deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-47085
Published: 2024-03-04
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2021-47086
Published: 2024-03-04
Description: In the Linux kernel, the following vulnerability has been resolved:

phonet/pep: refuse to enable an unbound pipe

This ioctl() implicitly assumed that the socket was already bound to
a valid local socket name, i.e. Phonet object. If the socket was not
bound, two separate problems would occur:

1) We'd send an pipe enablement request with an invalid source object.
2) Later socket calls could BUG on the socket unexpectedly being
   connected yet not bound to a valid object.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/0bbdd62ce9d44f3a22059b3d20a0df977d9f6d59; https://git.kernel.org/stable/c/311601f114859d586d5ef8833d60d3aa23282161; https://git.kernel.org/stable/c/48c76fc53582e7f13c1e0b11c916e503256c4d0b
CVE: CVE-2021-47087
Published: 2024-03-04
Description: In the Linux kernel, the following vulnerability has been resolved:

tee: optee: Fix incorrect page free bug

Pointer to the allocated pages (struct page *page) has already
progressed towards the end of allocation. It is incorrect to perform
__free_pages(page, order) using this pointer as we would free any
arbitrary pages. Fix this by stop modifying the page pointer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-763
References: https://git.kernel.org/stable/c/18549bf4b21c739a9def39f27dcac53e27286ab5; https://git.kernel.org/stable/c/806142c805cacd098e61bdc0f72c778a2389fe4a; https://git.kernel.org/stable/c/91e94e42f6fc49635f1a16d8ae3f79552bcfda29
CVE: CVE-2021-47088
Published: 2024-03-04
Description: In the Linux kernel, the following vulnerability has been resolved:

mm/damon/dbgfs: protect targets destructions with kdamond_lock

DAMON debugfs interface iterates current monitoring targets in
'dbgfs_target_ids_read()' while holding the corresponding
'kdamond_lock'.  However, it also destructs the monitoring targets in
'dbgfs_before_terminate()' without holding the lock.  This can result in
a use_after_free bug.  This commit avoids the race by protecting the
destruction with the corresponding 'kdamond_lock'.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/330c6117a82c16a9a365a51cec5c9ab30b13245c; https://git.kernel.org/stable/c/[PII_REDACTED]4b8d0aef45a99cf6c2d20cebe33733; https://git.kernel.org/stable/c/330c6117a82c16a9a365a51cec5c9ab30b13245c
CVE: CVE-2021-47089
Published: 2024-03-04
Description: In the Linux kernel, the following vulnerability has been resolved:

kfence: fix memory leak when cat kfence objects

Hulk robot reported a kmemleak problem:

    unreferenced object 0xffff93d1d8cc02e8 (size 248):
      comm "cat", pid 23327, jiffies[PII_REDACTED] (age 495992.217s)
      hex dump (first 32 bytes):
        00 40 85 19 d4 93 ff ff 00 10 00 00 00 00 00 00  .@..............
        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
      backtrace:
         seq_open+0x2a/0x80
         full_proxy_open+0x167/0x1e0
         do_dentry_open+0x1e1/0x3a0
         path_openat+0x961/0xa20
         do_filp_open+0xae/0x120
         do_sys_openat2+0x216/0x2f0
         do_sys_open+0x57/0x80
         do_syscall_64+0x33/0x40
         entry_SYSCALL_64_after_hwframe+0x44/0xa9
    unreferenced object 0xffff93d419854000 (size 4096):
      comm "cat", pid 23327, jiffies[PII_REDACTED] (age 495992.217s)
      hex dump (first 32 bytes):
        6b 66 65 6e 63 65 2d 23 32 35 30 3a 20 30 78 30  kfence-#250: 0x0
        30 30 30 30 30 30 30 37 35 34 62 64 61 31 32 2d [PII_REDACTED]bda12-
      backtrace:
         seq_read_iter+0x313/0x440
         seq_read+0x14b/0x1a0
         full_proxy_read+0x56/0x80
         vfs_read+0xa5/0x1b0
         ksys_read+0xa0/0xf0
         do_syscall_64+0x33/0x40
         entry_SYSCALL_64_after_hwframe+0x44/0xa9

I find that we can easily reproduce this problem with the following
commands:

	cat /sys/kernel/debug/kfence/objects
	echo scan > /sys/kernel/debug/kmemleak
	cat /sys/kernel/debug/kmemleak

The leaked memory is allocated in the stack below:

    do_syscall_64
      do_sys_open
        do_dentry_open
          full_proxy_open
            seq_open            ---> alloc seq_file
      vfs_read
        full_proxy_read
          seq_read
            seq_read_iter
              traverse          ---> alloc seq_buf

