deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-41464
Published: 2024-07-24
Description: Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/RouteStatic
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-120
References: https://github.com/iotresearch/iot-vuln/tree/main/Tenda/FH1201/RouteStatic2; https://github.com/iotresearch/iot-vuln/tree/main/Tenda/FH1201/RouteStatic2
CVE: CVE-2024-41465
Published: 2024-07-24
Description: Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/setcfm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-121
References: https://github.com/iotresearch/iot-vuln/tree/main/Tenda/FH1201/setcfm; https://github.com/iotresearch/iot-vuln/tree/main/Tenda/FH1201/setcfm
CVE: CVE-2024-41466
Published: 2024-07-24
Description: Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-121
References: https://github.com/iotresearch/iot-vuln/blob/main/Tenda/FH1201/NatStaticSetting/README.md; https://github.com/iotresearch/iot-vuln/blob/main/Tenda/FH1201/NatStaticSetting/README.md
CVE: CVE-2024-7081
Published: 2024-07-24
Description: A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file expcatadd.php. The manipulation of the argument id/title leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/zgg012/cve/issues/1; https://itsourcecode.com/; https://vuldb.com/?ctiid.272366
CVE: CVE-2024-0231
Published: 2024-07-24
Description: A resource misdirection vulnerability in GitLab CE/EE versions 12.0 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows an attacker to craft a repository import in such a way as to misdirect commits.
CVSS Score: 2.7 (LOW)
CWE: CWE-99, CWE-74
References: https://gitlab.com/gitlab-org/gitlab/-/issues/437103; https://hackerone.com/reports/2299337; https://gitlab.com/gitlab-org/gitlab/-/issues/437103
CVE: CVE-2024-5067
Published: 2024-07-24
Description: An issue was discovered in GitLab EE affecting all versions starting from 16.11 prior to 17.0.5, starting from 17.1 prior to 17.1.3, and starting from 17.2 prior to 17.2.1 where certain project-level analytics settings could be leaked in DOM to group members with Developer or higher roles.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-200
References: https://gitlab.com/gitlab-org/gitlab/-/issues/458504; https://gitlab.com/gitlab-org/gitlab/-/issues/462427; https://hackerone.com/reports/2462303
CVE: CVE-2024-7060
Published: 2024-07-24
Description: An information disclosure vulnerability in GitLab CE/EE in project/group exports affecting all versions from 15.4 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows unauthorized users to view the resultant export.
CVSS Score: 2.6 (LOW)
CWE: CWE-200
References: https://gitlab.com/gitlab-org/gitlab/-/issues/437894; https://gitlab.com/gitlab-org/gitlab/-/issues/437894
CVE: CVE-2024-7091
Published: 2024-07-24
Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 15.6 prior to 17.0.5, starting from 17.1 prior to 17.1.3, and starting from 17.2 prior to 17.2.1 where it was possible to disclose limited information of an exported group or project to another user.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-200
References: https://gitlab.com/gitlab-org/gitlab/-/issues/408469; https://gitlab.com/gitlab-org/gitlab/-/issues/408469
CVE: CVE-2024-7047
Published: 2024-07-25
Description: A cross site scripting vulnerability exists in GitLab CE/EE affecting all versions from 16.6 prior to 17.0.5, 17.1 prior to 17.1.3, 17.2 prior to 17.2.1 allowing an attacker to execute arbitrary scripts under the context of the current logged in user.
CVSS Score: 7.7 (HIGH)
CWE: CWE-79, CWE-79
References: https://gitlab.com/gitlab-org/gitlab/-/issues/455318; https://gitlab.com/gitlab-org/gitlab/-/issues/455318
CVE: CVE-2024-7057
Published: 2024-07-25
Description: An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 16.7 prior to 17.0.5, starting from 17.1 prior to 17.1.3, and starting from 17.2 prior to 17.2.1 where job artifacts can be inappropriately exposed to users lacking the proper authorization level.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://gitlab.com/gitlab-org/gitlab/-/issues/458501; https://hackerone.com/reports/2475135; https://gitlab.com/gitlab-org/gitlab/-/issues/458501
CVE: CVE-2024-4811
Published: 2024-07-25
Description: In affected versions of Octopus Server under certain conditions, a user with specific role assignments can access restricted project artifacts.
