deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-39577
Published: 2024-09-26
Description: Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability leading to code execution.
CVSS Score: 7.1 (HIGH)
CWE: CWE-77
References: https://www.dell.com/support/kbdoc/en-us/000228976/dsa-2024-274-security-update-for-dell-networking-os10-vulnerabilities
CVE: CVE-2024-41715
Published: 2024-09-26
Description: The goTenna Pro ATAK Plugin does not inject extra characters into 
broadcasted frames to obfuscate the length of messages. This makes it 
possible to tell the length of the payload regardless of the encryption 
used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-204, CWE-203
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05
CVE: CVE-2024-41722
Published: 2024-09-26
Description: In the goTenna Pro ATAK Plugin there is a vulnerability that makes it 
possible to inject any custom message with any GID and Callsign using a 
software defined radio in existing goTenna mesh networks. This 
vulnerability can be exploited if the device is being used in an 
unencrypted environment or if the cryptography has already been 
compromised. It is advised to use encryption shared with local QR code 
for higher security operations.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1390
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05
CVE: CVE-2024-41931
Published: 2024-09-26
Description: The goTenna Pro ATAK Plugin encryption key name is always sent 
unencrypted when the key is sent over RF through a broadcast message. It
 is advised to share the encryption key via local QR for higher security
 operations.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-201
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05
CVE: CVE-2024-43108
Published: 2024-09-26
Description: The goTenna Pro ATAK Plugin uses AES CTR type encryption for short, 
encrypted messages without any additional integrity checking mechanisms.
 This leaves messages malleable to an attacker that can access the 
message. It is advised to continue to use encryption in the plugin and 
update to the current release for enhanced encryption protocols.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-353, CWE-345
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05
CVE: CVE-2024-43694
Published: 2024-09-26
Description: In the goTenna Pro ATAK Plugin application, the encryption keys are 
stored along with a static IV on the device. This allows for complete 
decryption of keys stored on the device. This allows an attacker to 
decrypt all encrypted broadcast communications based on broadcast keys 
stored on the device.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-922
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05
CVE: CVE-2024-43814
Published: 2024-09-26
Description: The goTenna Pro ATAK Plugin's default settings are to share Automatic 
Position, Location, and Information (PLI) updates every 60 seconds once 
the plugin is active and goTenna is connected. Users that are unaware of
 their settings and have not activated encryption before a mission may 
accidentally broadcast their location unencrypted. It is advised to 
verify PLI settings are the desired rate and activate encryption prior 
to mission. Update to the latest Plugin to disable this default setting.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-201
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05
CVE: CVE-2024-45042
Published: 2024-09-26
Description: Ory Kratos is an identity, user management and authentication system for cloud services. Prior to version 1.3.0, given a number of preconditions, the `highest_available` setting will incorrectly assume that the identity’s highest available AAL is `aal1` even though it really is `aal2`. This means that the `highest_available` configuration will act as if the user has only one factor set up, for that particular user. This means that they can call the settings and whoami endpoint without a `aal2` session, even though that should be disallowed. An attacker would need to steal or guess a valid login OTP of a user who has only OTP for login enabled and who has an incorrect `available_aal` value stored, to exploit this vulnerability. All other aspects of the session (e.g. the session’s aal) are not impacted by this issue. On the Ory Network, only 0.00066% of registered users were affected by this issue, and most of those users appeared to be test users. Their respective AAL values have since been updated and they are no longer vulnerable to this attack. Version 1.3.0 is not affected by this issue. As a workaround, those who require MFA should disable the passwordless code login method. If that is not possible, check the sessions `aal` to identify if the user has `aal1` or `aal2`.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-287
References: https://github.com/ory/kratos/security/advisories/GHSA-wc43-73w7-x2f5
CVE: CVE-2024-45374
Published: 2024-09-26
Description: The goTenna Pro ATAK plugin uses a weak password for sharing encryption 
keys via the key broadcast method. If the broadcasted encryption key is 
captured over RF, and password is cracked via brute force attack, it is 
possible to decrypt it and use it to decrypt all future and past 
messages sent via encrypted broadcast with that particular key. This 
only applies when the key is broadcasted over RF. This is an optional 
feature, so it is advised to use local QR encryption key sharing for 
additional security on this and previous versions.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-521, CWE-922
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05
CVE: CVE-2024-45723
Published: 2024-09-26
Description: The goTenna Pro ATAK Plugin does not use SecureRandom when generating 
passwords for sharing cryptographic keys. The random function in use 
