deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-9974
Published: 2024-10-15
Description: A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file classes/Master.php?f=add_to_card of the component POST Request Handler. The manipulation of the argument product_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://gist.github.com/higordiego/2373b9e3e89f03e5f8888efd38eb4b48; https://vuldb.com/?ctiid.280339; https://vuldb.com/?id.280339
CVE: CVE-2024-45271
Published: 2024-10-15
Description: An unauthenticated local attacker can gain admin privileges by deploying a config file due to improper input validation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-94
References: https://cert.vde.com/en/advisories/VDE-2024-056; https://cert.vde.com/en/advisories/VDE-2024-066; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-059.txt
CVE: CVE-2024-45272
Published: 2024-10-15
Description: An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1391
References: https://cert.vde.com/en/advisories/VDE-2024-068; https://cert.vde.com/en/advisories/VDE-2024-069; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-061.txt
CVE: CVE-2024-45273
Published: 2024-10-15
Description: An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.
CVSS Score: 8.4 (HIGH)
CWE: CWE-261, CWE-326
References: https://cert.vde.com/en/advisories/VDE-2024-056; https://cert.vde.com/en/advisories/VDE-2024-066; https://cert.vde.com/en/advisories/VDE-2024-068
CVE: CVE-2024-45274
Published: 2024-10-15
Description: An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://cert.vde.com/en/advisories/VDE-2024-056; https://cert.vde.com/en/advisories/VDE-2024-066; http://seclists.org/fulldisclosure/2025/Jul/38
CVE: CVE-2024-45275
Published: 2024-10-15
Description: The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://cert.vde.com/en/advisories/VDE-2024-056; https://cert.vde.com/en/advisories/VDE-2024-066; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-064.txt
CVE: CVE-2024-45276
Published: 2024-10-15
Description: An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306, CWE-306
References: https://cert.vde.com/en/advisories/VDE-2024-056; https://cert.vde.com/en/advisories/VDE-2024-066; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-065.txt
CVE: CVE-2024-47674
Published: 2024-10-15
Description: In the Linux kernel, the following vulnerability has been resolved:

mm: avoid leaving partial pfn mappings around in error case

As Jann points out, PFN mappings are special, because unlike normal
memory mappings, there is no lifetime information associated with the
mapping - it is just a raw mapping of PFNs with no reference counting of
a 'struct page'.

That's all very much intentional, but it does mean that it's easy to
mess up the cleanup in case of errors.  Yes, a failed mmap() will always
eventually clean up any partial mappings, but without any explicit
lifetime in the page table mapping itself, it's very easy to do the
error handling in the wrong order.

In particular, it's easy to mistakenly free the physical backing store
before the page tables are actually cleaned up and (temporarily) have
stale dangling PTE entries.

To make this situation less error-prone, just make sure that any partial
pfn mapping is torn down early, before any other error handling.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-459
References: https://git.kernel.org/stable/c/3213fdcab961026203dd587a4533600c70b3336b; https://git.kernel.org/stable/c/35770ca6180caa24a2b258c99a87bd437a1ee10f; https://git.kernel.org/stable/c/5b2c8b34f6d76bfbd1dd4936eb8a0fbfb9af3959
CVE: CVE-2024-49382
Published: 2024-10-15
Description: Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1327
References: https://security-advisory.acronis.com/advisories/SEC-7286
CVE: CVE-2024-49383
Published: 2024-10-15
Description: Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1327
References: https://security-advisory.acronis.com/advisories/SEC-7285
CVE: CVE-2024-49384
Published: 2024-10-15
Description: Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1327
References: https://security-advisory.acronis.com/advisories/SEC-7284
CVE: CVE-2024-49387
Published: 2024-10-15
Description: Cleartext transmission of sensitive information in acep-collector service. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://security-advisory.acronis.com/advisories/SEC-7022
CVE: CVE-2024-49388
Published: 2024-10-15
Description: Sensitive information manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-639, CWE-639
References: https://security-advisory.acronis.com/advisories/SEC-5984
CVE: CVE-2024-9975
Published: 2024-10-15
Description: A vulnerability was found in SourceCodester Drag and Drop Image Upload 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /upload.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/JunMing27/CVE/blob/main/SourceCodester%20-%20Arbitrary%20File%20Upload%20vulnerability%20leads%20to%20RCE%20in%20Drag%20and%20Drop%20Image%20Upload%20without%20Refresh%20Reload%20Using%20PHP%20and%20Ajax.md; https://vuldb.com/?ctiid.280340; https://vuldb.com/?id.280340
CVE: CVE-2024-9976
Published: 2024-10-15
Description: A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/manage_customer.php?action=search. The manipulation of the argument text leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://code-projects.org/; https://gist.github.com/higordiego/b57040961b993cb5f1bfe0005f6b57be; https://vuldb.com/?ctiid.280341
CVE: CVE-2024-48278
Published: 2024-10-15
Description: Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to Cross Site Request Forgery (CSRF) via /edit-profile.php.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/m14r41/Writeups/blob/main/CVE/phpGurukul/User%20Registration%20%26%20Login%20and%20User%20Management%20System%20With%20admin%20panel/CSRF%20-%20Profile.md
CVE: CVE-2024-48279
Published: 2024-10-15
Description: A HTML Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2. This vulnerability allows remote attackers to execute arbitrary HTML code via the searchkey parameter in a POST HTTP request.
