deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-52533
Published: 2024-11-11
Description: gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://gitlab.gnome.org/GNOME/glib/-/issues/3461; https://gitlab.gnome.org/GNOME/glib/-/releases/2.82.1; https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home
CVE: CVE-2024-11079
Published: 2024-11-12
Description: A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://access.redhat.com/errata/RHSA-2024:10770; https://access.redhat.com/errata/RHSA-2024:11145; https://access.redhat.com/security/cve/CVE-2024-11079
CVE: CVE-2024-11096
Published: 2024-11-12
Description: A vulnerability, which was classified as critical, was found in code-projects Task Manager 1.0. This affects an unknown part of the file /newProject.php. The manipulation of the argument projectName leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/UnrealdDei/cve/blob/main/sql4.md; https://vuldb.com/?ctiid.283917
CVE: CVE-2024-42372
Published: 2024-11-12
Description: Due to missing authorization check in SAP NetWeaver AS Java (System Landscape Directory) an unauthorized user can read and modify some restricted global SLD configurations causing low impact on confidentiality and integrity of the application.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3335394; https://url.sap/sapsecuritypatchday
CVE: CVE-2024-47586
Published: 2024-11-12
Description: SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated attacker to send a maliciously crafted http request which could cause a null pointer dereference in the kernel. This dereference will result in the system crashing and rebooting, causing the system to be temporarily unavailable. There is no impact on Confidentiality or Integrity.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476
References: https://me.sap.com/notes/3504390; https://url.sap/sapsecuritypatchday
CVE: CVE-2024-47587
Published: 2024-11-12
Description: Cash Operations does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges causing low impact to confidentiality to the application.
CVSS Score: 3.5 (LOW)
CWE: CWE-862
References: https://me.sap.com/notes/3498470; https://url.sap/sapsecuritypatchday
CVE: CVE-2024-47588
Published: 2024-11-12
Description: In SAP NetWeaver Java (Software Update Manager 1.1), under certain conditions when a software upgrade encounters errors, credentials are written in plaintext to a log file. An attacker with local access to the server, authenticated as a non-administrative user, can acquire the credentials from the logs. This leads to a high impact on confidentiality, with no impact on integrity or availability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-522
References: https://me.sap.com/notes/3522953; https://url.sap/sapsecuritypatchday
CVE: CVE-2024-47590
Published: 2024-11-12
Description: An unauthenticated attacker can create a malicious link which they can make publicly available. When an authenticated victim clicks on this malicious link, input data will be used by the web site page generation to create content which when executed in the victim's browser (XXS) or transmitted to another server (SSRF) gives the attacker the ability to execute arbitrary code on the server fully compromising confidentiality, integrity and availability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-791
References: https://me.sap.com/notes/3520281; https://url.sap/sapsecuritypatchday
CVE: CVE-2024-47592
Published: 2024-11-12
Description: SAP NetWeaver AS Java allows an unauthenticated attacker to brute force the login functionality in order to identify the legitimate user IDs. This has an impact on confidentiality but not on integrity or availability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-307
References: https://me.sap.com/notes/3393899; https://url.sap/sapsecuritypatchday
CVE: CVE-2024-47593
Published: 2024-11-12
Description: SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the server, which otherwise would be restricted.This attack is possible only if a Web Dispatcher or some sort of Proxy Server is in use and the file in question was previously opened or downloaded in an application based on SAP GUI for HTML Technology. This will not compromise the application's integrity or availability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-276
References: https://me.sap.com/notes/3508947; https://url.sap/sapsecuritypatchday
CVE: CVE-2024-47595
Published: 2024-11-12
Description: An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access. On successful exploitation the attacker could cause high impact on confidentiality and integrity of the application.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266
References: https://me.sap.com/notes/3509619; https://url.sap/sapsecuritypatchday
CVE: CVE-2024-11097
Published: 2024-11-12
Description: A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Main Menu. The manipulation leads to infinite loop. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.3 (LOW)
CWE: CWE-404, CWE-835, CWE-835
References: https://github.com/Hacker0xone/CVE/issues/5; https://vuldb.com/?ctiid.283918; https://vuldb.com/?id.283918
