deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-39027
Published: 2024-07-05
Description: SeaCMS v12.9 has an unauthorized SQL injection vulnerability. The vulnerability is caused by the SQL injection through the cid parameter at /js/player/dmplayer/dmku/index.php?ac=edit, which can cause sensitive database information to be leaked.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/seacms-net/CMS/issues/17; https://github.com/seacms-net/CMS/issues/17
CVE: CVE-2024-39028
Published: 2024-07-05
Description: An issue was discovered in SeaCMS <=12.9 which allows remote attackers to execute arbitrary code via admin_ping.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pysnow1/vul_discovery/blob/main/SeaCMS/SeaCMS%20v12.9%20admin_ping.php%20RCE.md; https://github.com/pysnow1/vul_discovery/blob/main/SeaCMS/SeaCMS%20v12.9%20admin_ping.php%20RCE.md
CVE: CVE-2024-39864
Published: 2024-07-05
Description: The CloudStack integration API service allows running its unauthenticated API server (usually on port 8096 when configured and enabled via integration.api.port global setting) for internal portal integrations and for testing purposes. By default, the integration API service port is disabled and is considered disabled when integration.api.port is set to 0 or negative. Due to an improper initialisation logic, the integration API service would listen on a random port when its port value is set to 0 (default value). An attacker that can access the CloudStack management network could scan and find the randomised integration API service port and exploit it to perform unauthorised administrative actions and perform remote code execution on CloudStack managed hosts and result in complete compromise of the confidentiality, integrity, and availability of CloudStack managed infrastructure.

Users are recommended to restrict the network access on the CloudStack management server hosts to only essential ports. Users are recommended to upgrade to version 4.18.2.1, 4.19.0.2 or later, which addresses this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-665
References: http://www.openwall.com/lists/oss-security/2024/07/05/1; https://cloudstack.apache.org/blog/security-release-advisory-4.19.0.2-4.18.2.1; https://lists.apache.org/thread/6l51r00csrct61plkyd3qg3fj99215d1
CVE: CVE-2024-6505
Published: 2024-07-05
Description: A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table data within RSS becomes controllable. Setting excessively large values may cause an index out-of-bounds issue, potentially resulting in heap overflow access. This flaw allows a privileged user in the guest to crash the QEMU process on the host.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-125
References: https://access.redhat.com/security/cve/CVE-2024-6505; https://bugzilla.redhat.com/show_bug.cgi?id=2295760; https://access.redhat.com/security/cve/CVE-2024-6505
CVE: CVE-2024-6526
Published: 2024-07-05
Description: A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to[PII_REDACTED]cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument search_title/catName/sub/name/categorie leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 1b3da45308bb6c3f55247d0e99620b600bd85277. It is recommended to apply a patch to fix this issue. The identifier VDB-270369 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/1b3da45308bb6c3f55247d0e99620b600bd85277; https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/issues/263; https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/issues/263#issuecomment[PII_REDACTED]
CVE: CVE-2024-23997
Published: 2024-07-05
Description: Lukas Bach yana =<1.0.16 is vulnerable to Cross Site Scripting (XSS) via src/electron-main.ts.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://github.com/EQSTLab/PoC/tree/main/2024/LCE/CVE-2024-23997; https://github.com/EQSTLab/PoC/tree/main/2024/LCE/CVE-2024-23997
CVE: CVE-2024-23998
Published: 2024-07-05
Description: goanother Another Redis Desktop Manager =<1.6.1 is vulnerable to Cross Site Scripting (XSS) via src/components/Setting.vue.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://github.com/EQSTLab/PoC/tree/main/2024/LCE/CVE-2024-23998; https://github.com/EQSTLab/PoC/tree/main/2024/LCE/CVE-2024-23998
CVE: CVE-2024-29318
Published: 2024-07-05
Description: Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting (XSS) via upload of a SVG file with embedded javascript code.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/b-hermes/vulnerability-research/tree/main/CVE-2024-29318; https://github.com/b-hermes/vulnerability-research/tree/main/CVE-2024-29318
CVE: CVE-2024-29319
Published: 2024-07-05
Description: Volmarg Personal Management System 1.4.64 is vulnerable to SSRF (Server Side Request Forgery) via uploading a SVG file. The server can make unintended HTTP and DNS requests to a server that the attacker controls.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://github.com/b-hermes/vulnerability-research/tree/main/CVE-2024-29319; https://github.com/b-hermes/vulnerability-research/tree/main/CVE-2024-29319
CVE: CVE-2024-37768
Published: 2024-07-05
Description: 14Finger v1.1 was discovered to contain an arbitrary user deletion vulnerability via the component /api/admin/user?id.
