deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-1372
Published: 2024-02-13
Description: A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when configuring SAML settings. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the  GitHub Bug Bounty program https://bounty.github.com .

CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20, CWE-77
References: https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.7; https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.5; https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.15
CVE: CVE-2024-1374
Published: 2024-02-13
Description: A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via nomad templates when configuring audit log forwarding. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the  GitHub Bug Bounty program https://bounty.github.com .

CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20, CWE-77
References: https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.7; https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.5; https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.15
CVE: CVE-2024-1378
Published: 2024-02-13
Description: A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via nomad templates when configuring SMTP options. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the  GitHub Bug Bounty program https://bounty.github.com .

CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20, CWE-77
References: https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.7; https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.5; https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.15
CVE: CVE-2024-24751
Published: 2024-02-13
Description: sf_event_mgt is an event management and registration extension for the TYPO3 CMS based on ExtBase and Fluid. In affected versions the existing access control check for events in the backend module got broken during the update of the extension to TYPO3 12.4, because the `RedirectResponse` from the `$this->redirect()` function was never handled. This issue has been addressed in version 7.4.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284, CWE-863, CWE-863
References: https://github.com/derhansen/sf_event_mgt/commit/a08c2cd48695c07e462d15eeb70434ddc0206e4c; https://github.com/derhansen/sf_event_mgt/security/advisories/GHSA-4576-pgh2-g34j; https://github.com/derhansen/sf_event_mgt/commit/a08c2cd48695c07e462d15eeb70434ddc0206e4c
CVE: CVE-2024-24814
Published: 2024-02-13
Description: mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In affected versions missing input validation on mod_auth_openidc_session_chunks cookie value makes the server vulnerable to a denial of service (DoS) attack. An internal security audit has been conducted and the reviewers found that if they manipulated the value of the mod_auth_openidc_session_chunks cookie to a very large integer, like 99999999, the server struggles with the request for a long time and finally gets back with a 500 error. Making a few requests of this kind caused our server to become unresponsive. Attackers can craft requests that would make the server work very hard (and possibly become unresponsive) and/or crash with minimal effort. This issue has been addressed in version 2.4.15.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/OpenIDC/mod_auth_openidc/commit/4022c12f314bd89d127d1be008b1a80a08e1203d; https://github.com/OpenIDC/mod_auth_openidc/security/advisories/GHSA-hxr6-w4gc-7vvv; https://lists.debian.org/debian-lts-announce/2024/03/msg00004.html
CVE: CVE-2024-25122
Published: 2024-02-13
Description: sidekiq-unique-jobs is an open source project which prevents simultaneous Sidekiq jobs with the same unique arguments to run. Specially crafted GET request parameters handled by any of the following endpoints of sidekiq-unique-jobs' "admin" web UI, allow a super-user attacker, or an unwitting, but authorized, victim, who has received a disguised / crafted link, to successfully execute malicious code, which could potentially steal cookies, session data, or local storage data from the app the sidekiq-unique-jobs web UI is mounted in. 1. `/changelogs`, 2. `/locks` or 3. `/expiring_locks`. This issue has been addressed in versions 7.1.33 and 8.0.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/mhenrixon/sidekiq-unique-jobs/commit/ec3afd920c1b55843c72f748a87baac7f8be82ed; https://github.com/mhenrixon/sidekiq-unique-jobs/security/advisories/GHSA-cmh9-rx85-xj38; https://github.com/mhenrixon/sidekiq-unique-jobs/commit/ec3afd920c1b55843c72f748a87baac7f8be82ed
CVE: CVE-2021-46757
Published: 2024-02-13
Description: Insufficient checking of memory buffer in ASP
Secure OS may allow an attacker with a malicious TA to read/write to the ASP
Secure OS kernel virtual address space potentially leading to privilege
escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
CVE: CVE-2023-20579
Published: 2024-02-13
Description: Improper
Access Control in the AMD SPI protection feature may allow a user with Ring0
(kernel mode) privileged access to bypass protections potentially resulting in
loss of integrity and availability.





















