deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-34081
Published: 2024-05-14
Description: MantisBT (Mantis Bug Tracker) is an open source issue tracker.  Improper escaping of a custom field's name allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript when resolving or closing issues (`bug_change_status_page.php`) belonging to a project linking said custom field, viewing issues (`view_all_bug_page.php`) when the custom field is displayed as a column, or printing issues (`print_all_bug_page.php`) when the custom field is displayed as a column. Version 2.26.2 contains a patch for the issue. As a workaround, ensure Custom Field Names do not contain HTML tags.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/mantisbt/mantisbt/commit/447a521aae0f82f791b8116a14a20e276df739be; https://github.com/mantisbt/mantisbt/security/advisories/GHSA-wgx7-jp56-65mq; https://mantisbt.org/bugs/view.php?id=34432
CVE: CVE-2024-34196
Published: 2024-05-14
Description: Totolink AC1200 Wireless Dual Band Gigabit Router A3002RU_V3 Firmware V3.0.0-B20[PII_REDACTED] is vulnerable to Buffer Overflow. The "boa" program allows attackers to modify the value of the "vwlan_idx" field via "formMultiAP". This can lead to a stack overflow through the "formWlEncrypt" CGI function by constructing malicious HTTP requests and passing a WLAN SSID value exceeding the expected length, potentially resulting in command execution or denial of service attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://gist.github.com/Swind1er/1ec2fde42254598a72f1d716f9cfe2a1; https://gist.github.com/Swind1er/1ec2fde42254598a72f1d716f9cfe2a1
CVE: CVE-2024-34199
Published: 2024-05-14
Description: TinyWeb 1.94 and below allows unauthenticated remote attackers to cause a denial of service (Buffer Overflow) when sending excessively large elements in the request line.
CVSS Score: 8.6 (HIGH)
CWE: CWE-787
References: https://github.com/DMCERTCE/PoC_Tiny_Overflow; https://github.com/maximmasiutin/TinyWeb/commit/2584082; https://github.com/maximmasiutin/TinyWeb/commit/d49c3da
CVE: CVE-2024-34200
Published: 2024-05-14
Description: TOTOLINK CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpQosRules function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/n0wstr/IOTVuln/tree/main/CP450/setIpQosRules; https://github.com/n0wstr/IOTVuln/tree/main/CP450/setIpQosRules
CVE: CVE-2024-34201
Published: 2024-05-14
Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the getSaveConfig function.
CVSS Score: 7.3 (HIGH)
CWE: CWE-121
References: https://github.com/n0wstr/IOTVuln/tree/main/CP450/getSaveConfig; https://github.com/n0wstr/IOTVuln/tree/main/CP450/getSaveConfig
CVE: CVE-2024-34202
Published: 2024-05-14
Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setMacFilterRules function.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-121
References: https://github.com/n0wstr/IOTVuln/tree/main/CP450/setMacFilterRules; https://github.com/n0wstr/IOTVuln/tree/main/CP450/setMacFilterRules
CVE: CVE-2024-34203
Published: 2024-05-14
Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setLanguageCfg function.
CVSS Score: 3.8 (LOW)
CWE: CWE-121
References: https://github.com/n0wstr/IOTVuln/tree/main/CP450/setLanguageCfg; https://github.com/n0wstr/IOTVuln/tree/main/CP450/setLanguageCfg
CVE: CVE-2024-34204
Published: 2024-05-14
Description: TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setUpgradeFW function via the FileName parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/n0wstr/IOTVuln/tree/main/CP450/setUpgradeFW; https://github.com/n0wstr/IOTVuln/tree/main/CP450/setUpgradeFW
CVE: CVE-2024-34205
Published: 2024-05-14
Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the download_firmware function.
CVSS Score: 7.3 (HIGH)
CWE: CWE-78
References: https://github.com/n0wstr/IOTVuln/tree/main/CP450/download_firmware; https://github.com/n0wstr/IOTVuln/tree/main/CP450/download_firmware
CVE: CVE-2024-34206
Published: 2024-05-14
Description: TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: https://github.com/n0wstr/IOTVuln/tree/main/CP450/setWebWlanIdx; https://github.com/n0wstr/IOTVuln/tree/main/CP450/setWebWlanIdx
CVE: CVE-2024-34207
Published: 2024-05-14
Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setStaticDhcpConfig function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://github.com/n0wstr/IOTVuln/tree/main/CP450/setStaticDhcpConfig; https://github.com/n0wstr/IOTVuln/tree/main/CP450/setStaticDhcpConfig
CVE: CVE-2024-34209
Published: 2024-05-14
Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpPortFilterRules function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://github.com/n0wstr/IOTVuln/tree/main/CP450/setIpPortFilterRules; https://github.com/n0wstr/IOTVuln/tree/main/CP450/setIpPortFilterRules
CVE: CVE-2024-34210
Published: 2024-05-14
Description: TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the CloudACMunualUpdate function via the FileName parameter.
