deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-48953
Published: 2024-11-07
Description: An issue was discovered in Logpoint before 7.5.0. Endpoints for creating, editing, or deleting third-party authentication modules lacked proper authorization checks. This allowed unauthenticated users to register their own authentication plugins in Logpoint, resulting in unauthorized access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://docs.logpoint.com/docs/whats-new-in-logpoint/en/latest/; https://servicedesk.logpoint.com/hc/en-us/articles/[PII_REDACTED]8221-Authentication-Bypass-using-URL-endpoints-in-the-Authentication-Modules; https://servicedesk.logpoint.com/hc/en-us/sections/[PII_REDACTED]845-Product-Security
CVE: CVE-2024-48954
Published: 2024-11-07
Description: An issue was discovered in Logpoint before 7.5.0. Unvalidated input during the EventHub Collector setup by an authenticated user leads to Remote Code execution.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-78
References: https://docs.logpoint.com/docs/whats-new-in-logpoint/en/latest/; https://servicedesk.logpoint.com/hc/en-us/articles/[PII_REDACTED]8461-Remote-Code-Execution-RCE-in-EventHub-Collector; https://servicedesk.logpoint.com/hc/en-us/sections/[PII_REDACTED]845-Product-Security
CVE: CVE-2019-20457
Published: 2024-11-07
Description: An issue was discovered on Brother MFC-J491DW C[PII_REDACTED] devices. The printer's web-interface password hash can be retrieved without authentication, because the response header of any failed login attempt returns an incomplete authorization cookie. The value of the authorization cookie is the MD5 hash of the password in hexadecimal. An attacker can easily derive the true MD5 hash from this, and use offline cracking attacks to obtain administrative access to the device.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-276
References: https://global.brother; https://seclists.org/fulldisclosure/2024/Jul/14; https://support.brother.com/g/s/security/en/index.html
CVE: CVE-2019-20458
Published: 2024-11-07
Description: An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. By default, the device comes (and functions) without a password. The user is at no point prompted to set up a password on the device (leaving a number of devices without a password). In this case, anyone connecting to the web admin panel is capable of becoming admin without using any credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://epson.com/Support/wa00826; https://seclists.org/fulldisclosure/2024/Jul/14; http://seclists.org/fulldisclosure/2024/Jul/14
CVE: CVE-2019-20459
Published: 2024-11-07
Description: An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. With the SNMPv1 public community, all values can be read, and with the epson community, all the changeable values can be written/updated, as demonstrated by permanently disabling the network card or changing the DNS servers.
CVSS Score: 8.4 (HIGH)
References: https://epson.com/Support/wa00826; https://seclists.org/fulldisclosure/2024/Jul/14; http://seclists.org/fulldisclosure/2024/Jul/14
CVE: CVE-2020-11916
Published: 2024-11-07
Description: An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user is hashed using an old and deprecated hashing technique. Because of this deprecated hashing, the success probability of an attacker in an offline cracking attack is greatly increased.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-327
References: https://seclists.org/fulldisclosure/2024/Jul/14; http://seclists.org/fulldisclosure/2024/Jul/14
CVE: CVE-2020-11917
Published: 2024-11-07
Description: An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. It uses a default SSID value, which makes it easier for remote attackers to discover the physical locations of many Siime Eye devices, violating the privacy of users who do not wish to disclose their ownership of this type of device. (Various resources such as wigle.net can be use for mapping of SSIDs to physical locations.)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1188
References: https://seclists.org/fulldisclosure/2024/Jul/14; http://seclists.org/fulldisclosure/2024/Jul/14
CVE: CVE-2020-11918
Published: 2024-11-07
Description: An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. When a backup file is created through the web interface, information on all users, including passwords, can be found in cleartext in the backup file. An attacker capable of accessing the web interface can create the backup file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-312
References: https://seclists.org/fulldisclosure/2024/Jul/14; http://seclists.org/fulldisclosure/2024/Jul/14
CVE: CVE-2020-11919
Published: 2024-11-07
Description: An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. There is no CSRF protection.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: https://seclists.org/fulldisclosure/2024/Jul/14; http://seclists.org/fulldisclosure/2024/Jul/14
CVE: CVE-2020-11921
Published: 2024-11-07
Description: An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic encryption, it is possible to hijack an ongoing Bluetooth connection between the Lush 2 and a mobile phone. This allows an attacker to gain full control over the device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://seclists.org/fulldisclosure/2024/Jul/14; http://seclists.org/fulldisclosure/2024/Jul/14
CVE: CVE-2020-11926
Published: 2024-11-07
Description: An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Clients can authenticate themselves to the device using a username and password. These credentials can be obtained through an unauthenticated web request, e.g., for a JavaScript file. Also, the disclosed information includes the SSID and WPA2 key for the Wi-Fi network the device is connected to.