CVSS Score: 9.1 (CRITICAL)
References: https://github.com/b1ackc4t/14Finger/issues/12; https://github.com/b1ackc4t/14Finger/issues/12
CVE: CVE-2024-37769
Published: 2024-07-05
Description: Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator via a crafted POST request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-278
References: https://github.com/b1ackc4t/14Finger/issues/12; https://github.com/b1ackc4t/14Finger/issues/12
CVE: CVE-2024-39210
Published: 2024-07-05
Description: Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page parameter at index.php. This vulnerability allows attackers to read arbitrary PHP files and access other sensitive information within the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/KRookieSec/CVE-2024-39210; https://github.com/KRookieSec/CVE-2024-39210
CVE: CVE-2024-27709
Published: 2024-07-05
Description: SQL Injection vulnerability in Eskooly Web Product v.3.0 allows a remote attacker to execute arbitrary code via the searchby parameter of the allstudents.php component and the id parameter of the requestmanager.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://blog.be-hacktive.com/eskooly-cve/cve-2024-27709-sql-injection-in-eskooly-web-product-v.3.0; https://blog.be-hacktive.com/eskooly-cve/cve-2024-27709-sql-injection-in-eskooly-web-product-v.3.0
CVE: CVE-2024-27710
Published: 2024-07-05
Description: An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the authentication mechanism.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://blog.be-hacktive.com/eskooly-cve/eskooly-broken-authentication/cve-2024-27710-privilege-escalation-via-authentication-mechanism-in-eskooly-web-product-less-than-v3; https://blog.be-hacktive.com/eskooly-cve/eskooly-broken-authentication/cve-2024-27710-privilege-escalation-via-authentication-mechanism-in-eskooly-web-product-less-than-v3
CVE: CVE-2024-27711
Published: 2024-07-05
Description: An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the Sin-up process function in the account settings.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://blog.be-hacktive.com/eskooly-cve/eskooly-broken-authentication/cve-2024-27711-user-enumeration-via-sign-up-process-in-eskooly-web-product-less-than-v3.0; https://blog.be-hacktive.com/eskooly-cve/eskooly-broken-authentication/cve-2024-27711-user-enumeration-via-sign-up-process-in-eskooly-web-product-less-than-v3.0
CVE: CVE-2024-27712
Published: 2024-07-05
Description: An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the User Account Mangemnt component in the authentication mechanism.
CVSS Score: 9.8 (CRITICAL)
References: https://blog.be-hacktive.com/eskooly-cve/eskooly-broken-authentication/cve-2024-27712-user-enumeration-via-account-settings-in-eskooly-web-product-less-than-v3.0; https://blog.be-hacktive.com/eskooly-cve/eskooly-broken-authentication/cve-2024-27712-user-enumeration-via-account-settings-in-eskooly-web-product-less-than-v3.0
CVE: CVE-2024-27713
Published: 2024-07-05
Description: An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-693
References: https://blog.be-hacktive.com/eskooly-cve/cve-2024-27713-protection-mechanism-failure-in-eskooly-web-product-less-than-v3.0; https://blog.be-hacktive.com/eskooly-cve/cve-2024-27713-protection-mechanism-failure-in-eskooly-web-product-less-than-v3.0
CVE: CVE-2024-27715
Published: 2024-07-05
Description: An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via a crafted request to the Password Change mechanism.