CVE: CVE-2024-11099
Published: 2024-11-12
Description: A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/Kenton868/CVE/blob/main/sqlInjection1.md; https://vuldb.com/?ctiid.283919
CVE: CVE-2024-49393
Published: 2024-11-12
Description: In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-347
References: https://access.redhat.com/security/cve/CVE-2024-49393; https://bugzilla.redhat.com/show_bug.cgi?id=2325317
CVE: CVE-2024-8881
Published: 2024-11-12
Description: A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to execute some operating system (OS) commands on an affected device by sending a crafted HTTP request.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-and-buffer-overflow-vulnerabilities-in-gs1900-series-switches-11-12-2024
CVE: CVE-2024-8882
Published: 2024-11-12
Description: A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to cause denial of service (DoS) conditions via a crafted URL.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-120
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-and-buffer-overflow-vulnerabilities-in-gs1900-series-switches-11-12-2024
CVE: CVE-2024-49394
Published: 2024-11-12
Description: In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-347
References: https://access.redhat.com/security/cve/CVE-2024-49394; https://bugzilla.redhat.com/show_bug.cgi?id=2325330
CVE: CVE-2024-49395
Published: 2024-11-12
Description: In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field by inferring from the recipients info.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1230
References: https://access.redhat.com/security/cve/CVE-2024-49395; https://bugzilla.redhat.com/show_bug.cgi?id=2325332
CVE: CVE-2024-10538
Published: 2024-11-12
Description: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the before_label parameter in the Image Comparison widget in all versions up to, and including, 3.12.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3182100%40happy-elementor-addons&new=3182100%40happy-elementor-addons&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/fd192a52-ae12-4706-b3ea-aa69f7393bb8?source=cve
CVE: CVE-2024-10672
Published: 2024-11-12
Description: The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the mpg_upsert_project_source_block() function in all versions up to, and including, 4.0.2. This makes it possible for authenticated attackers, with editor-level access and above, to delete limited files on the server.
CVSS Score: 2.7 (LOW)
CWE: CWE-73, CWE-22
References: https://plugins.trac.wordpress.org/browser/multiple-pages-generator-by-porthas/tags/3.4.8/controllers/ProjectController.php#L139; https://plugins.trac.wordpress.org/browser/multiple-pages-generator-by-porthas/tags/3.4.8/controllers/ProjectController.php#L147; https://plugins.trac.wordpress.org/changeset/3183330/multiple-pages-generator-by-porthas/tags/4.0.3/controllers/ProjectController.php
CVE: CVE-2024-10685
Published: 2024-11-12
Description: The Contact Form 7 Redirect & Thank You Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3184638%40cf7-redirect-thank-you-page&new=3184638%40cf7-redirect-thank-you-page&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/f52285e0-e78d-4231-8ff9-53fbe568fcc2?source=cve
CVE: CVE-2024-10695
Published: 2024-11-12
Description: The Futurio Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.0.13 via the 'elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts that they should not have access to.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3184380%40futurio-extra&new=3184380%40futurio-extra&sfp_email=&sfph_mail=#file3; https://www.wordfence.com/threat-intel/vulnerabilities/id/53[PII_REDACTED]-459f-97e1-5cf524160f09?source=cve
CVE: CVE-2024-11100
Published: 2024-11-12
Description: A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://1000projects.org/; https://github.com/Hacker0xone/CVE/issues/6; https://vuldb.com/?ctiid.283921
CVE: CVE-2024-11101
Published: 2024-11-12
Description: A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/search-invoices.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://1000projects.org/; https://github.com/Hacker0xone/CVE/issues/7; https://vuldb.com/?ctiid.283920
CVE: CVE-2024-11102
Published: 2024-11-12
Description: A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /vm/doctor/edit-doc.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://drive.google.com/file/d/1Omjwoh6B2xh41c3Av0_VJsoR7tascb1_/view?usp=sharing; https://github.com/Salah-Tayeh/CVEs-and-Vulnerabilities/blob/main/Hospital%20Management%20System%20-%20Stored%20XSS.md; https://vuldb.com/?ctiid.283922
CVE: CVE-2024-48837
Published: 2024-11-12
Description: Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution
CVSS Score: 7.8 (HIGH)
CWE: CWE-250
References: https://www.dell.com/support/kbdoc/en-us/000247217/dsa-2024-425-security-update-for-dell-networking-os10-vulnerabilities
CVE: CVE-2024-48838
Published: 2024-11-12
Description: Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a Files or Directories Accessible to External Parties vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.