makes it easier for attackers to brute force this password if the 
broadcasted encryption key is captured over RF. This only applies to the
 optional broadcast of an encryption key, so it is advised to share the 
key with local QR code for higher security operations.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-338
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05
CVE: CVE-2024-45838
Published: 2024-09-26
Description: The goTenna Pro ATAK Plugin does not encrypt callsigns in messages. It 
is advised to not use sensitive information in callsigns when using this
 and previous versions of the plugin. Update to current plugin version 
which uses AES-256 encryption for callsigns in encrypted operation
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-319
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05
CVE: CVE-2024-45984
Published: 2024-09-26
Description: A Cross Site Scripting (XSS) vulnerability in add_donor.php of Blood Bank And Donation Management System 1.0 allows an attacker to inject malicious scripts that will be executed when the Donor List is viewed.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://github.com/soursec/CVEs/tree/main/CVE-2024-45984
CVE: CVE-2024-45985
Published: 2024-09-26
Description: A Cross Site Scripting (XSS) vulnerability in update_contact.php of Blood Bank and Donation Management System v1.0 allows an attacker to inject malicious scripts via the name parameter of the update_contact.php
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://github.com/soursec/CVEs/tree/main/CVE-2024-45985
CVE: CVE-2024-45987
Published: 2024-09-26
Description: Projectworld Online Voting System Version 1.0 is vulnerable to Cross Site Request Forgery (CSRF) via voter.php. This vulnerability allows an attacker to craft a malicious link that, when clicked by an authenticated user, automatically submits a vote for a specified party without the user's consent or knowledge. The attack leverages the user's active session to perform the unauthorized action, compromising the integrity of the voting process.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://github.com/soursec/CVEs/tree/main/CVE-2024-45987
CVE: CVE-2024-45989
Published: 2024-09-26
Description: Monica AI Assistant desktop application v2.3.0 is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor. A prompt injection allows an attacker to modify chatbot answer with an unloaded image that exfiltrates the user's sensitive chat data of the current session to a malicious third-party or attacker-controlled server.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-77
References: https://github.com/soursec/CVEs/tree/main/CVE-2024-45989; https://monica.im/desktop
CVE: CVE-2024-47075
Published: 2024-09-26
Description: LayUI is a native minimalist modular Web UI component library. Versions prior to 2.9.17 have a DOM Clobbering vulnerability that can lead to Cross-site Scripting (XSS) on web pages where attacker-controlled HTML elements (e.g., `img` tags with unsanitized `name` attributes) are present. Version 2.9.17 fixes this issue.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/layui/layui/commit/f756b41d63bf3d488a2cb042918638c9851bf2b0; https://github.com/layui/layui/security/advisories/GHSA-j827-6rgf-9629
CVE: CVE-2024-47121
Published: 2024-09-26
Description: The goTenna Pro App uses a weak password for sharing encryption keys via
 the key broadcast method. If the broadcasted encryption key is captured
 over RF, and password is cracked via brute force attack, it is possible
 to decrypt it and use it to decrypt all future and past messages sent 
via encrypted broadcast with that particular key. This only applies when
 the key is broadcasted over RF. This is an optional feature, so it is 
recommended to use local QR encryption key sharing for additional 
security on this and previous versions.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-521
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04
CVE: CVE-2024-47122
Published: 2024-09-26
Description: In the goTenna Pro App, the encryption keys are stored along with a 
static IV on the End User Device (EUD). This allows for complete 
decryption of keys stored on the EUD if physically compromised. This 
allows an attacker to decrypt all encrypted broadcast communications 
based on encryption keys stored on the EUD. This requires access to and 
control of the EUD, so it is recommended to use strong access control 
measures and layered encryption on the EUD for more secure operation.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-922
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04
CVE: CVE-2024-47123
Published: 2024-09-26
Description: The goTenna Pro App uses AES CTR type encryption for short, encrypted 
messages without any additional integrity checking mechanisms. This 
leaves messages malleable to an attacker that can access the message. It
 is recommended to continue to use encryption in the app and update to 
the current release for more secure operations.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-353, CWE-345
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04
CVE: CVE-2024-47124
Published: 2024-09-26
Description: The goTenna Pro App does not encrypt callsigns in messages. It is 
recommended to not use sensitive information in callsigns when using 
this and previous versions of the app and update your app to the current
 app version which uses AES-256 encryption for callsigns in encrypted 
operation.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-319
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04
CVE: CVE-2024-47125
Published: 2024-09-26
Description: The goTenna Pro App does not authenticate public keys which allows an 
unauthenticated attacker to manipulate messages. It is advised to update
 your app to the current release for enhanced encryption protocols.