CVSS Score: 7.6 (HIGH)
CWE: CWE-94
References: https://github.com/m14r41/Writeups/blob/main/CVE/phpGurukul/User%20Registration%20%26%20Login%20and%20User%20Management%20System%20With%20admin%20panel/HTML%20Injection%20-%20Search.md
CVE: CVE-2024-48280
Published: 2024-10-15
Description: A SQL Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL command via the fromdate parameter in a POST HTTP request.
CVSS Score: 7.6 (HIGH)
CWE: CWE-89
References: https://github.com/m14r41/Writeups/blob/main/CVE/phpGurukul/User%20Registration%20%26%20Login%20and%20User%20Management%20System%20With%20admin%20panel/SQL%20Injection%20-%20Bw%20Date%20Report%20%28%20fromdate%29.md
CVE: CVE-2024-48282
Published: 2024-10-15
Description: A SQL Injection vulnerability was found in /password-recovery.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the femail parameter in a POST HTTP request.
CVSS Score: 7.6 (HIGH)
CWE: CWE-89
References: https://github.com/m14r41/Writeups/blob/main/CVE/phpGurukul/User%20Registration%20%26%20Login%20and%20User%20Management%20System%20With%20admin%20panel/SQL%20Injection%20-%20Forget%20Password.md
CVE: CVE-2024-48283
Published: 2024-10-15
Description: Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-result.php via the searchkey parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/m14r41/Writeups/blob/main/CVE/phpGurukul/User%20Registration%20%26%20Login%20and%20User%20Management%20System%20With%20admin%20panel/SQL%20Injection%20-%20Search.md
CVE: CVE-2024-9977
Published: 2024-10-15
Description: A vulnerability, which was classified as critical, was found in MitraStar GPT-2541GNAC BR_g5.6_1.11(WVK.0)b26. Affected is an unknown function of the file /cgi-bin/settings-firewall.cgi of the component Firewall Settings Page. The manipulation of the argument SrcInterface leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. We tried to contact the vendor early about the disclosure but the official mail address was not working properly.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-78
References: https://github.com/peritocibernetico/VivoCodeExecutionFirewall/; https://vuldb.com/?ctiid.280344; https://vuldb.com/?id.280344
CVE: CVE-2024-9986
Published: 2024-10-15
Description: A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file member_register.php. The manipulation of the argument fullname/username/password/email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "password" to be affected. But it must be assumed that other parameters are affected as well.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://code-projects.org/; https://github.com/Lanxiy7th/lx_CVE_report-/issues/16; https://vuldb.com/?ctiid.280349
CVE: CVE-2024-48948
Published: 2024-10-15
Description: The Elliptic package 6.5.7 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at least four leading 0 bytes and when the order of the elliptic curve's base point is smaller than the hash, because of an _truncateToN anomaly. This leads to valid signatures being rejected. Legitimate transactions or communications may be incorrectly flagged as invalid.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-347
References: https://blog.trailofbits.com/2025/11/18/we-found-cryptography-bugs-in-the-elliptic-library-using-wycheproof/; https://github.com/indutny/elliptic/issues/321; https://github.com/indutny/elliptic/pull/322
CVE: CVE-2024-9979
Published: 2024-10-15
Description: A flaw was found in PyO3. This vulnerability causes a use-after-free issue, potentially leading to memory corruption or crashes via unsound borrowing from weak Python references.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416
References: https://access.redhat.com/security/cve/CVE-2024-9979; https://bugzilla.redhat.com/show_bug.cgi?id=2318646; https://crates.io/crates/pyo3
CVE: CVE-2023-31493
Published: 2024-10-15
Description: RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in language folder, while executing a crafted payload and escalate privileges allowing execution of any commands on the remote system.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-94
References: http://zoneminder.com; https://medium.com/%40dk50u1/rce-remote-code-execution-in-zoneminder-up-to-1-36-33-0686f5bcd370
CVE: CVE-2024-47080
Published: 2024-10-15