CVSS Score: 7.5 (HIGH)
CWE: CWE-79
References: https://seclists.org/fulldisclosure/2024/Jul/14; http://seclists.org/fulldisclosure/2024/Jul/14
CVE: CVE-2024-10966
Published: 2024-11-07
Description: A vulnerability, which was classified as critical, has been found in TOTOLINK X18 9.1.0cu.2024_B20220329. Affected by this issue is some unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument enable leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77, CWE-78
References: https://github.com/Dreamy-elfland/240914; https://vuldb.com/?ctiid.283412; https://vuldb.com/?id.283412
CVE: CVE-2024-10967
Published: 2024-11-07
Description: A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an unknown function of the file /Doctor/delete_user_appointment_request.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/[PII_REDACTED]/cve/blob/main/sql.md; https://vuldb.com/?ctiid.283416
CVE: CVE-2024-45794
Published: 2024-11-07
Description: devtron is an open source tool integration platform for Kubernetes. In affected versions an authenticated user (with minimum permission) could utilize and exploit SQL Injection to allow the execution of malicious SQL queries via CreateUser API (/orchestrator/user). This issue has been addressed in version 0.7.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.3 (HIGH)
CWE: CWE-89
References: https://github.com/devtron-labs/devtron/security/advisories/GHSA-q78v-cv36-8fxj
CVE: CVE-2024-47073
Published: 2024-11-07
Description: DataEase is an open source data visualization analysis tool that helps users quickly analyze data and gain insights into business trends. In affected versions a the lack of signature verification of jwt tokens allows attackers to forge jwts which then allow access to any interface. The vulnerability has been fixed in v2.10.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-347
References: https://github.com/dataease/dataease/security/advisories/GHSA-5jr4-wrm2-xj36
CVE: CVE-2024-48290
Published: 2024-11-07
Description: An issue in the Bluetooth Low Energy implementation of Realtek RTL8762E BLE SDK v1.4.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted ll_terminate_ind packet.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1284
References: http://realtek.com; https://gitee.com/guozhi123456/vulnerability-Report/blob/master/Realtek/Realtek.md
CVE: CVE-2024-51428
Published: 2024-11-07
Description: An issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service (DoS) via a crafted data channel packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://gitee.com/guozhi123456/vulnerability-Report/blob/master/Esp/Accept_Invaild_Address.md; https://github.com/espressif/esp-idf
CVE: CVE-2024-51758
Published: 2024-11-07
Description: Filament is a collection of full-stack components for accelerated Laravel development. All Filament features that interact with storage use the `default_filesystem_disk` config option. This allows the user to easily swap their storage driver to something production-ready like `s3` when deploying their app, without having to touch multiple configuration options and potentially forgetting about some. The default disk is set to `public` when you first install Filament, since this allows users to quickly get started developing with a functional disk that allows features such as file upload previews locally without the need to set up an S3 disk with temporary URL support. However, some features of Filament such as exports also rely on storage, and the files that are stored contain data that should often not be public. This is not an issue for the many deployed applications, since many use a secure default disk such as S3 in production. However, [CWE-1188](https://cwe.mitre.org/data/definitions/1188.html) suggests that having the `public` disk as the default disk in Filament is a security vulnerability itself. As such, we have implemented a measure to protect users whereby if the `public` disk is set as the default disk, the exports feature will automatically swap it out for the `local` disk, if that exists. Users who set the default disk to `local` or `s3` already are not affected. If a user wants to continue to use the `public` disk for exports, they can by setting the export disk deliberately. This change has been included in the 3.2.123 release and all users who use the `public` disk are advised to upgrade.
CWE: CWE-1188
References: https://filamentphp.com/docs/3.x/actions/prebuilt-actions/export#customizing-the-storage-disk; https://github.com/filamentphp/filament/security/advisories/GHSA-4hxw-gc2q-f6f3
CVE: CVE-2024-51989
Published: 2024-11-07
Description: Password Pusher is an open source application to communicate sensitive information over the web. A cross-site scripting (XSS) vulnerability was identified in the PasswordPusher application, affecting versions `v1.41.1` through and including `v.1.48.0`. The issue arises from an un-sanitized parameter which could allow attackers to inject malicious JavaScript into the application. Users who self-host and have the login system enabled are affected.  Exploitation of this vulnerability could expose user data, access to user sessions or take unintended actions on behalf of users. To exploit this vulnerability, an attacker would need to convince a user to click a malicious account confirmation link. It is highly recommended to update to version `v1.48.1` or later to mitigate this risk. There are no known workarounds for this vulnerability.