CVSS Score: 8.1 (HIGH)
CWE: CWE-923, CWE-287
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04
CVE: CVE-2024-47126
Published: 2024-09-26
Description: The goTenna Pro App does not use SecureRandom when generating passwords 
for sharing cryptographic keys. The random function in use makes it 
easier for attackers to brute force this password if the broadcasted 
encryption key is captured over RF. This only applies to the optional 
broadcast of an encryption key, so it is advised to share the key with 
local QR code for higher security operations.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-338, CWE-338
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04
CVE: CVE-2024-47127
Published: 2024-09-26
Description: In the goTenna Pro App there is a vulnerability that makes it possible 
to inject any custom message with any GID and Callsign using a software 
defined radio in existing goTenna mesh networks. This vulnerability can 
be exploited if the device is being used in an unencrypted environment 
or if the cryptography has already been compromised. It is advised to 
share encryption keys via QR scanning for higher security operations and
 update your app to the current release for enhanced encryption 
protocols.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1390, CWE-287
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04
CVE: CVE-2024-47128
Published: 2024-09-26
Description: The goTenna Pro App encryption key name is always sent unencrypted when 
the key is shared over RF through a broadcast message. It is advised to 
share the encryption key via local QR for higher security operations.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-201
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04
CVE: CVE-2024-47129
Published: 2024-09-26
Description: The goTenna Pro App does not inject extra characters into broadcasted 
frames to obfuscate the length of messages. This makes it possible to 
tell the length of the payload regardless of the encryption used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-204, CWE-203
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04
CVE: CVE-2024-47130
Published: 2024-09-26
Description: The goTenna Pro App allows unauthenticated attackers to remotely update 
the local public keys used for P2P and group messages. It is advised to 
update your app to the current release for enhanced encryption 
protocols.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04
CVE: CVE-2024-47169
Published: 2024-09-26
Description: Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to upload arbitrary files to attacker-chosen locations on the server, including JavaScript, enabling the execution of commands within those files. This issue could result in unauthorized access, full server compromise, data leakage, and other critical security threats. This does not affect `agnai.chat`, installations using S3-compatible storage, or self-hosting that is not publicly exposed. This does affect publicly hosted installs without S3-compatible storage. Version 1.0.330 fixes this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-35, CWE-434
References: https://github.com/agnaistic/agnai/security/advisories/GHSA-mpch-89gm-hm83
CVE: CVE-2024-47170
Published: 2024-09-26
Description: Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to read arbitrary JSON files at attacker-chosen locations on the server. This issue can lead to unauthorized access to sensitive information and exposure of confidential configuration files. This only affects installations with `JSON_STORAGE` enabled which is intended to local/self-hosting only. Version 1.0.330 fixes this issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-35, CWE-22
References: https://github.com/agnaistic/agnai/security/advisories/GHSA-h355-hm5h-cm8h
CVE: CVE-2024-47171
Published: 2024-09-26
Description: Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to upload image files at attacker-chosen location on the server. This issue can lead to image file uploads to unauthorized or unintended directories, including overwriting of existing images which may be used for defacement. This does not affect `agnai.chat`, installations using S3-compatible storage, or self-hosting that is not publicly exposed. Version 1.0.330 fixes this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-35, CWE-22
References: https://github.com/agnaistic/agnai/blob/75abbd5b0f5e48ddecc805365cf1574d05ee1ce5/srv/api/character.ts#L140:; https://github.com/agnaistic/agnai/blob/75abbd5b0f5e48ddecc805365cf1574d05ee1ce5/srv/api/upload.ts#L55; https://github.com/agnaistic/agnai/security/advisories/GHSA-g54f-66mw-hv66
CVE: CVE-2024-47174
Published: 2024-09-26
Description: Nix is a package manager for Linux and other Unix systems. Starting in version 1.11 and prior to versions 2.18.8 and 2.24.8, `<nix/fetchurl.nix>` did not verify TLS certificates on HTTPS connections. This could lead to connection details such as full URLs or credentials leaking in case of a man-in-the-middle (MITM) attack. `<nix/fetchurl.nix>` is also known as the builtin derivation builder `builtin:fetchurl`. It's not to be confused with the evaluation-time function `builtins.fetchurl`, which was not affected by this issue. A user may be affected by the risk of leaking credentials if they have a `netrc` file for authentication, or rely on derivations with `impureEnvVars` set to use credentials from the environment. In addition, the commonplace trust-on-first-use (TOFU) technique of updating dependencies by specifying an invalid hash and obtaining it from a remote  store was also vulnerable to a MITM injecting arbitrary store objects. This also applied to the impure derivations experimental feature. Note that this may also happen when using Nixpkgs fetchers to obtain new hashes when not using the fake hash method, although that mechanism is not implemented in Nix itself but rather in Nixpkgs using a fixed-output derivation. The behavior was introduced in version 1.11 to make it consistent with the Nixpkgs `pkgs.fetchurl` and to make `<nix/fetchurl.nix>` work in the derivation builder sandbox, which back then did not have access to the CA bundles by default. Nowadays, CA bundles are bind-mounted on Linux. This issue has been fixed in Nix 2.18.8 and 2.24.8. As a workaround, implement (authenticated) fetching with `pkgs.fetchurl` from Nixpkgs, using `impureEnvVars` and `curlOpts` as needed.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287
References: https://github.com/NixOS/nix/commit/062b4a489e30da9c85fa4ff15cfdd2e51cac7b90; https://github.com/NixOS/nix/commit/5db358d4d78aea7204a8f22c5bf2a309267ee038; https://github.com/NixOS/nix/pull/11585
CVE: CVE-2024-8118
Published: 2024-09-26
Description: In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to write external alert instances to also write alert rules.