CVSS Score: 2.2 (LOW)
CWE: CWE-863
References: https://advisories.octopus.com/post/2024/sa2024-05/; https://advisories.octopus.com/post/2024/sa2024-05/
CVE: CVE-2024-6972
Published: 2024-07-25
Description: In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the task log in clear-text.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-319
References: https://advisories.octopus.com/post/2024/sa2024-06/; https://advisories.octopus.com/post/2024/sa2024-06/
CVE: CVE-2024-41705
Published: 2024-07-25
Description: A stored XSS issue was discovered in Archer Platform 6.8 before 2024.06. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application. 6.14.P4 (6.14.0.4) and 6.13 P4 (6.13.0.4) are also fixed releases. This vulnerability is similar to, but not identical to, CVE-2023-30639.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.archerirm.community/t5/platform-announcements/announcing-archer-platform-release-2024-06/ta-p/722094; https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/739717; https://www.archerirm.community/t5/platform-announcements/announcing-archer-platform-release-2024-06/ta-p/722094
CVE: CVE-2024-41706
Published: 2024-07-25
Description: A stored XSS issue was discovered in Archer Platform 6 before version 2024.06. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application. 6.14 P4 (6.14.0.4) is also a fixed release.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.archerirm.community/t5/platform-announcements/announcing-archer-platform-release-2024-06/ta-p/722094; https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/739717; https://www.archerirm.community/t5/platform-announcements/announcing-archer-platform-release-2024-06/ta-p/722094
CVE: CVE-2024-41707
Published: 2024-07-25
Description: An issue was discovered in Archer Platform 6 before 2024.06. Authenticated users can achieve HTML content injection. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML code in a trusted application data store. When victim users access the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.archerirm.community/t5/platform-announcements/announcing-archer-platform-release-2024-06/ta-p/722094; https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/739717; https://www.archerirm.community/t5/platform-announcements/announcing-archer-platform-release-2024-06/ta-p/722094
CVE: CVE-2024-37084
Published: 2024-07-25
Description: In Spring Cloud Data Flow versions prior to 2.11.4,  a malicious user who has access to the Skipper server api can use a crafted upload request to write an arbitrary file to any location on the file system which could lead to compromising the server
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://spring.io/security/cve-2024-37084; https://spring.io/security/cve-2024-37084
CVE: CVE-2024-6589
Published: 2024-07-25
Description: The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.2.6.8.2 via the 'render_content_block_template' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.
CVSS Score: 8.8 (HIGH)
CWE: CWE-98
References: https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.8.2/inc/block-template/class-block-template-archive-course.php#L28; https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.8.2/inc/block-template/class-block-template-single-course.php#L28; https://plugins.trac.wordpress.org/changeset/3124296/
CVE: CVE-2023-7271
Published: 2024-07-25
Description: Privilege escalation vulnerability in the NMS module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-840
References: https://consumer.huawei.com/en/support/bulletin/2024/7/; https://consumer.huawei.com/en/support/bulletin/2024/7/
CVE: CVE-2024-39670
Published: 2024-07-25
Description: Privilege escalation vulnerability in the account synchronisation module.
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-264
References: https://consumer.huawei.com/en/support/bulletin/2024/7/; https://consumer.huawei.com/en/support/bulletin/2024/7/
CVE: CVE-2024-39671
Published: 2024-07-25
Description: Access control vulnerability in the security verification module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-840
References: https://consumer.huawei.com/en/support/bulletin/2024/7/; https://consumer.huawei.com/en/support/bulletin/2024/7/
CVE: CVE-2024-39672
Published: 2024-07-25
Description: Memory request logic vulnerability in the memory module.
Impact: Successful exploitation of this vulnerability will affect integrity and availability.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://consumer.huawei.com/en/support/bulletin/2024/7/; https://consumer.huawei.com/en/support/bulletin/2024/7/
CVE: CVE-2024-39673
Published: 2024-07-25
Description: Vulnerability of serialisation/deserialisation mismatch in the iAware module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-502
References: https://consumer.huawei.com/en/support/bulletin/2024/7/; https://consumer.huawei.com/en/support/bulletin/2024/7/
CVE: CVE-2024-39674
Published: 2024-07-25
Description: Plaintext vulnerability in the Gallery search module.