### Solution

Update to version `v1.48.1` or later where input sanitization has been applied to the account confirmation process.  If updating is not immediately possible,
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://github.com/pglombardo/PasswordPusher/security/advisories/GHSA-5chg-cq29-gfqf
CVE: CVE-2024-51993
Published: 2024-11-07
Description: Combodo iTop is a web based IT Service Management tool. An attacker accessing a backup file or the database can read some passwords for misconfigured Users. This issue has been addressed in version 3.2.0 and all users are advised to upgrade. Users unable to upgrade are advised to encrypt their backups independently of the iTop application.

### Patches
Sanitize parameter

### References
N°7631 - Password is stored in clear in the database.
CVSS Score: 3.4 (LOW)
CWE: CWE-312
References: https://github.com/Combodo/iTop/security/advisories/GHSA-9mq5-349x-x427
CVE: CVE-2024-51994
Published: 2024-11-07
Description: Combodo iTop is a web based IT Service Management tool. In affected versions uploading a text file containing some java script in the portal will trigger an Cross-site Scripting (XSS) vulnerability. This issue has been addressed in version 3.2.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Combodo/iTop/security/advisories/GHSA-jjph-c25g-5c7g
CVE: CVE-2024-51995
Published: 2024-11-07
Description: Combodo iTop is a web based IT Service Management tool. An attacker can request any `route` we want as long as we specify an `operation` that is allowed. This issue has been addressed in version 3.2.0 by applying the same access control pattern as in `UI.php` to the `ajax.render.php` page which does not allow arbitrary `routes` to be dispatched. All users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-284
References: https://github.com/Combodo/iTop/security/advisories/GHSA-3mxr-8r3j-j2j9
CVE: CVE-2024-10968
Published: 2024-11-07
Description: A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /contact_process.php. The manipulation of the argument fnm leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/NG0324/CVE/issues/1; https://vuldb.com/?ctiid.283417; https://vuldb.com/?id.283417
CVE: CVE-2024-10969
Published: 2024-11-07
Description: A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login_process.php of the component Login. The manipulation of the argument unm/pwd leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://1000projects.org/; https://github.com/ppp-src/CVE/issues/31; https://vuldb.com/?ctiid.283418
CVE: CVE-2019-20460
Published: 2024-11-07
Description: An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests don't require (anti-)CSRF tokens or other mechanisms for validating that the request is from a legitimate source. In addition, CSRF attacks can be used to send text directly to the RAW printer interface. For example, an attack could deliver a worrisome printout to an end user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://epson.com/Support/wa00826; https://seclists.org/fulldisclosure/2024/Jul/14; http://seclists.org/fulldisclosure/2024/Jul/14
CVE: CVE-2019-20461
Published: 2024-11-07
Description: An issue was discovered on Alecto IVM-100 2019-11-12 devices. The device uses a custom UDP protocol to start and control video and audio services. The protocol has been partially reverse engineered. Based upon the reverse engineering, no password or username is ever transferred over this protocol. Thus, one can set up the camera connection feed with only the encoded UID. It is possible to set up sessions with the camera over the Internet by using the encoded UID and the custom UDP protocol, because authentication happens at the client side.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-295
References: https://seclists.org/fulldisclosure/2024/Jul/14; https://www.alecto.nl; http://seclists.org/fulldisclosure/2024/Jul/14
CVE: CVE-2019-20462
Published: 2024-11-07
Description: An issue was discovered on Alecto IVM-100 2019-11-12 devices. The device comes with a serial interface at the board level. By attaching to this serial interface and rebooting the device, a large amount of information is disclosed. This includes the view password and the password of the Wi-Fi access point that the device used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://seclists.org/fulldisclosure/2024/Jul/14; https://www.alecto.nl; http://seclists.org/fulldisclosure/2024/Jul/14
CVE: CVE-2019-20469
Published: 2024-11-07
Description: An issue was discovered on One2Track 2019-12-08 devices. Confidential information is needlessly stored on the smartwatch. Audio files are stored in .amr format, in the audior directory. An attacker who has physical access can retrieve all audio files by connecting via a USB cable.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-922
References: https://seclists.org/fulldisclosure/2024/Jul/14; https://www.one2track.nl; http://seclists.org/fulldisclosure/2024/Jul/14
CVE: CVE-2019-20472
Published: 2024-11-07
Description: An issue was discovered on One2Track 2019-12-08 devices. Any SIM card used with the device cannot have a PIN configured. If a PIN is configured, the device simply produces a "Remove PIN and restart!" message, and cannot be used. This makes it easier for an attacker to use the SIM card by stealing the device.