And it should have been released in the following process:

    do_syscall_64
      syscall_exit_to_user_mode
        exit_to_user_mode_prepare
          task_work_run
            ____fput
              __fput
                full_proxy_release  ---> free here

However, the release function corresponding to file_operations is not
implemented in kfence.  As a result, a memory leak occurs.  Therefore,
the solution to this problem is to implement the corresponding release
function.
CVSS Score: 3.3 (LOW)
CWE: CWE-401
References: https://git.kernel.org/stable/c/0129ab1f268b6cf88825eae819b9b84aa0a85634; https://git.kernel.org/stable/c/2f06c8293d27f6337f907042c602c9c953988c48; https://git.kernel.org/stable/c/0129ab1f268b6cf88825eae819b9b84aa0a85634
CVE: CVE-2021-47090
Published: 2024-03-04
Description: In the Linux kernel, the following vulnerability has been resolved:

mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()

Hulk Robot reported a panic in put_page_testzero() when testing
madvise() with MADV_SOFT_OFFLINE.  The BUG() is triggered when retrying
get_any_page().  This is because we keep MF_COUNT_INCREASED flag in
second try but the refcnt is not increased.

    page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0)
    ------------[ cut here ]------------
    kernel BUG at include/linux/mm.h:737!
    invalid opcode: 0000 [#1] PREEMPT SMP
    CPU: 5 PID: 2135 Comm: sshd Tainted: G    B             5.16.0-rc6-dirty #373
    Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014
    RIP: release_pages+0x53f/0x840
    Call Trace:
      free_pages_and_swap_cache+0x64/0x80
      tlb_flush_mmu+0x6f/0x220
      unmap_page_range+0xe6c/0x12c0
      unmap_single_vma+0x90/0x170
      unmap_vmas+0xc4/0x180
      exit_mmap+0xde/0x3a0
      mmput+0xa3/0x250
      do_exit+0x564/0x1470
      do_group_exit+0x3b/0x100
      __do_sys_exit_group+0x13/0x20
      __x64_sys_exit_group+0x16/0x20
      do_syscall_64+0x34/0x80
      entry_SYSCALL_64_after_hwframe+0x44/0xae
    Modules linked in:
    ---[ end trace e99579b570fe0649 ]---
    RIP: 0010:release_pages+0x53f/0x840
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/1f[PII_REDACTED]01fed87074a6bc924dbe806f08a5; https://git.kernel.org/stable/c/2a57d83c78f889bf3f54eede908d0643c40d5418; https://git.kernel.org/stable/c/c691e7575eff76e563b0199c23ec46bd454f43e3
CVE: CVE-2021-47091
Published: 2024-03-04
Description: In the Linux kernel, the following vulnerability has been resolved:

mac80211: fix locking in ieee80211_start_ap error path

We need to hold the local->mtx to release the channel context,
as even encoded by the lockdep_assert_held() there. Fix it.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-667
References: https://git.kernel.org/stable/c/87a270625a89fc841f1a7e21aae6176543d8385c; https://git.kernel.org/stable/c/ac61b9c6c0549aaeb98194cf429d93c41bfe5f79; https://git.kernel.org/stable/c/c1d1ec4db5f7264cfc21993e59e8f2dcecf4b44f
CVE: CVE-2021-47093
Published: 2024-03-04
Description: In the Linux kernel, the following vulnerability has been resolved:

platform/x86: intel_pmc_core: fix memleak on registration failure

In case device registration fails during module initialisation, the
platform device structure needs to be freed using platform_device_put()
to properly free all resources (e.g. the device name).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/26a8b09437804fabfb1db080d676b96c0de68e7c; https://git.kernel.org/stable/c/7a37f2e370699e2feca3dca6c8178c71ceee7e8a; https://git.kernel.org/stable/c/9ca1324755f1f8629a370af5cc315b175331f5d1
CVE: CVE-2021-47095
Published: 2024-03-04
Description: In the Linux kernel, the following vulnerability has been resolved:

ipmi: ssif: initialize ssif_info->client early

During probe ssif_info->client is dereferenced in error path. However,
it is set when some of the error checking has already been done. This
causes following kernel crash if an error path is taken:

[   30.645593][  T674] ipmi_ssif 0-000e: ipmi_ssif: Not probing, Interface already present
[   30.657616][  T674] Unable to handle kernel NULL pointer dereference at virtual address [PII_REDACTED]
...
[   30.657723][  T674] pc : __dev_printk+0x28/0xa0
[   30.657732][  T674] lr : _dev_err+0x7c/0xa0
...
[   30.657772][  T674] Call trace:
[   30.657775][  T674]  __dev_printk+0x28/0xa0
[   30.657778][  T674]  _dev_err+0x7c/0xa0
[   30.657781][  T674]  ssif_probe+0x548/0x900 [ipmi_ssif 62ce4b08badc1458fd896206d9ef69a3c31f3d3e]
[   30.657791][  T674]  i2c_device_probe+0x37c/0x3c0
...