CVSS Score: 8.2 (HIGH)
CWE: CWE-620
References: https://blog.be-hacktive.com/eskooly-cve/cve-2024-27715-inadequate-password-update-verification-in-eskooly-web-product-less-than-v3.0; https://blog.be-hacktive.com/eskooly-cve/cve-2024-27715-inadequate-password-update-verification-in-eskooly-web-product-less-than-v3.0
CVE: CVE-2024-27716
Published: 2024-07-05
Description: Cross Site Scripting vulnerability in Eskooly Web Product v.3.0 and before allows a remote attacker to execute arbitrary code via the message sending and user input fields.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-80
References: https://blog.be-hacktive.com/eskooly-cve/cve-2024-27716-cross-site-scripting-xss-in-eskooly-web-product-less-than-v3.0; https://blog.be-hacktive.com/eskooly-cve/cve-2024-27716-cross-site-scripting-xss-in-eskooly-web-product-less-than-v3.0
CVE: CVE-2024-27717
Published: 2024-07-05
Description: Cross Site Request Forgery vulnerability in Eskooly Free Online School Management Software v.3.0 and before allows a remote attacker to escalate privileges via the Token Handling component.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://blog.be-hacktive.com/eskooly-cve/cve-2024-27717-cross-site-request-forgery-csrf-in-eskooly-web-product-less-than-v3.0; https://blog.be-hacktive.com/eskooly-cve/cve-2024-27717-cross-site-request-forgery-csrf-in-eskooly-web-product-less-than-v3.0
CVE: CVE-2024-37767
Published: 2024-07-05
Description: Insecure permissions in the component /api/admin/user of 14Finger v1.1 allows attackers to access all user information via a crafted GET request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://github.com/b1ackc4t/14Finger/issues/12; https://github.com/b1ackc4t/14Finger/issues/12
CVE: CVE-2024-39150
Published: 2024-07-05
Description: vditor v.3.9.8 and before is vulnerable to Arbitrary file read via a crafted data packet.
CVSS Score: 5.9 (MEDIUM)
References: https://b3log.org/vditor/; https://b3log.org/vditor/
CVE: CVE-2024-39178
Published: 2024-07-05
Description: MyPower vc8100 V100R001C00B030 was discovered to contain an arbitrary file read vulnerability via the component /tcpdump/tcpdump.php?menu_uuid.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-22
References: https://github.com/WarmBrew/web_vul/blob/main/CVES/CVE-2024-39178.md; https://github.com/WarmBrew/web_vul/blob/main/Maipu/MyPower%20vc8100/MyPower_vc8100.md; https://github.com/WarmBrew/web_vul/blob/main/Maipu/MyPower%20vc8100/MyPower_vc8100.md
CVE: CVE-2024-37903
Published: 2024-07-05
Description: Mastodon is a self-hosted, federated microblogging platform. Starting in version 2.6.0 and prior to versions 4.1.18 and 4.2.10, by crafting specific activities, an attacker can extend the audience of a post they do not own to other Mastodon users on a target server, thus gaining access to the contents of a post not intended for them. Versions 4.1.18 and 4.2.10 contain a patch for this issue.
CVSS Score: 8.2 (HIGH)
CWE: CWE-862
References: https://github.com/mastodon/mastodon/commit/a1c7aae28aecf06659c5b18cfa131b37cd1512a3; https://github.com/mastodon/mastodon/commit/d4bf22b632ea8b1174375c4966a6768ab66393b6; https://github.com/mastodon/mastodon/releases/tag/v4.1.18
CVE: CVE-2024-39174
Published: 2024-07-05
Description: A cross-site scripting (XSS) vulnerability in the Publish Article function of yzmcms v7.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a published article.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/0x1ang/cvepbulic/issues/1; https://github.com/0x1ang/cvepbulic/issues/1
CVE: CVE-2024-39321
Published: 2024-07-05
Description: Traefik is an HTTP reverse proxy and load balancer. Versions prior to 2.11.6, 3.0.4, and 3.1.0-rc3 have a vulnerability that allows bypassing IP allow-lists via HTTP/3 early data requests in QUIC 0-RTT handshakes sent with spoofed IP addresses. Versions 2.11.6, 3.0.4, and 3.1.0-rc3 contain a patch for this issue. No known workarounds are available.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: https://github.com/traefik/traefik/releases/tag/v2.11.6; https://github.com/traefik/traefik/releases/tag/v3.0.4; https://github.com/traefik/traefik/releases/tag/v3.1.0-rc3
CVE: CVE-2024-39687
Published: 2024-07-05
Description: Fedify is a TypeScript library for building federated server apps powered by ActivityPub and other standards. At present, when Fedify needs to retrieve an object or activity from a remote activitypub server, it makes a HTTP request to the `@id` or other resources present within the activity it has received from the web. This activity could reference an `@id` that points to an internal IP address, allowing an attacker to send request to resources internal to the fedify server's network. This applies to not just resolution of documents containing activities or objects, but also to media URLs as well. Specifically this is a Server Side Request Forgery attack. Users should upgrade to Fedify version 0.9.2, 0.10.1, or 0.11.1 to receive a patch for this issue.