CVSS Score: 7.3 (HIGH)
CWE: CWE-78
References: https://github.com/n0wstr/IOTVuln/tree/main/CP450/CloudACMunualUpdate_injection; https://github.com/n0wstr/IOTVuln/tree/main/CP450/CloudACMunualUpdate_injection
CVE: CVE-2024-34211
Published: 2024-05-14
Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.
CVSS Score: 8.8 (HIGH)
CWE: CWE-259
References: https://github.com/n0wstr/IOTVuln/tree/main/CP450/HardCodeRoot; https://github.com/n0wstr/IOTVuln/tree/main/CP450/HardCodeRoot
CVE: CVE-2024-34212
Published: 2024-05-14
Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the CloudACMunualUpdate function.
CVSS Score: 7.3 (HIGH)
CWE: CWE-121
References: https://github.com/n0wstr/IOTVuln/tree/main/CP450/CloudACMunualUpdate_overflow; https://github.com/n0wstr/IOTVuln/tree/main/CP450/CloudACMunualUpdate_overflow
CVE: CVE-2024-34213
Published: 2024-05-14
Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the SetPortForwardRules function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://github.com/n0wstr/IOTVuln/tree/main/CP450/SetPortForwardRules; https://github.com/n0wstr/IOTVuln/tree/main/CP450/SetPortForwardRules
CVE: CVE-2024-34215
Published: 2024-05-14
Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setUrlFilterRules function.
CVSS Score: 7.3 (HIGH)
CWE: CWE-121
References: https://github.com/n0wstr/IOTVuln/tree/main/CP450/SetUrlFilterRules; https://github.com/n0wstr/IOTVuln/tree/main/CP450/SetUrlFilterRules
CVE: CVE-2024-34217
Published: 2024-05-14
Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the addWlProfileClientMode function.
CVSS Score: 7.7 (HIGH)
CWE: CWE-121
References: https://github.com/n0wstr/IOTVuln/tree/main/CP450/addWlProfileClientMode; https://github.com/n0wstr/IOTVuln/tree/main/CP450/addWlProfileClientMode
CVE: CVE-2024-34218
Published: 2024-05-14
Description: TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter.
CVSS Score: 3.8 (LOW)
CWE: CWE-77
References: https://github.com/n0wstr/IOTVuln/tree/main/CP450/NTPSyncWithHost; https://github.com/n0wstr/IOTVuln/tree/main/CP450/NTPSyncWithHost
CVE: CVE-2024-34219
Published: 2024-05-14
Description: TOTOLINK CP450 V4.1.0cu.747_B20191224 was discovered to contain a vulnerability in the SetTelnetCfg function, which allows attackers to log in through telnet.
CVSS Score: 8.6 (HIGH)
CWE: CWE-798
References: https://github.com/n0wstr/IOTVuln/tree/main/CP450/SetTelnetCfg; https://github.com/n0wstr/IOTVuln/tree/main/CP450/SetTelnetCfg
CVE: CVE-2024-34220
Published: 2024-05-14
Description: Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/dovankha/CVE-2024-34220; https://github.com/dovankha/CVE-2024-34220
CVE: CVE-2024-34221
Published: 2024-05-14
Description: Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://github.com/dovankha/CVE-2024-34221; https://github.com/dovankha/CVE-2024-34221
CVE: CVE-2024-34222
Published: 2024-05-14
Description: Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-89
References: https://github.com/dovankha/CVE-2024-34222; https://github.com/dovankha/CVE-2024-34222
CVE: CVE-2024-34223
Published: 2024-05-14
Description: Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve or reject leave ticket.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-276
References: https://github.com/dovankha/CVE-2024-34223; https://github.com/dovankha/CVE-2024-34223
CVE: CVE-2024-34224
Published: 2024-05-14
Description: Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the firstname, middlename, lastname parameters.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: https://github.com/dovankha/CVE-2024-34224; https://github.com/dovankha/CVE-2024-34224
CVE: CVE-2024-34225
Published: 2024-05-14
Description: Cross Site Scripting vulnerability in php-lms/admin/?page=system_info in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the name, shortname parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-94
References: https://github.com/dovankha/CVE-2024-34225; https://github.com/dovankha/CVE-2024-34225
CVE: CVE-2024-34226
Published: 2024-05-14
Description: SQL injection vulnerability in /php-sqlite-vms/?page=manage_visitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary SQL commands via the id parameters.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-89
References: https://github.com/dovankha/CVE-2024-34226; https://github.com/dovankha/CVE-2024-34226