Description: matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript. In matrix-js-sdk versions versions 9.11.0 through 34.7.0, the method `MatrixClient.sendSharedHistoryKeys` is vulnerable to interception by malicious homeservers.  The method was introduced by MSC3061) and is commonly used to share historical message keys with newly invited users, granting them access to past messages in the room. However, it unconditionally sends these "shared" keys to all of the invited user's devices, regardless of whether the user's cryptographic identity is verified or whether the user's devices are signed by that identity. This allows the attacker to potentially inject its own devices to receive sensitive historical keys without proper security checks. Note that this only affects clients running the SDK with the legacy crypto stack. Clients using the new Rust cryptography stack (i.e. those that call `MatrixClient.initRustCrypto()` instead of `MatrixClient.initCrypto()`) are unaffected by this vulnerability, because `MatrixClient.sendSharedHistoryKeys()` raises an exception in such environments. The vulnerability was fixed in matrix-js-sdk 34.8.0 by removing the vulnerable functionality. As a workaround, remove use of affected functionality from clients.
CWE: CWE-200, CWE-287
References: https://github.com/matrix-org/matrix-js-sdk/commit/2fb1e659c81f75253c047832dc9dcc2beddfac5f; https://github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-4jf8-g8wp-cx7c; https://github.com/matrix-org/matrix-spec-proposals/pull/3061
CVE: CVE-2024-47771
Published: 2024-10-15
Description: Element Desktop is a Matrix client for desktop platforms. Element Desktop versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally, involving malicious widgets, but other vectors may exist. Users are strongly advised to upgrade to version 1.11.81 to remediate the issue. As a workaround, avoid granting permissions to untrusted widgets.
CWE: CWE-200
References: https://github.com/element-hq/element-desktop/commit/6c78684e84ba7f460aedba6f017760e2323fdf4b; https://github.com/element-hq/element-desktop/security/advisories/GHSA-963w-49j9-gxj6; https://github.com/element-hq/element-web/commit/63c8550791a0221189f495d6458fee7db601c789
CVE: CVE-2024-47779
Published: 2024-10-15
Description: Element is a Matrix web client built using the Matrix React SDK. Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally, involving malicious widgets, but other vectors may exist. Note that despite superficial similarity to CVE-2024-47771, this is an entirely separate vulnerability, caused by a separate piece of code included only in Element Web. Element Web and Element Desktop share most but not all, of their code and this vulnerability exists in the part of the code base which is not shared between the projects. Users are strongly advised to upgrade to version 1.11.81 to remediate the issue. As a workaround, avoid granting permissions to untrusted widgets.
CWE: CWE-200
References: https://github.com/element-hq/element-web/commit/8d7f2b5c1301129a488d3597f3839bd74203ee62; https://github.com/element-hq/element-web/security/advisories/GHSA-3jm3-x98c-r34x
CVE: CVE-2024-47824
Published: 2024-10-15
Description: matrix-react-sdk is react-based software development kit for inserting a Matrix chat/VOIP client into a web page. Starting in version 3.18.0 and before 3.102.0, matrix-react-sdk allows a malicious homeserver to potentially steal message keys for a room when a user invites another user to that room, via injection of a malicious device controlled by the homeserver. This is possible because matrix-react-sdk before 3.102.0 shared historical message keys on invite. Version 3.102.0 fixes this issue by disabling sharing message keys on invite by removing calls to the vulnerable functionality. No known workarounds are available.
CWE: CWE-200
References: https://github.com/matrix-org/matrix-react-sdk/commit/6fc9d7641c51ca3db8225cf58b9d6e6fdd2d6556; https://github.com/matrix-org/matrix-react-sdk/pull/12618; https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-qcvh-p9jq-wp8v
CVE: CVE-2024-47874
Published: 2024-10-15
Description: Starlette is an Asynchronous Server Gateway Interface (ASGI) framework/toolkit. Prior to version 0.40.0, Starlette treats `multipart/form-data` parts without a `filename` as text form fields and buffers those in byte strings with no size limit. This allows an attacker to upload arbitrary large form fields and cause Starlette to both slow down significantly due to excessive memory allocations and copy operations, and also consume more and more memory until the server starts swapping and grinds to a halt, or the OS terminates the server process with an OOM error. Uploading multiple such requests in parallel may be enough to render a service practically unusable, even if reasonable request size limits are enforced by a reverse proxy in front of Starlette. This Denial of service (DoS) vulnerability affects all applications built with Starlette (or FastAPI) accepting form requests. Verison 0.40.0 fixes this issue.