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-312
References: https://consumer.huawei.com/en/support/bulletin/2024/7/; https://consumer.huawei.com/en/support/bulletin/2024/7/
CVE: CVE-2024-36111
Published: 2024-07-25
Description: KubePi is a K8s panel. Starting in version 1.6.3 and prior to version 1.8.0, there is a defect in the KubePi JWT token verification. The JWT key in the default configuration file is empty. Although a random 32-bit string will be generated to overwrite the key in the configuration file when the key is detected to be empty in the configuration file reading logic, the key is empty during actual verification. Using an empty key to generate a JWT token can bypass the login verification and directly take over the back end. Version 1.8.0 contains a patch for this issue.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-1259
References: https://github.com/1Panel-dev/KubePi/security/advisories/GHSA-8q5r-cvcw-4wx7; https://github.com/1Panel-dev/KubePi/security/advisories/GHSA-8q5r-cvcw-4wx7
CVE: CVE-2024-41806
Published: 2024-07-25
Description: The Open edX Platform is a learning management platform. Instructors can upload csv files containing learner information to create cohorts in the instructor dashboard. These files are uploaded using the django default storage. With certain storage backends, uploads may become publicly available when the uploader uses versions master, palm, olive, nutmeg, maple, lilac, koa, or juniper. The patch in commit cb729a3ced0404736dfa0ae768526c82b608657b ensures that cohorts data uploaded to AWS S3 buckets is written with a private ACL. Beyond patching, deployers should also ensure that existing cohorts uploads have a private ACL, or that other precautions are taken to avoid public access.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://github.com/openedx/edx-platform/commit/cb729a3ced0404736dfa0ae768526c82b608657b; https://github.com/openedx/edx-platform/security/advisories/GHSA-4528-7fh6-x75c; https://github.com/openedx/edx-platform/commit/cb729a3ced0404736dfa0ae768526c82b608657b
CVE: CVE-2024-7101
Published: 2024-07-25
Description: A vulnerability, which was classified as critical, has been found in ForIP Tecnologia Administração PABX 1.x. This issue affects some unknown processing of the file /login of the component Authentication Form. The manipulation of the argument usuario leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272423. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://vuldb.com/?ctiid.272423; https://vuldb.com/?id.272423; https://vuldb.com/?submit.375832
CVE: CVE-2024-36542
Published: 2024-07-25
Description: Insecure permissions in kuma v2.7.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
CVSS Score: 8.8 (HIGH)
CWE: CWE-277
References: https://gist.github.com/HouqiyuA/e1685843b6f42b47dbf97e2e92e63428; https://gist.github.com/HouqiyuA/e1685843b6f42b47dbf97e2e92e63428
CVE: CVE-2024-40872
Published: 2024-07-25
Description: There is an elevation of privilege vulnerability in server
and client components of Absolute Secure Access prior to version 13.07.
Attackers with local access and valid desktop user credentials can elevate
their privilege to system level by passing invalid address data to the vulnerable
component. This could be used to
manipulate process tokens to elevate the privilege of a normal process to
System. The scope is changed, the impact to system confidentiality and
integrity is high, the impact to the availability of the effected component is
none.
CVSS Score: 8.4 (HIGH)
CWE: CWE-822
References: https://www.absolute.com/platform/security-information/vulnerability-archive/secure-access-1307/cve-2024-40872/; https://www.absolute.com/platform/security-information/vulnerability-archive/secure-access-1307/cve-2024-40872/
CVE: CVE-2024-41800
Published: 2024-07-25
Description: Craft is a content management system (CMS). Craft CMS 5 allows reuse of TOTP tokens multiple times within the validity period. An attacker is able to re-submit a valid TOTP token to establish an authenticated session. This requires that the attacker has knowledge of the victim's credentials. This has been patched in Craft 5.2.3.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://github.com/craftcms/cms/commit/7c790fa5ad5a8cb8016cb6793ec3554c4c079e38; https://github.com/craftcms/cms/releases/tag/5.2.3; https://github.com/craftcms/cms/security/advisories/GHSA-wmx7-pw49-88jx
CVE: CVE-2024-41801
Published: 2024-07-25
Description: OpenProject is open source project management software. Prior to version 14.3.0, using a forged HOST header in the default configuration of packaged installations and using the "Login required" setting, an attacker could redirect to a remote host to initiate a phishing attack against an OpenProject user's account. This vulnerability affects default packaged installation of OpenProject without any additional configuration or modules on Apache (such as mod_security, manually setting a host name, having a fallthrough VirtualHost). It might also affect other installations that did not take care to fix the HOST/X-Forwarded-Host headers. Version 14.3.0 includes stronger protections for the hostname from within the application using the HostAuthorization middleware of Rails to reject any requests with a host name that does not match the configured one. Also, all generated links by the application are now ensured to use the built-in hostname. Users who aren't able to upgrade immediately may use mod_security for Apache2 or manually fix the Host and X-Forwarded-Host headers in their proxying application before reaching the application server of OpenProject. Alternatively, they can manually apply the patch to opt-in to host header protections in previous versions of OpenProject.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/opf/openproject/security/advisories/GHSA-g92v-vrq6-4fpw; https://github.com/user-attachments/files/16371759/host-protection.patch; https://www.openproject.org/docs/release-notes/14-3-0
CVE: CVE-2024-7007
Published: 2024-07-25
Description: Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an authentication bypass exploit that could allow an attacker to have unauthorized access to protected areas of the application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288, CWE-306
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-207-02; https://www.cisa.gov/news-events/ics-advisories/icsa-24-207-02
CVE: CVE-2022-32759
Published: 2024-07-25
Description: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 uses insufficient session expiration which could allow an unauthorized user to obtain sensitive information.  IBM X-Force ID:  228565.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-613
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/228565; https://www.ibm.com/support/pages/node/7161446; https://exchange.xforce.ibmcloud.com/vulnerabilities/228565
CVE: CVE-2024-28772
Published: 2024-07-25
Description: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  285645.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/285645; https://www.ibm.com/support/pages/node/7161448; https://exchange.xforce.ibmcloud.com/vulnerabilities/285645
CVE: CVE-2024-40873
Published: 2024-07-25
Description: There is a cross-site scripting vulnerability in the Secure
Access administrative console of Absolute Secure Access prior to version 13.07.