Initialize ssif_info->client before any error path can be taken. Clear
i2c_client data in the error path to prevent the dangling pointer from
leaking.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/1f6ab847461ce7dd89ae9db2dd4658c993355d7c; https://git.kernel.org/stable/c/34f35f8f14bc406efc06ee4ff73202c6fd245d15; https://git.kernel.org/stable/c/77a7311ca167aa5b7055c549a940a56e73ee5f29
CVE: CVE-2021-47096
Published: 2024-03-04
Description: In the Linux kernel, the following vulnerability has been resolved:

ALSA: rawmidi - fix the uninitalized user_pversion

The user_pversion was uninitialized for the user space file structure
in the open function, because the file private structure use
kmalloc for the allocation.

The kernel ALSA sequencer code clears the file structure, so no additional
fixes are required.

BugLink: https://github.com/alsa-project/alsa-lib/issues/178
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-908
References: https://git.kernel.org/stable/c/39a8fc4971a00d22536aeb7d446ee4a97810611b; https://git.kernel.org/stable/c/b398fcbe4de1e1100867fdb6f447c6fbc8fe7085; https://git.kernel.org/stable/c/39a8fc4971a00d22536aeb7d446ee4a97810611b
CVE: CVE-2021-47098
Published: 2024-03-04
Description: In the Linux kernel, the following vulnerability has been resolved:

hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations

Commit b50aa49638c7 ("hwmon: (lm90) Prevent integer underflows of
temperature calculations") addressed a number of underflow situations
when writing temperature limits. However, it missed one situation, seen
when an attempt is made to set the hysteresis value to MAX_LONG and the
critical temperature limit is negative.

Use clamp_val() when setting the hysteresis temperature to ensure that
the provided value can never overflow or underflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://git.kernel.org/stable/c/55840b9eae5367b5d5b29619dc2fb7e4596dba46; https://git.kernel.org/stable/c/d105f30bea9104c590a9e5b495cb8a49bdfe405f; https://git.kernel.org/stable/c/55840b9eae5367b5d5b29619dc2fb7e4596dba46
CVE: CVE-2021-47101
Published: 2024-03-04
Description: In the Linux kernel, the following vulnerability has been resolved:

asix: fix uninit-value in asix_mdio_read()

asix_read_cmd() may read less than sizeof(smsr) bytes and in this case
smsr will be uninitialized.

Fail log:
BUG: KMSAN: uninit-value in asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline]
BUG: KMSAN: uninit-value in asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] drivers/net/usb/asix_common.c:497
BUG: KMSAN: uninit-value in asix_mdio_read+0x3c1/0xb00 drivers/net/usb/asix_common.c:497 drivers/net/usb/asix_common.c:497
 asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline]
 asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] drivers/net/usb/asix_common.c:497
 asix_mdio_read+0x3c1/0xb00 drivers/net/usb/asix_common.c:497 drivers/net/usb/asix_common.c:497
CVSS Score: 7.1 (HIGH)
CWE: CWE-908
References: https://git.kernel.org/stable/c/8035b1a2a37a29d8c717ef84fca8fe7278bc9f03; https://git.kernel.org/stable/c/d259f621c85949f30cc578cac813b82bb5169f56; https://git.kernel.org/stable/c/8035b1a2a37a29d8c717ef84fca8fe7278bc9f03
CVE: CVE-2021-47102
Published: 2024-03-04
Description: In the Linux kernel, the following vulnerability has been resolved:

net: marvell: prestera: fix incorrect structure access

In line:
	upper = info->upper_dev;
We access upper_dev field, which is related only for particular events
(e.g. event == NETDEV_CHANGEUPPER). So, this line cause invalid memory
access for another events,
when ptr is not netdev_notifier_changeupper_info.