CVSS Score: 6.0 (MEDIUM)
CWE: CWE-284
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009
CVE: CVE-2023-20587
Published: 2024-02-13
Description: Improper
Access Control in System Management Mode (SMM) may allow an attacker access to
the SPI flash potentially leading to arbitrary code execution.

















CVSS Score: 7.1 (HIGH)
CWE: CWE-284
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009
CVE: CVE-2023-31346
Published: 2024-02-13
Description: Failure to initialize
memory in SEV Firmware may allow a privileged attacker to access stale data
from other guests.

















CVSS Score: 6.0 (MEDIUM)
CWE: CWE-284
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007
CVE: CVE-2023-31347
Published: 2024-02-13
Description: Due to a code bug in
Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a
guest to observe an incorrect TSC when Secure TSC is enabled potentially
resulting in a loss of guest integrity.  





CVSS Score: 4.9 (MEDIUM)
CWE: CWE-682
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007
CVE: CVE-2024-24142
Published: 2024-02-13
Description: Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/BurakSevben/School-Task-Manager-SQL-Injection-2; https://github.com/BurakSevben/School-Task-Manager-SQL-Injection-2
CVE: CVE-2023-6152
Published: 2024-02-13
Description: A user changing their email after signing up and verifying it can change it without verification in profile settings.

The configuration option "verify_email_enabled" will only validate email only on sign up.


CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://github.com/grafana/bugbounty/security/advisories/GHSA-3hv4-r2fm-h27f; https://grafana.com/security/security-advisories/cve-2023-6152/; https://github.com/grafana/bugbounty/security/advisories/GHSA-3hv4-r2fm-h27f
CVE: CVE-2023-38960
Published: 2024-02-13
Description: Insecure Permissions issue in Raiden Professional Server RaidenFTPD v.2.4 build 4005 allows a local attacker to gain privileges and execute arbitrary code via crafted executable running from the installation directory.
CVSS Score: 7.3 (HIGH)
CWE: CWE-276, CWE-276
References: https://rodelllemit.medium.com/insecure-permissions-vulnerability-in-raidenftpd-v2-4-build-4005-2016-04-01-ea7389be3d33; https://rodelllemit.medium.com/insecure-permissions-vulnerability-in-raidenftpd-v2-4-build-4005-2016-04-01-ea7389be3d33
CVE: CVE-2024-25118
Published: 2024-02-13
Description: TYPO3 is an open source PHP based web content management system released under the GNU GPL. Password hashes were being reflected in the editing forms of the TYPO3 backend user interface. This allowed attackers to crack the plaintext password using brute force techniques. Exploiting this vulnerability requires a valid backend user account. Users are advised to update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described. There are no known workarounds for this issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/TYPO3/typo3/security/advisories/GHSA-38r2-5695-334w; https://typo3.org/security/advisory/typo3-core-sa-2024-003; https://github.com/TYPO3/typo3/security/advisories/GHSA-38r2-5695-334w
CVE: CVE-2024-25119
Published: 2024-02-13
Description: TYPO3 is an open source PHP based web content management system released under the GNU GPL. The plaintext value of `$GLOBALS['SYS']['encryptionKey']` was displayed in the editing forms of the TYPO3 Install Tool user interface. This allowed attackers to utilize the value to generate cryptographic hashes used for verifying the authenticity of HTTP request parameters. Exploiting this vulnerability requires an administrator-level backend user account with system maintainer permissions. Users are advised to update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described. There are no known workarounds for this vulnerability.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: https://github.com/TYPO3/typo3/security/advisories/GHSA-h47m-3f78-qp9g; https://typo3.org/security/advisory/typo3-core-sa-2024-004; https://github.com/TYPO3/typo3/security/advisories/GHSA-h47m-3f78-qp9g
CVE: CVE-2024-25120
Published: 2024-02-13
Description: TYPO3 is an open source PHP based web content management system released under the GNU GPL. The TYPO3-specific `t3://` URI scheme could be used to access resources outside of the users' permission scope. This encompassed files, folders, pages, and records (although only if a valid link-handling configuration was provided). Exploiting this vulnerability requires a valid backend user account. Users are advised to update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described. There are no known workarounds for this issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-284
References: https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolink.html#resource-references; https://github.com/TYPO3/typo3/security/advisories/GHSA-wf85-8hx9-gj7c; https://typo3.org/security/advisory/typo3-core-sa-2024-005
CVE: CVE-2024-25121
Published: 2024-02-13
Description: TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions of TYPO3 entities of the File Abstraction Layer (FAL) could be persisted directly via `DataHandler`. This allowed attackers to reference files in the fallback storage directly and retrieve their file names and contents. The fallback storage ("zero-storage") is used as a backward compatibility layer for files located outside properly configured file storages and within the public web root directory. Exploiting this vulnerability requires a valid backend user account. Users are advised to update to TYPO3 version 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, or 13.0.1 which fix the problem described. When persisting entities of the File Abstraction Layer directly via DataHandler, `sys_file` entities are now denied by default, and `sys_file_reference` & `sys_file_metadata` entities are not permitted to reference files in the fallback storage anymore. When importing data from secure origins, this must be explicitly enabled in the corresponding DataHandler instance by using `$dataHandler->isImporting = true;`.