CVSS Score: 7.2 (HIGH)
CWE: CWE-918
References: https://github.com/dahlia/fedify/commit/30f9cf4a175704a04c874f3ea88414c5f1e00b28; https://github.com/dahlia/fedify/commit/c641e976089dd913f649889c1bfb016df04e86ba; https://github.com/dahlia/fedify/security/advisories/GHSA-p9cg-vqcc-grcx
CVE: CVE-2024-34361
Published: 2024-07-05
Description: Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. A vulnerability in versions prior to 5.18.3 allows an authenticated user to make internal requests to the server via the `gravity_DownloadBlocklistFromUrl()` function. Depending on some circumstances, the vulnerability could lead to remote command execution. Version 5.18.3 contains a patch for this issue.
CVSS Score: 8.5 (HIGH)
CWE: CWE-918
References: https://github.com/pi-hole/pi-hole/commit/2c497a9a3ea099079bbcd1eb21725b0ed54b529d; https://github.com/pi-hole/pi-hole/security/advisories/GHSA-jg6g-rrj6-xfg6; https://github.com/pi-hole/pi-hole/commit/2c497a9a3ea099079bbcd1eb21725b0ed54b529d
CVE: CVE-2024-39019
Published: 2024-07-05
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/idcProData_deal.php?mudi=del
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://github.com/da271133/cms2/blob/main/44/csrf.md; https://github.com/da271133/cms2/blob/main/44/csrf.md
CVE: CVE-2024-39020
Published: 2024-07-05
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/vpsApiData_deal.php?mudi=rev&nohrefStr=close
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/da271133/cms2/blob/main/46/csrf.md; https://github.com/da271133/cms2/blob/main/46/csrf.md
CVE: CVE-2024-39021
Published: 2024-07-05
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApiData_deal.php?mudi=del
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://github.com/da271133/cms2/blob/main/45/csrf.md; https://github.com/da271133/cms2/blob/main/45/csrf.md
CVE: CVE-2024-39022
Published: 2024-07-05
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/infoSys_deal.php?mudi=deal
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/da271133/cms2/blob/main/47/csrf.md; https://github.com/da271133/cms2/blob/main/47/csrf.md
CVE: CVE-2024-39023
Published: 2024-07-05
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/info_deal.php?mudi=add&nohrefStr=close
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/da271133/cms2/blob/main/48/csrf.md; https://github.com/da271133/cms2/blob/main/48/csrf.md
CVE: CVE-2024-39689
Published: 2024-07-05
Description: Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store. `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues."
CVSS Score: 7.5 (HIGH)
CWE: CWE-345, CWE-345
References: https://github.com/certifi/python-certifi/commit/bd8153872e9c6fc98f4023df9c2deaffea2fa463; https://github.com/certifi/python-certifi/security/advisories/GHSA-248v-346w-9cwc; https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/XpknYMPO8dI
CVE: CVE-2024-39691
Published: 2024-07-05
Description: matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol. The fix for GHSA-wm4w-7h2q-3pf7 / CVE-2024-32000 included in matrix-appservice-irc 2.0.0 relied on the Matrix homeserver-provided timestamp to determine whether a user has access to the event they're replying to when determining whether or not to include a truncated version of the original event in the IRC message. Since this value is controlled by external entities, a malicious Matrix homeserver joined to a room in which a matrix-appservice-irc bridge instance (before version 2.0.1) is present can fabricate the timestamp with the intent of tricking the bridge into leaking room messages the homeserver should not have access to. matrix-appservice-irc 2.0.1 drops the reliance on `origin_server_ts` when determining whether or not an event should be visible to a user, instead tracking the event timestamps internally. As a workaround, it's possible to limit the amount of information leaked by setting a reply template that doesn't contain the original message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-280, CWE-755
References: https://github.com/matrix-org/matrix-appservice-irc/blob/d5d67d1d3ea3f0f6962a0af2cc57b56af3ad2129/config.sample.yaml#L601-L604; https://github.com/matrix-org/matrix-appservice-irc/commit/1835e047f269001054be4c68867797aa12372a0f; https://github.com/matrix-org/matrix-appservice-irc/pull/1804