The KASAN logs are as follows:

[   30.123165] BUG: KASAN: stack-out-of-bounds in prestera_netdev_port_event.constprop.0+0x68/0x538 [prestera]
[   30.133336] Read of size 8 at addr ffff80000cf772b0 by task udevd/778
[   30.139866]
[   30.141398] CPU: 0 PID: 778 Comm: udevd Not tainted 5.16.0-rc3 #6
[   30.147588] Hardware name: DNI AmazonGo1 A7040 board (DT)
[   30.153056] Call trace:
[   30.155547]  dump_backtrace+0x0/0x2c0
[   30.159320]  show_stack+0x18/0x30
[   30.162729]  dump_stack_lvl+0x68/0x84
[   30.166491]  print_address_description.constprop.0+0x74/0x2b8
[   30.172346]  kasan_report+0x1e8/0x250
[   30.176102]  __asan_load8+0x98/0xe0
[   30.179682]  prestera_netdev_port_event.constprop.0+0x68/0x538 [prestera]
[   30.186847]  prestera_netdev_event_handler+0x1b4/0x1c0 [prestera]
[   30.193313]  raw_notifier_call_chain+0x74/0xa0
[   30.197860]  call_netdevice_notifiers_info+0x68/0xc0
[   30.202924]  register_netdevice+0x3cc/0x760
[   30.207190]  register_netdev+0x24/0x50
[   30.211015]  prestera_device_register+0x8a0/0xba0 [prestera]
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://git.kernel.org/stable/c/2efc2256febf214e7b2bdaa21fe6c3c3146acdcb; https://git.kernel.org/stable/c/5c553a0cd1263e4da5f220d80fa713fc3959c1d0; https://git.kernel.org/stable/c/2efc2256febf214e7b2bdaa21fe6c3c3146acdcb
CVE: CVE-2023-38360
Published: 2024-03-04
Description: IBM CICS TX Advanced 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  260769.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/260769; https://www.ibm.com/support/pages/node/7066435; https://exchange.xforce.ibmcloud.com/vulnerabilities/260769
CVE: CVE-2024-27198
Published: 2024-03-04
Description: In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive; https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive
CVE: CVE-2024-27199
Published: 2024-03-04
Description: In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions  was possible
CVSS Score: 7.3 (HIGH)
CWE: CWE-23, CWE-22
References: https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive; https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive
CVE: CVE-2021-47104
Published: 2024-03-04
Description: In the Linux kernel, the following vulnerability has been resolved:

IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()

The wrong goto label was used for the error case and missed cleanup of the
pkt allocation.

Addresses-Coverity-ID: 1493352 ("Resource leak")
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/0aaec9c5f60754b56f84460ea439b8c5e91f4caa; https://git.kernel.org/stable/c/1ced0a3015a95c6a6db45e37250912c4c86697ab; https://git.kernel.org/stable/c/76b648063eb36c72dfc0a6896de8a0a7d2c7841c
CVE: CVE-2021-47105
Published: 2024-03-04
Description: In the Linux kernel, the following vulnerability has been resolved:

ice: xsk: return xsk buffers back to pool when cleaning the ring

Currently we only NULL the xdp_buff pointer in the internal SW ring but
we never give it back to the xsk buffer pool. This means that buffers
can be leaked out of the buff pool and never be used again.

Add missing xsk_buff_free() call to the routine that is supposed to
clean the entries that are left in the ring so that these buffers in the
umem can be used by other sockets.

Also, only go through the space that is actually left to be cleaned
instead of a whole ring.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/ad6d20da2cfbe14b7b1200d15f39e65988b0b9e8; https://git.kernel.org/stable/c/afe8a3ba85ec2a6b6849367e25c06a2f8e0ddd05; https://git.kernel.org/stable/c/ad6d20da2cfbe14b7b1200d15f39e65988b0b9e8
CVE: CVE-2021-47107
Published: 2024-03-04
Description: In the Linux kernel, the following vulnerability has been resolved:

NFSD: Fix READDIR buffer overflow

If a client sends a READDIR count argument that is too small (say,
zero), then the buffer size calculation in the new init_dirlist
helper functions results in an underflow, allowing the XDR stream
functions to write beyond the actual buffer.

This calculation has always been suspect. NFSD has never sanity-
checked the READDIR count argument, but the old entry encoders
managed the problem correctly.

With the commits below, entry encoding changed, exposing the
underflow to the pointer arithmetic in xdr_reserve_space().