CVSS Score: 7.1 (HIGH)
CWE: CWE-200, CWE-284
References: https://github.com/TYPO3/typo3/security/advisories/GHSA-rj3x-wvc6-5j66; https://typo3.org/security/advisory/typo3-core-sa-2024-006; https://github.com/TYPO3/typo3/security/advisories/GHSA-rj3x-wvc6-5j66
CVE: CVE-2024-1485
Published: 2024-02-14
Description: A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the `parent` or `plugin` keywords. This could download a malicious archive and cause the cleanup process to overwrite or delete files outside of the archive, which should not be allowed.
CVSS Score: 8.0 (HIGH)
CWE: CWE-22, CWE-22
References: https://access.redhat.com/security/cve/CVE-2024-1485; https://bugzilla.redhat.com/show_bug.cgi?id=2264106; https://github.com/advisories/GHSA-84xv-jfrm-h4gm
CVE: CVE-2024-24690
Published: 2024-02-14
Description: Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-1284, CWE-1284
References: https://www.zoom.com/en/trust/security-bulletin/ZSB-24007/; https://www.zoom.com/en/trust/security-bulletin/ZSB-24007/
CVE: CVE-2024-24691
Published: 2024-02-14
Description: Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-176
References: https://www.zoom.com/en/trust/security-bulletin/ZSB-24008/; https://www.zoom.com/en/trust/security-bulletin/ZSB-24008/
CVE: CVE-2024-24695
Published: 2024-02-14
Description: Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an authenticated user to conduct a disclosure of information via network access.


CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://www.zoom.com/en/trust/security-bulletin/ZSB-24002/; https://www.zoom.com/en/trust/security-bulletin/ZSB-24002/
CVE: CVE-2024-24696
Published: 2024-02-14
Description: Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an authenticated user to conduct a disclosure of information via network access.


CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://www.zoom.com/en/trust/security-bulletin/ZSB-24003/; https://www.zoom.com/en/trust/security-bulletin/ZSB-24003/
CVE: CVE-2024-24697
Published: 2024-02-14
Description: Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of privilege via local access.

CVSS Score: 7.2 (HIGH)
CWE: CWE-426, CWE-426
References: https://www.zoom.com/en/trust/security-bulletin/ZSB-24004/; https://www.zoom.com/en/trust/security-bulletin/ZSB-24004/
CVE: CVE-2024-24698
Published: 2024-02-14
Description: Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-449
References: https://www.zoom.com/en/trust/security-bulletin/ZSB-24005/; https://www.zoom.com/en/trust/security-bulletin/ZSB-24005/
CVE: CVE-2024-24699
Published: 2024-02-14
Description: Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access.