CVSS Score: 6.2 (MEDIUM)
References: https://seclists.org/fulldisclosure/2024/Jul/14; https://www.one2track.nl; http://seclists.org/fulldisclosure/2024/Jul/14
CVE: CVE-2024-10007
Published: 2024-11-07
Description: A path collision and arbitrary code execution vulnerability was identified in GitHub Enterprise Server that allowed container escape to escalate to root via ghe-firejail path. Exploitation of this vulnerability requires Enterprise Administrator access to the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise prior to 3.15 and was fixed in versions 3.14.3, 3.13.6, 3.12.11, and 3.11.17. This vulnerability was reported via the GitHub Bug Bounty program.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-59
References: https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.17; https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.11; https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.6
CVE: CVE-2024-10975
Published: 2024-11-07
Description: Nomad Community and Nomad Enterprise ("Nomad") volume specification is vulnerable to arbitrary cross-namespace volume creation through unauthorized Container Storage Interface (CSI) volume writes. This vulnerability, identified as CVE-2024-10975, is fixed in Nomad Community Edition 1.9.2 and Nomad Enterprise 1.9.2, 1.8.7, and 1.7.15.
CVSS Score: 7.7 (HIGH)
CWE: CWE-863
References: https://discuss.hashicorp.com/t/hcsec-2024-27-nomad-vulnerable-to-cross-namespace-volume-creation-abusing-csi-write-permission
CVE: CVE-2024-50599
Published: 2024-11-07
Description: A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Zimbra Collaboration Suite (ZCS) 8.8.15, affecting one of the webmail calendar endpoints. This arises from improper handling of user-supplied input, allowing an attacker to inject malicious code that is reflected back in the HTML response.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2024-10824
Published: 2024-11-07
Description: An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed unauthorized internal users to access sensitive secret scanning alert data intended only for business owners. This issue could be exploited only by organization members with a personal access token (PAT) and required that secret scanning be enabled on user-owned repositories. This vulnerability affected GitHub Enterprise Server versions after 3.13.0 but prior to 3.14.0 and was fixed in version 3.13.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.2
CVE: CVE-2024-36062
Published: 2024-11-07
Description: The com.callassistant.android (aka AI Call Assistant & Screener) application 1.174 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.callassistant.android.ui.call.incall.InCallActivity component.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-281
References: https://github.com/actuator/com.callassistant.android/blob/main/CVE-2024-36062
CVE: CVE-2024-36063
Published: 2024-11-07
Description: The Goodwy com.goodwy.dialer (aka Right Dialer) application through 5.1.0 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.goodwy.dialer.activities.DialerActivity component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://github.com/actuator/com.goodwy.dialer/blob/main/CVE-2024-36063
CVE: CVE-2024-36064
Published: 2024-11-07
Description: The NLL com.nll.cb (aka ACR Phone) application through 0.330-playStore-NoAccessibility-arm8 for Android allows any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.nll.cb.dialer.dialer.DialerActivity component.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-79
References: https://github.com/actuator/com.nll.cb/blob/main/CVE-2024-36064
CVE: CVE-2024-46960
Published: 2024-11-07
Description: The ASD com.rocks.video.downloader (aka HD Video Downloader All Format) application through 7.0.129 for Android allows an attacker to execute arbitrary JavaScript code via the com.rocks.video.downloader.MainBrowserActivity component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/actuator/com.rocks.video.downloader/blob/main/CVE-2024-46960
CVE: CVE-2024-46961
Published: 2024-11-07
Description: The Inshot com.downloader.privatebrowser (aka Video Downloader - XDownloader) application through 1.3.5 for Android allows an attacker to execute arbitrary JavaScript code via the com.downloader.privatebrowser.activity.PrivateMainActivity component.
CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: https://github.com/actuator/com.downloader.privatebrowser/blob/main/CVE-2024-46961
CVE: CVE-2024-49523
Published: 2024-11-07
Description: Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html
CVE: CVE-2024-49524
Published: 2024-11-07
Description: Adobe Experience Manager versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user input, the attacker can inject malicious scripts that run when the page is rendered. This type of attack requires user interaction, as the victim would need to access a manipulated URL or provide specific input to trigger the vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html