CWE: CWE-770
References: https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733; https://github.com/encode/starlette/security/advisories/GHSA-f96h-pmfr-66vw
CVE: CVE-2024-47876
Published: 2024-10-15
Description: Sakai is a Collaboration and Learning Environment. Starting in version 23.0 and prior to version 23.2, kernel users created with type roleview can log in as a normal user. This can result in illegal access being granted to the system. Version 23.3 fixes this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285, CWE-863
References: https://github.com/sakaiproject/sakai/commit/a9aadd9347cfb204515e89ac0163e1be9e56cc41; https://github.com/sakaiproject/sakai/security/advisories/GHSA-cx95-q6gx-w4qp; https://sakaiproject.atlassian.net/browse/SAK-50571
CVE: CVE-2024-48622
Published: 2024-10-15
Description: A cross-site scripting (XSS) issue in DomainMOD below v4.12.0 allows remote attackers to inject JavaScript code via admin/domain-fields/edit.php and the cdfid parameter.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-79
References: https://github.com/domainmod/domainmod/issues/174
CVE: CVE-2024-48623
Published: 2024-10-15
Description: In queue\index.php of DomainMOD below v4.12.0, the list_id and domain_id parameters in the GET request can be exploited to cause a reflected Cross Site Scripting (XSS).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-79
References: https://github.com/domainmod/domainmod/issues/176
CVE: CVE-2024-48624
Published: 2024-10-15
Description: In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting (XSS) vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-79
References: https://github.com/domainmod/domainmod/issues/175
CVE: CVE-2024-48913
Published: 2024-10-15
Description: Hono, a web framework, prior to version 4.6.5 is vulnerable to bypass of cross-site request forgery (CSRF) middleware by a request without Content-Type header. Although the CSRF middleware verifies the Content-Type Header, Hono always considers a request without a Content-Type header to be safe. This can allow an attacker to bypass CSRF protection implemented with Hono CSRF middleware. Version 4.6.5 fixes this issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-352
References: https://github.com/honojs/hono/blob/cebf4e87f3984a6a034e60a43f542b4c5225b668/src/middleware/csrf/index.ts#L76-L89; https://github.com/honojs/hono/commit/aa50e0ab77b5af8c53c50fe3b271892f8eeeea82; https://github.com/honojs/hono/security/advisories/GHSA-2234-fmw7-43wr
CVE: CVE-2024-48914
Published: 2024-10-15
Description: Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data such as configuration files, environment variables, and other critical data stored on the server. In the same code path is an additional vector for crashing the server via a malformed URI. Patches are available in versions 3.0.5 and 2.3.3. Some workarounds are also available. One may use object storage rather than the local file system, e.g. MinIO or S3, or define middleware which detects and blocks requests with urls containing `/../`.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20, CWE-22
References: https://github.com/vendure-ecommerce/vendure/blob/801980e8f599c28c5059657a9d85dd03e3827992/packages/asset-server-plugin/src/plugin.ts#L352-L358; https://github.com/vendure-ecommerce/vendure/commit/e2ee0c43159b3d13b51b[PII_REDACTED]4fdd4850c5; https://github.com/vendure-ecommerce/vendure/commit/e4b58af6822d38a9c92a1d8573e19288b8edaa1c
CVE: CVE-2024-9506
Published: 2024-10-15
Description: Improper regular expression in Vue's parseHTML function leads to a potential regular expression denial of service vulnerability.
CVSS Score: 3.7 (LOW)
CWE: CWE-1333
References: https://www.herodevs.com/vulnerability-directory/cve-2024-9506
CVE: CVE-2024-9676
Published: 2024-10-15
Description: A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (`--userns=auto` in Podman and Buildah). The containers/storage library will read /etc/passwd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://access.redhat.com/errata/RHSA-2024:10289; https://access.redhat.com/errata/RHSA-2024:8418; https://access.redhat.com/errata/RHSA-2024:8428