deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-3348
Published: 2024-04-05
Description: A vulnerability classified as critical has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected is an unknown function of the file booking/index.php. The manipulation of the argument log_email/log_pword leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259452.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/qqqyc/vlun1/blob/main/Aplaya-Beach-Resort-Online-Reservation-System-01; https://vuldb.com/?ctiid.259452; https://vuldb.com/?id.259452
CVE: CVE-2024-3349
Published: 2024-04-05
Description: A vulnerability classified as critical was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/login.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259453 was assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/qqqyc/vlun1/blob/main/Aplaya-Beach-Resort-Online-Reservation-System-02; https://vuldb.com/?ctiid.259453; https://vuldb.com/?id.259453
CVE: CVE-2023-31028
Published: 2024-04-05
Description: 
NVIDIA nvJPEG2000 Library for Windows and Linux contains a vulnerability where improper input validation might enable an attacker to use a specially crafted input file. A successful exploit of this vulnerability might lead to a partial denial of service.


CVSS Score: 2.8 (LOW)
CWE: CWE-20
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5517; https://nvidia.custhelp.com/app/answers/detail/a_id/5517
CVE: CVE-2024-0072
Published: 2024-04-05
Description: 
NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a user into reading a malformed ELF file. A successful exploit of this vulnerability may lead to a partial denial of service.


CVSS Score: 3.3 (LOW)
CWE: CWE-476
References: https://https://nvidia.custhelp.com/app/answers/detail/a_id/5517; https://https://nvidia.custhelp.com/app/answers/detail/a_id/5517
CVE: CVE-2024-0076
Published: 2024-04-05
Description: 
NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a user into reading a malformed ELF file. A successful exploit of this vulnerability may lead to a partial denial of service.


CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5517; https://nvidia.custhelp.com/app/answers/detail/a_id/5517
CVE: CVE-2024-0080
Published: 2024-04-05
Description: 
NVIDIA nvTIFF Library for Windows and Linux contains a vulnerability where improper input validation might enable an attacker to use a specially crafted input file. A successful exploit of this vulnerability might lead to a partial denial of service.


CVSS Score: 2.8 (LOW)
CWE: CWE-20
References: https://https://nvidia.custhelp.com/app/answers/detail/a_id/5517; https://https://nvidia.custhelp.com/app/answers/detail/a_id/5517
CVE: CVE-2024-22004
Published: 2024-04-05
Description: Due to length check, an attacker with privilege access on a Linux Nonsecure operating system can trigger a vulnerability and leak the secure memory from the Trusted Application

CVSS Score: 10.0 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://support.google.com/product-documentation/answer/14580222?hl=en&ref_topic=12974021&sjid=[PII_REDACTED]462550096-NA; https://support.google.com/product-documentation/answer/14580222?hl=en&ref_topic=12974021&sjid=[PII_REDACTED]462550096-NA
CVE: CVE-2024-28065
Published: 2024-04-05
Description: In Unify CP IP Phone firmware 1.10.4.3, files are not encrypted and contain sensitive information such as the root password hash.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-312
References: https://syss.de; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-007.txt; https://syss.de
CVE: CVE-2024-31848
Published: 2024-04-05
Description: A path traversal vulnerability exists in the Java version of CData API Server < 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://www.tenable.com/security/research/tra-2024-09; https://www.tenable.com/security/research/tra-2024-09
CVE: CVE-2024-31849
Published: 2024-04-05
Description: A path traversal vulnerability exists in the Java version of CData Connect < 23.4.8846 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://www.tenable.com/security/research/tra-2024-09; https://www.tenable.com/security/research/tra-2024-09
CVE: CVE-2024-31850
Published: 2024-04-05
Description: A path traversal vulnerability exists in the Java version of CData Arc < 23.4.8839 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions.
CVSS Score: 8.6 (HIGH)
CWE: CWE-22
References: https://www.tenable.com/security/research/tra-2024-09; https://www.tenable.com/security/research/tra-2024-09
CVE: CVE-2024-31851
Published: 2024-04-05
Description: A path traversal vulnerability exists in the Java version of CData Sync < 23.4.8843 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions.
CVSS Score: 8.6 (HIGH)
CWE: CWE-22
References: https://www.tenable.com/security/research/tra-2024-09; https://www.tenable.com/security/research/tra-2024-09
CVE: CVE-2024-3350
Published: 2024-04-05
Description: A vulnerability, which was classified as critical, has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected by this issue is some unknown functionality of the file admin/mod_room/index.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-259454 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/qqqyc/vlun1/blob/main/Aplaya-Beach-Resort-Online-Reservation-System-03; https://vuldb.com/?ctiid.259454; https://vuldb.com/?id.259454
CVE: CVE-2024-3351
Published: 2024-04-05
Description: A vulnerability, which was classified as critical, was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. This affects an unknown part of the file admin/mod_roomtype/index.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259455.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/qqqyc/vlun1/blob/main/Aplaya-Beach-Resort-Online-Reservation-System-04; https://vuldb.com/?ctiid.259455; https://vuldb.com/?id.259455
CVE: CVE-2024-0081
Published: 2024-04-05
Description: 
NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerability may lead to a server-side denial of service.