CWE: CWE-653
References: https://grafana.com/security/security-advisories/cve-2024-8118/
CVE: CVE-2024-46628
Published: 2024-09-26
Description: Tenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/Question-h/vuln/blob/master/Remote%20Code%20Execution%20Vulnerability%20in%20Tenda%20G3%20Router.md
CVE: CVE-2024-47179
Published: 2024-09-26
Description: RSSHub is an RSS network. Prior to commit 64e00e7, RSSHub's `docker-test-cont.yml` workflow is vulnerable to Artifact Poisoning, which could have lead to a full repository takeover. Downstream users of RSSHub are not vulnerable to this issue, and commit 64e00e7 fixed the underlying issue and made the repository no longer vulnerable. The `docker-test-cont.yml` workflow gets triggered when the `PR - Docker build test` workflow completes successfully. It then collects some information about the Pull Request that triggered the triggering workflow and set some labels depending on the PR body and sender. If the PR also contains a `routes` markdown block, it will set the `TEST_CONTINUE` environment variable to `true`. The workflow then downloads and extracts an artifact uploaded by the triggering workflow which is expected to contain a single `rsshub.tar.zst` file. However, prior to commit 64e00e7, it did not validate and the contents were extracted in the root of the workspace overriding any existing files. Since the contents of the artifact were not validated, it is possible for a malicious actor to send a Pull Request which uploads, not just the `rsshub.tar.zst` compressed docker image, but also a malicious `package.json` file with a script to run arbitrary code in the context of the privileged workflow. As of commit 64e00e7, this scenario has been addressed and the RSSHub repository is no longer vulnerable.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://codeql.github.com/codeql-query-help/javascript/js-actions-command-injection; https://github.com/DIYgod/RSSHub/actions/runs/[PII_REDACTED]/job/[PII_REDACTED]9#step:1:17; https://github.com/DIYgod/RSSHub/blob/e08733f94c81440d19ee6a5fd5e915e9a65395f5/.github/workflows/docker-test-cont.yml
CVE: CVE-2024-47180
Published: 2024-09-26
Description: Shields.io is a service for concise, consistent, and legible badges in SVG and raster format. Shields.io and users self-hosting their own instance of shields using version < `server-2024-09-25` are vulnerable to a remote execution vulnerability via the JSONPath library used by the Dynamic JSON/Toml/Yaml badges. This vulnerability would allow any user with access to make a request to a URL on the instance to the ability to execute code by crafting a malicious JSONPath expression. All users who self-host an instance are vulnerable. This problem was fixed in server-2024-09-25. Those who follow the tagged releases should update to `server-2024-09-25` or later. Those who follow the rolling tag on DockerHub, `docker pull shieldsio/shields:next` to update to the latest version. As a workaround, blocking access to the endpoints `/badge/dynamic/json`, `/badge/dynamic/toml`, and `/badge/dynamic/yaml` (e.g: via a firewall or reverse proxy in front of your instance) would prevent the exploitable endpoints from being accessed.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://github.com/badges/shields/commit/ec1b6c8daccda075403c1688ac02603f7aaa50b2; https://github.com/badges/shields/issues/10553; https://github.com/badges/shields/pull/10551
CVE: CVE-2024-7594
Published: 2024-09-26
Description: Vault’s SSH secrets engine did not require the valid_principals list to contain a value by default. If the valid_principals and default_user fields of the SSH secrets engine configuration are not set, an SSH certificate requested by an authorized user to Vault’s SSH secrets engine could be used to authenticate as any user on the host. Fixed in Vault Community Edition 1.17.6, and in Vault Enterprise 1.17.6, 1.16.10, and 1.15.15.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://discuss.hashicorp.com/t/hcsec-2024-20-vault-ssh-secrets-engine-configuration-did-not-restrict-valid-principals-by-default/70251; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-45986
Published: 2024-09-26
Description: A stored Cross-Site Scripting (XSS) vulnerability was identified in Projectworld Online Voting System 1.0 that occurs when an account is registered with a malicious javascript payload. The payload is stored and subsequently executed in the voter.php and profile.php pages whenever the account information is accessed.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/soursec/CVEs/tree/main/CVE-2024-45986