Attackers with system administrator permissions can interfere with another
system administrator’s use of the publishing UI when the administrators are
editing the same management object. The scope is unchanged, there is no loss of
confidentiality. Impact to system availability is none, impact to system
integrity is high.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.absolute.com/platform/security-information/vulnerability-archive/secure-access-1307/cve-2024-40873/; https://www.absolute.com/platform/security-information/vulnerability-archive/secure-access-1307/cve-2024-40873/
CVE: CVE-2024-1724
Published: 2024-07-25
Description: In snapd versions prior to 2.62, when using AppArmor for enforcement of 
sandbox permissions, snapd failed to restrict writes to the $HOME/bin
path. In Ubuntu, when this path exists, it is automatically added to
the users PATH. An attacker who could convince a user to install a
malicious snap which used the 'home' plug could use this vulnerability
to install arbitrary scripts into the users PATH which may then be run
by the user outside of the expected snap sandbox and hence allow them
to escape confinement.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-732, CWE-732
References: https://github.com/snapcore/snapd/commit/aa191f97713de8dc3ce3ac818539f0b976eb8ef6; https://github.com/snapcore/snapd/pull/13689; https://gld.mcphail.uk/posts/explaining-cve-2024-1724/
CVE: CVE-2024-40318
Published: 2024-07-25
Description: An arbitrary file upload vulnerability in Webkul Qloapps v1.6.0.0 allows attackers to execute arbitrary code via uploading a crafted file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/3v1lC0d3/RCE-QloApps/blob/main/qloapps--RCE.pdf; https://github.com/3v1lC0d3/RCE-QloApps/blob/main/qloapps--RCE.pdf
CVE: CVE-2024-29068
Published: 2024-07-25
Description: In snapd versions prior to 2.62, snapd failed to properly check the file
type when extracting a snap. The snap format is a squashfs file-system
image and so can contain files that are non-regular files (such as pipes 
or sockets etc). Various file entries within the snap squashfs image
(such as icons etc) are directly read by snapd when it is extracted. An 
attacker who could convince a user to install a malicious snap which
contained non-regular files at these paths could then cause snapd to block
indefinitely trying to read from such files and cause a denial of service.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: https://github.com/snapcore/snapd/commit/b66fee81606a1c05f965a876ccbaf[PII_REDACTED]3; https://github.com/snapcore/snapd/pull/13682; https://github.com/snapcore/snapd/commit/b66fee81606a1c05f965a876ccbaf[PII_REDACTED]3
CVE: CVE-2024-29069
Published: 2024-07-25
Description: In snapd versions prior to 2.62, snapd failed to properly check the
destination of symbolic links when extracting a snap. The snap format 
is a squashfs file-system image and so can contain symbolic links and
other file types. Various file entries within the snap squashfs image
(such as icons and desktop files etc) are directly read by snapd when
it is extracted. An attacker who could convince a user to install a
malicious snap which contained symbolic links at these paths could then 
cause snapd to write out the contents of the symbolic link destination
into a world-readable directory. This in-turn could allow an unprivileged
user to gain access to privileged information.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-610, CWE-59
References: https://github.com/snapcore/snapd/pull/13682; https://github.com/snapcore/snapd/pull/13682
CVE: CVE-2024-38287
Published: 2024-07-25
Description: The password-reset mechanism in the Forgot Password functionality in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to force the application into resetting the administrator's password to a random insecure 8-digit value.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640, CWE-640
References: https://github.com/google/security-research/security/advisories/GHSA-c84v-4pjw-4mh2; https://www.rhubcom.com/v5/manuals.html; https://github.com/google/security-research/security/advisories/GHSA-c84v-4pjw-4mh2
CVE: CVE-2024-38288
Published: 2024-07-25
Description: A command-injection issue in the Certificate Signing Request (CSR) functionality in R-HUB TurboMeeting through 8.x allows authenticated attackers with administrator privileges to execute arbitrary commands on the underlying server as root.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77, CWE-77
References: https://github.com/google/security-research/security/advisories/GHSA-gx6g-8mvx-3q5c; https://www.rhubcom.com/v5/manuals.html; https://github.com/google/security-research/security/advisories/GHSA-gx6g-8mvx-3q5c