CVSS Score: 8.6 (HIGH)
CWE: CWE-770
References: https://github.com/NVIDIA/NeMo/security/advisories/GHSA-x392-p65g-4rxx; https://github.com/NVIDIA/NeMo/security/advisories/GHSA-x392-p65g-4rxx
CVE: CVE-2024-3352
Published: 2024-04-05
Description: A vulnerability has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/mod_comments/index.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259456.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/qqqyc/vlun1/blob/main/Aplaya-Beach-Resort-Online-Reservation-System-05; https://vuldb.com/?ctiid.259456; https://vuldb.com/?id.259456
CVE: CVE-2024-27231
Published: 2024-04-05
Description: In tmu_get_tr_stats of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-27232
Published: 2024-04-05
Description: In asn1_ec_pkey_parse of asn1_common.c, there is a possible OOB read due to a missing null check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-922
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29738
Published: 2024-04-05
Description: In gov_init, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29739
Published: 2024-04-05
Description: In tmu_get_temp_lut of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29740
Published: 2024-04-05
Description: In tmu_set_table of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.4 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29741
Published: 2024-04-05
Description: In pblS2mpuResume of s2mpu.c, there is a possible mitigation bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29742
Published: 2024-04-05
Description: In apply_minlock_constraint of dvfs.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29743
Published: 2024-04-05
Description: In tmu_set_temp_lut of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.7 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29744
Published: 2024-04-05
Description: In tmu_get_gov_time_windows, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29745
Published: 2024-04-05
Description: there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908, CWE-908
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01; https://twitter.com/GrapheneOS/status/[PII_REDACTED]22995226
CVE: CVE-2024-29746
Published: 2024-04-05
Description: In lpm_req_handler of lpm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29747
Published: 2024-04-05
Description: In _dvfs_get_lv of dvfs.c, there is a possible out of bounds read due to a missing null check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29748
Published: 2024-04-05
Description: there is a possible way to bypass  due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-755, CWE-280
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01; https://twitter.com/GrapheneOS/status/[PII_REDACTED]72813609
CVE: CVE-2024-29749
Published: 2024-04-05
Description: In tmu_set_tr_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29750
Published: 2024-04-05
Description: In km_exp_did_inner of kmv.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29751
Published: 2024-04-05
Description: In asn1_ec_pkey_parse_p384 of asn1_common.c, there is a possible OOB Read due to a missing null check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29752
Published: 2024-04-05
Description: In tmu_set_tr_num_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29753
Published: 2024-04-05
Description: In tmu_set_control_temp_step of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.7 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29754
Published: 2024-04-05
Description: In TMU_IPC_GET_TABLE, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29755
Published: 2024-04-05
Description: In tmu_get_pi of tmu.c, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29756
Published: 2024-04-05
Description: In afe_callback of q6afe.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29757
Published: 2024-04-05
Description: there is a possible permission bypass due to Debug certs being allowlisted. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.3 (HIGH)
CWE: CWE-287
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29782
Published: 2024-04-05
Description: In tmu_get_tr_num_thresholds of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-29783
Published: 2024-04-05
Description: In tmu_get_tr_thresholds, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-04-01; https://source.android.com/security/bulletin/pixel/2024-04-01
CVE: CVE-2024-2312
Published: 2024-04-05
Description: GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416
References: https://bugs.launchpad.net/ubuntu/+source/grub2-unsigned/+bug/2054127; https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2312; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-3353
Published: 2024-04-05
Description: A vulnerability was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/mod_reports/index.php. The manipulation of the argument categ/end leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259457 was assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/qqqyc/vlun1/blob/main/Aplaya-Beach-Resort-Online-Reservation-System-06; https://vuldb.com/?ctiid.259457; https://vuldb.com/?id.259457
CVE: CVE-2024-3354
Published: 2024-04-05
Description: A vulnerability was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. It has been classified as critical. Affected is an unknown function of the file admin/mod_users/index.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-259458 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/qqqyc/vlun1/blob/main/Aplaya-Beach-Resort-Online-Reservation-System-07; https://vuldb.com/?ctiid.259458; https://vuldb.com/?id.259458
CVE: CVE-2023-25493
Published: 2024-04-05
Description: A potential vulnerability was reported in the BIOS update tool driver for some Desktop, Smart Edge, Smart Office, and ThinkStation products that could allow a local user with elevated privileges to execute arbitrary code.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-306
References: https://support.lenovo.com/us/en/product_security/LEN-141775; https://support.lenovo.com/us/en/product_security/LEN-141775
CVE: CVE-2023-25494
Published: 2024-04-05
Description: 
A potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and ThinkStation products that could allow a local attacker with elevated privileges to write to NVRAM variables. 


CVSS Score: 6.7 (MEDIUM)
CWE: CWE-125
References: https://support.lenovo.com/us/en/product_security/LEN-141775; https://support.lenovo.com/us/en/product_security/LEN-141775
CVE: CVE-2023-4605
Published: 2024-04-05
Description: 
A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an unauthenticated API endpoint to retrieve system event information.


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-497
References: https://support.lenovo.com/us/en/product_security/LEN-136592; https://support.lenovo.com/us/en/product_security/LEN-136592
CVE: CVE-2023-5912
Published: 2024-04-05
Description: 
A potential memory leakage vulnerability was reported in some Lenovo Notebook products that may allow a local attacker with elevated privileges to write to NVRAM variables. 


CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://support.lenovo.com/us/en/product_security/LEN-155477; https://support.lenovo.com/us/en/product_security/LEN-155477
CVE: CVE-2024-23592
Published: 2024-04-05
Description: An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-358
References: https://support.lenovo.com/us/en/product_security/LEN-155804; https://support.lenovo.com/us/en/product_security/LEN-155804
CVE: CVE-2024-27908
Published: 2024-04-05
Description: A buffer overflow vulnerability was reported in the HTTPS service of some Lenovo Printers that could result in denial of service.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-120
References: https://iknow.lenovo.com.cn/detail/420425; https://iknow.lenovo.com.cn/detail/420425