Modern NFS clients attempt to retrieve as much data as possible
for each READDIR request. Also, we have no unit tests that
exercise the behavior of READDIR at the lower bound of @count
values. Thus this case was missed during testing.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://git.kernel.org/stable/c/53b1119a6e5028b125f431a0116ba73510d82a72; https://git.kernel.org/stable/c/9e291a6a28d32545ed2fd959a8165144d1724df1; https://git.kernel.org/stable/c/eabc0aab98e5218ceecd82069b0d6fdfff5ee885
CVE: CVE-2021-47108
Published: 2024-03-04
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf

In commit 41ca9caaae0b
("drm/mediatek: hdmi: Add check for CEA modes only") a check
for CEA modes was added to function mtk_hdmi_bridge_mode_valid()
in order to address possible issues on MT8167;
moreover, with commit c91026a938c2
("drm/mediatek: hdmi: Add optional limit on maximal HDMI mode clock")
another similar check was introduced.

Unfortunately though, at the time of writing, MT8173 does not provide
any mtk_hdmi_conf structure and this is crashing the kernel with NULL
pointer upon entering mtk_hdmi_bridge_mode_valid(), which happens as
soon as a HDMI cable gets plugged in.

To fix this regression, add a NULL pointer check for hdmi->conf in the
said function, restoring HDMI functionality and avoiding NULL pointer
kernel panics.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/3b8e19a0aa3933a785be9f1541afd8d398c4ec69; https://git.kernel.org/stable/c/71d07ebc5000b9c1d140e99e7493b0bafa954776; https://git.kernel.org/stable/c/3b8e19a0aa3933a785be9f1541afd8d398c4ec69
CVE: CVE-2023-32331
Published: 2024-03-04
Description: IBM Connect:Express for UNIX 1.5.0 is vulnerable to a buffer overflow that could allow a remote attacker to cause a denial of service through its browser UI.  IBM X-Force ID:  254979.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-120
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/254979; https://www.ibm.com/support/pages/node/7011443; https://exchange.xforce.ibmcloud.com/vulnerabilities/254979
CVE: CVE-2023-6068
Published: 2024-03-04
Description: On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the configured ACL for a port resulting in some packets that should be denied being permitted and some
CVSS Score: 3.1 (LOW)
CWE: CWE-283
References: https://www.arista.com/en/support/advisories-notices/security-advisory/19023-security-advisory-0091; https://www.arista.com/en/support/advisories-notices/security-advisory/19023-security-advisory-0091
CVE: CVE-2024-27889
Published: 2024-03-04
Description: Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW). A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.

CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://https://www.arista.com/en/support/advisories-notices/security-advisory/19038-security-advisory-0093; https://https://www.arista.com/en/support/advisories-notices/security-advisory/19038-security-advisory-0093
CVE: CVE-2024-2048
Published: 2024-03-04
Description: Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate. In this configuration, an attacker may be able to craft a malicious certificate that could be used to bypass authentication. Fixed in Vault 1.15.5 and 1.14.10.
CVSS Score: 8.1 (HIGH)
CWE: CWE-295
References: https://discuss.hashicorp.com/t/hcsec-2024-05-vault-cert-auth-method-did-not-correctly-validate-non-ca-certificates/63382; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://discuss.hashicorp.com/t/hcsec-2024-05-vault-cert-auth-method-did-not-correctly-validate-non-ca-certificates/63382
CVE: CVE-2024-1316
Published: 2024-03-04
Description: The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the existence of certain events they shouldn't have access to. (e.g. draft, private, pending review, pw-protected, and trashed events).
CVSS Score: 6.5 (MEDIUM)
References: https://wpscan.com/vulnerability/d80dfe2f-207d-4cdf-8c71-27936c6318e5/; https://wpscan.com/vulnerability/d80dfe2f-207d-4cdf-8c71-27936c6318e5/
CVE: CVE-2024-1319
Published: 2024-03-04
Description: The Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the attendees list on any post type regardless of status. (e.g. draft, private, pending review, password-protected, and trashed posts).
CVSS Score: 4.3 (MEDIUM)
References: https://wpscan.com/vulnerability/5904dc7e-1058-4c40-bca3-66ba57b1414b/; https://wpscan.com/vulnerability/5904dc7e-1058-4c40-bca3-66ba57b1414b/
CVE: CVE-2024-2168
Published: 2024-03-04
Description: A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/operations/expense_category.php of the component HTTP POST Request Handler. The manipulation of the argument status leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-255678 is the identifier assigned to this vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89
References: https://vuldb.com/?ctiid.255678; https://vuldb.com/?id.255678; https://www.yuque.com/mailemonyeyongjuan/nekc0f/uoobn101h48xv6ih
CVE: CVE-2023-41827
Published: 2024-03-04
Description: An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inject an HTML-based message on screen UI.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-926
References: https://en-us.support.motorola.com/app/answers/detail/a_id/178273; https://en-us.support.motorola.com/app/answers/detail/a_id/178273