CVE: CVE-2024-39696
Published: 2024-07-05
Description: Evmos is a decentralized Ethereum Virtual Machine chain on the Cosmos Network. Prior to version 19.0.0, a user can create a vesting account with a 3rd party account (EOA or contract) as funder. Then, this user can create an authorization for the contract.CallerAddress, this is the authorization checked in the code. But the funds are taken from the funder address provided in the message. Consequently, the user can fund a vesting account with a 3rd party account without its permission. The funder address can be any address, so this vulnerability can be used to drain all the accounts in the chain. The issue has been patched in version 19.0.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863, CWE-863
References: https://github.com/evmos/evmos/commit/0a620e176617a835ac697eea494afea09185dfaf; https://github.com/evmos/evmos/security/advisories/GHSA-q6hg-6m9x-5g9c; https://github.com/evmos/evmos/commit/0a620e176617a835ac697eea494afea09185dfaf
CVE: CVE-2024-5753
Published: 2024-07-05
Description: vanna-ai/vanna version v0.3.4 is vulnerable to SQL injection in some file-critical functions such as `pg_read_file()`. This vulnerability allows unauthenticated remote users to read arbitrary local files on the victim server, including sensitive files like `/etc/passwd`, by exploiting the exposed SQL queries via a Python Flask API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://huntr.com/bounties/a3f913d6-c717-4528-b974-26d8d9e839ca; https://huntr.com/bounties/a3f913d6-c717-4528-b974-26d8d9e839ca
CVE: CVE-2024-33862
Published: 2024-07-05
Description: A buffer-management vulnerability in OPC Foundation OPCFoundation.NetStandard.Opc.Ua.Core before 1.05.374.54 could allow remote attackers to exhaust memory resources. It is triggered when the system receives an excessive number of messages from a remote source. This could potentially lead to a denial of service (DoS) condition, disrupting the normal operation of the system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2024-33862.pdf; https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2024-33862.pdf
CVE: CVE-2024-39182
Published: 2024-07-05
Description: An information disclosure vulnerability in ISPmanager v6.98.0 allows attackers to access sensitive details of the root user's session via an arbitrary command (ISP6-1779).
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://ispmanager.com/changelog; https://ispmanager.com/changelog
CVE: CVE-2024-40594
Published: 2024-07-06
Description: The OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores conversations in cleartext in a location accessible to other apps.
CVSS Score: 2.3 (LOW)
CWE: CWE-312
References: https://arstechnica.com/ai/2024/07/chatgpts-much-heralded-mac-app-was-storing-conversations-as-plain-text/; https://www.theverge.com/2024/7/3/24191636/openai-chatgpt-mac-app-conversations-plain-text; https://arstechnica.com/ai/2024/07/chatgpts-much-heralded-mac-app-was-storing-conversations-as-plain-text/
CVE: CVE-2024-5616
Published: 2024-07-06
Description: A Cross-Site Request Forgery (CSRF) vulnerability exists in mudler/LocalAI versions up to and including 2.15.0, which allows attackers to trick victims into deleting installed models. By crafting a malicious HTML page, an attacker can cause the deletion of a model, such as 'gpt-4-vision-preview', without the victim's consent. The vulnerability is due to insufficient CSRF protection mechanisms on the model deletion functionality.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/mudler/localai/commit/4e1463fec291612a59a16db60b3fd12d4c49d64b; https://huntr.com/bounties/fd753fb6-ba04-4dd8-abef-918fb97120af; https://github.com/mudler/localai/commit/4e1463fec291612a59a16db60b3fd12d4c49d64b
CVE: CVE-2024-37208
Published: 2024-07-06
Description: Server-Side Request Forgery (SSRF) vulnerability in Robert Macchi WP Scraper.This issue affects WP Scraper: from n/a through 5.7.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-918
References: https://patchstack.com/database/vulnerability/wp-scraper/wordpress-wp-scraper-plugin-5-7-server-side-request-forgery-ssrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-scraper/wordpress-wp-scraper-plugin-5-7-server-side-request-forgery-ssrf-vulnerability?_s_id=cve