CVSS Score: 3.3 (LOW)
CWE: CWE-552
References: https://www.dell.com/support/kbdoc/en-us/000247217/dsa-2024-425-security-update-for-dell-networking-os10-vulnerabilities
CVE: CVE-2024-49557
Published: 2024-11-12
Description: Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://www.dell.com/support/kbdoc/en-us/000247217/dsa-2024-425-security-update-for-dell-networking-os10-vulnerabilities
CVE: CVE-2024-49558
Published: 2024-11-12
Description: Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://www.dell.com/support/kbdoc/en-us/000247217/dsa-2024-425-security-update-for-dell-networking-os10-vulnerabilities
CVE: CVE-2024-49560
Published: 2024-11-12
Description: Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://www.dell.com/support/kbdoc/en-us/000247217/dsa-2024-425-security-update-for-dell-networking-os10-vulnerabilities
CVE: CVE-2024-10790
Published: 2024-11-12
Description: The Admin and Site Enhancements (ASE) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 7.5.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with custom-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. This feature must be enabled, and for specific roles in order to be exploitable.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3180884%40admin-site-enhancements%2Ftags%2F7.5.1&new=3185287%40admin-site-enhancements%2Ftags%2F7.5.2; https://wordpress.org/plugins/admin-site-enhancements/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/96e12fa5-eba4-4f69-ae3a-7e460bfa9e5d?source=cve
CVE: CVE-2024-29075
Published: 2024-11-12
Description: Active debug code vulnerability exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-adjacent authenticated attacker may obtain or alter the settings of the device .
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-489
References: https://jvn.jp/en/vu/JVNVU90676195/
CVE: CVE-2024-45827
Published: 2024-11-12
Description: Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-adjacent authenticated attacker may execute an arbitrary OS command.
CVSS Score: 8.0 (HIGH)
CWE: CWE-78
References: https://jvn.jp/en/vu/JVNVU90676195/
CVE: CVE-2024-47799
Published: 2024-11-12
Description: Exposure of sensitive system information to an unauthorized control sphere issue exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-adjacent authenticated attacker may obtain information of the other devices connected through the Wi-Fi.
CVSS Score: 3.5 (LOW)
CWE: CWE-497
References: https://jvn.jp/en/vu/JVNVU90676195/
CVE: CVE-2024-9357
Published: 2024-11-12
Description: The xili-tidy-tags plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'action' parameter in all versions up to, and including, 1.12.04 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/xili-tidy-tags/tags/1.12.04/xili-includes/class-xili-tidy-tags-admin.php#L156; https://plugins.trac.wordpress.org/changeset?old_path=/xili-tidy-tags/tags/1.12.04&new_path=/xili-tidy-tags/tags/1.12.05&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/28fd9f64-4451-46fd-bdeb-cc5a538ea563?source=cve
CVE: CVE-2024-9835
Published: 2024-11-12
Description: The RSS Feed Widget WordPress plugin before 3.0.1 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/0277b060-805d-4b85-b5a4-fa93a731cd8d/
CVE: CVE-2024-9836
Published: 2024-11-12
Description: The RSS Feed Widget WordPress plugin before 3.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f87af54e-3e58-4c29-8a30-e7d52234c9d4/
CVE: CVE-2024-10179
Published: 2024-11-12
Description: The Slickstream: Engagement and Conversions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's slick-grid shortcode in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3184136/; https://wordpress.org/plugins/slick-engagement/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/28216197-20b4-4d12-a610-661dca6fbbf2?source=cve
CVE: CVE-2024-10323
Published: 2024-11-12
Description: The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.0.18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3184475/; https://wordpress.org/plugins/jetwidgets-for-elementor/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/e4b4e4ba-ab66-496a-b77f-8dd77cd16ea8?source=cve
CVE: CVE-2024-10245
Published: 2024-11-12
Description: The Relais 2FA plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0. This is due to incorrect authentication and capability checking in the 'rl_do_ajax' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://plugins.trac.wordpress.org/browser/relais-2fa/trunk/relais.php?rev=2439540#L39; https://www.wordfence.com/threat-intel/vulnerabilities/id/4d476336-e997-4379-a8f6-963ae22b2417?source=cve
CVE: CVE-2024-9998
Published: 2024-11-12
Description: Rejected reason: The vulnerability has no impact, so it has been deprecated.