CVSS Score: 6.5 (MEDIUM)
References: https://www.zoom.com/en/trust/security-bulletin/ZSB-24006/; https://www.zoom.com/en/trust/security-bulletin/ZSB-24006/
CVE: CVE-2024-25125
Published: 2024-02-14
Description: Digdag is an open source tool that to build, run, schedule, and monitor complex pipelines of tasks across various platforms. Treasure Data's digdag workload automation system is susceptible to a path traversal vulnerability if it's configured to store log files locally. This issue may lead to information disclosure and has been addressed in release version 0.10.5.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/treasure-data/digdag/commit/eae89b0daf6c62f12309d8c7194454dfb18cc5c3; https://github.com/treasure-data/digdag/security/advisories/GHSA-5mp4-32rr-v3x5; https://github.com/treasure-data/digdag/commit/eae89b0daf6c62f12309d8c7194454dfb18cc5c3
CVE: CVE-2024-22455
Published: 2024-02-14
Description: Dell Mobility - E-Lab Navigator, version(s) 3.1.9, 3.2.0, contain(s) an Authorization Bypass Through User-Controlled Key vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Launch of phishing attacks.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://www.dell.com/support/kbdoc/en-us/000222015/dsa-2024-073-security-update-for-mobility-e-lab-navigator-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000222015/dsa-2024-073-security-update-for-mobility-e-lab-navigator-vulnerabilities
CVE: CVE-2023-25535
Published: 2024-02-14
Description: 
Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial installation has a high vulnerability that can result in local privilege escalation (LPE). This vulnerability only affects first-time installations done prior to 8th March 2023


CVSS Score: 7.2 (HIGH)
CWE: CWE-269
References: https://www.dell.com/support/kbdoc/en-us/000211410/dell-supportassist-for-home-pcs-security-update-for-installer-executable-file-for-local-privilege-escalation-lpe-vulnerability; https://www.dell.com/support/kbdoc/en-us/000211410/dell-supportassist-for-home-pcs-security-update-for-installer-executable-file-for-local-privilege-escalation-lpe-vulnerability
CVE: CVE-2023-39249
Published: 2024-02-14
Description: 
Dell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass vulnerability that allows locally authenticated non-admin users to gain temporary privilege within the SupportAssist User Interface on their respective PC. The Run as Admin temporary privilege feature enables IT/System Administrators to perform driver scans and Dell-recommended driver installations without requiring them to log out of the local non-admin user session. However, the granted privilege is limited solely to the SupportAssist User Interface and automatically expires after 15 minutes.


CVSS Score: 6.3 (MEDIUM)
CWE: CWE-280
References: https://www.dell.com/support/kbdoc/en-us/000216574/security-update-for-dell-supportassist-for-business-pcs-vulnerability; https://www.dell.com/support/kbdoc/en-us/000216574/security-update-for-dell-supportassist-for-business-pcs-vulnerability
CVE: CVE-2023-44283
Published: 2024-02-14
Description: 
In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution of arbitrary code, in the Windows system context, and confined to that specific local PC.



CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://www.dell.com/support/kbdoc/en-us/000219086/dsa-2023-401-security-update-for-dell-supportassist-for-home-pcs-and-dell-supportassist-for-business-pcs-user-interface-component; https://www.dell.com/support/kbdoc/en-us/000219086/dsa-2023-401-security-update-for-dell-supportassist-for-home-pcs-and-dell-supportassist-for-business-pcs-user-interface-component
CVE: CVE-2023-44293
Published: 2024-02-14
Description: 
In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of IP Range Rest API. This issue may potentially lead to unintentional information disclosure from the product database.


CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://www.dell.com/support/kbdoc/en-us/000219372/dsa-2023-403-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000219372/dsa-2023-403-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities
CVE: CVE-2023-44294
Published: 2024-02-14
Description: 
In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of Collection Rest API. 
This issue may potentially lead to unintentional information disclosure from the product database.


CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://www.dell.com/support/kbdoc/en-us/000219372/dsa-2023-403-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000219372/dsa-2023-403-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities
CVE: CVE-2023-48985
Published: 2024-02-14
Description: Cross Site Scripting (XSS) vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the login.php component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.lmgsecurity.com/news/critical-software-vulnerabilities-impacting-credit-unions-discovered-by-lmg-security-researcher-immediate-action-recommended/; https://www.lmgsecurity.com/news/critical-software-vulnerabilities-impacting-credit-unions-discovered-by-lmg-security-researcher-immediate-action-recommended/