/esorics2024.pdf
CVE: CVE-2023-50433
Published: 2024-04-29
Description: marshall in dhcp_packet.c in simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service by sending a malicious DHCP packet. The crash is caused by a type confusion bug that results in a large memory allocation; when this memory allocation fails the DHCP server will crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-843
References: https://papers.mathyvanhoef.com/esorics2024.pdf; https://papers.mathyvanhoef.com/esorics2024.pdf
CVE: CVE-2023-50434
Published: 2024-04-29
Description: emdns_resolve_raw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based buffer over-read. This can be triggered by a remote adversary that can send DNS requests to the emdns server. The impact could vary depending on the system libraries, compiler, and processor architecture. Code before be565c3 is unaffected.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://papers.mathyvanhoef.com/esorics2024.pdf; https://papers.mathyvanhoef.com/esorics2024.pdf
CVE: CVE-2024-33401
Published: 2024-04-29
Description: Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary code via the mnum parameter.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://gitee.com/zchuanwen/cve123/issues/I9I18D; https://gitee.com/zchuanwen/cve123/issues/I9I18D
CVE: CVE-2024-33522
Published: 2024-04-29
Description: In vulnerable versions of Calico (v3.27.2 and below), Calico Enterprise (v3.19.0-1, v3.18.1, v3.17.3 and below), and Calico Cloud (v19.2.0 and below), an attacker who has local access to the Kubernetes node, can escalate their privileges by exploiting a vulnerability in the Calico CNI install binary. The issue arises from an incorrect SUID (Set User ID) bit configuration in the binary, combined with the ability to control the input binary, allowing an attacker to execute an arbitrary binary with elevated privileges.

CVSS Score: 6.7 (MEDIUM)
CWE: CWE-269
References: https://github.com/projectcalico/calico/issues/7981; https://github.com/projectcalico/calico/pull/8447; https://github.com/projectcalico/calico/pull/8517
CVE: CVE-2023-52724
Published: 2024-04-30
Description: Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 function.
CVSS Score: 8.1 (HIGH)
CWE: CWE-787
References: https://github.com/onosproject/onos-kpimon/pull/120; https://github.com/onosproject/onos-kpimon/pull/120
CVE: CVE-2023-52725
Published: 2024-04-30
Description: Open Networking Foundation SD-RAN ONOS onos-kpimon 0.4.7 allows blocking of the errCh channel within the Start function of the monitoring package.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/onosproject/onos-kpimon/pull/120; https://github.com/onosproject/onos-kpimon/pull/120
CVE: CVE-2023-52726
Published: 2024-04-30
Description: Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error (in the Subscribe function implementation for the subscribed indication stream).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: https://github.com/onosproject/onos-ric-sdk-go/issues/133; https://github.com/onosproject/onos-ric-sdk-go/issues/133
CVE: CVE-2023-52727
Published: 2024-04-30
Description: Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in parseAlignBits.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125, CWE-787
References: https://github.com/onosproject/onos-lib-go/issues/245; https://github.com/onosproject/onos-lib-go/issues/245
CVE: CVE-2023-52728
Published: 2024-04-30
Description: Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-129
References: https://github.com/onosproject/onos-lib-go/issues/245; https://github.com/onosproject/onos-lib-go/issues/245
CVE: CVE-2024-34043
Published: 2024-04-30
Description: O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message.
CVSS Score: 5.3 (MEDIUM)
References: https://jira.o-ran-sc.org/browse/RICAPP-235; https://jira.o-ran-sc.org/browse/RICAPP-235
CVE: CVE-2024-34044
Published: 2024-04-30
Description: The O-RAN E2T I-Release buildPrometheusList function can have a NULL pointer dereference because peerInfo can be NULL.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476
References: https://jira.o-ran-sc.org/browse/RIC-1043; https://jira.o-ran-sc.org/browse/RIC-1043
CVE: CVE-2024-34045
Published: 2024-04-30
Description: The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo->counters[IN_INITI][MSG_COUNTER][ProcedureCode_id_E2setup]->Increment().
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://jira.o-ran-sc.org/browse/RIC-1047; https://jira.o-ran-sc.org/browse/RIC-1047