CVE: CVE-2024-34230
Published: 2024-05-14
Description: A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the System Information parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Amrita2000/CVES/blob/main/CVE-2024-34230.md; https://github.com/Amrita2000/CVES/blob/main/CVE-2024-34230.md
CVE: CVE-2024-34231
Published: 2024-05-14
Description: A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the System Short Name parameter.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://github.com/Amrita2000/CVES/blob/main/CVE-2024-34231.md; https://github.com/Amrita2000/CVES/blob/main/CVE-2024-34231.md
CVE: CVE-2024-34245
Published: 2024-05-14
Description: An arbitrary file read vulnerability in DedeCMS v5.7.114 allows authenticated attackers to read arbitrary files by specifying any path in makehtml_js_action.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/Stoocea/Vulnerability-analysis-Notes/blob/main/cms/DedeCMS-V5.7.114%20%20Arbitrary%20file%20read%20vulnerability.md; https://github.com/Stoocea/Vulnerability-analysis-Notes/blob/main/cms/DedeCMS-V5.7.114%20%20Arbitrary%20file%20read%20vulnerability.md
CVE: CVE-2024-34308
Published: 2024-05-14
Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the password parameter in the function urldecode.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/totolink%20LR350/README.md; https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/totolink%20LR350/README.md
CVE: CVE-2024-34310
Published: 2024-05-14
Description: Jin Fang Times Content Management System v3.2.3 was discovered to contain a SQL injection vulnerability via the id parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/[PII_REDACTED]/CVE-2024-34310; https://github.com/[PII_REDACTED]/CVE-2024-34310
CVE: CVE-2024-34338
Published: 2024-05-14
Description: Tenda O3V2 with firmware versions V1.0.0.10 and V1.0.0.12 was discovered to contain a Blind Command Injection via dest parameter in /goform/getTraceroute. This vulnerability allows attackers to execute arbitrary commands with root privileges. Authentication is required to exploit this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: http://exzettabyte.me/blind-command-injection-in-tenda-o3v2; http://exzettabyte.me/blind-command-injection-in-tenda-o3v2
CVE: CVE-2024-34340
Published: 2024-05-14
Description: Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, Cacti calls `compat_password_hash` when users set their password. `compat_password_hash` use `password_hash` if there is it, else use `md5`. When verifying password, it calls `compat_password_verify`. In `compat_password_verify`, `password_verify` is called if there is it, else use `md5`. `password_verify` and `password_hash` are supported on PHP < 5.5.0, following PHP manual. The vulnerability is in `compat_password_verify`. Md5-hashed user input is compared with correct password in database by `$md5 == $hash`. It is a loose comparison, not `===`. It is a type juggling vulnerability. Version 1.2.27 contains a patch for the issue.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287, CWE-697, CWE-697
References: https://github.com/Cacti/cacti/security/advisories/GHSA-37x7-mfjv-mm7m; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RBEOAFKRARQHTDIYSL723XAFJ2Q6624X/; https://github.com/Cacti/cacti/security/advisories/GHSA-37x7-mfjv-mm7m
CVE: CVE-2024-34345
Published: 2024-05-14
Description: The CycloneDX JavaScript library contains the core functionality of OWASP CycloneDX for JavaScript. In 6.7.0, XML External entity injections were possible, when running the provided XML Validator on arbitrary input. This issue was fixed in version 6.7.1.
CVSS Score: 8.1 (HIGH)
CWE: CWE-611
References: https://github.com/CycloneDX/cyclonedx-javascript-library/commit/5e5e1e0b9422f47d2de81c7c4064b803a01e7203; https://github.com/CycloneDX/cyclonedx-javascript-library/pull/1063; https://github.com/CycloneDX/cyclonedx-javascript-library/security/advisories/GHSA-38gf-rh2w-gmj7
CVE: CVE-2024-34349
Published: 2024-05-14
Description: Sylius is an open source eCommerce platform. Prior to 1.12.16 and 1.13.1, there is a possibility to execute javascript code in the Admin panel. In order to perform an XSS attack input a script into Name field in which of the resources: Taxons, Products, Product Options or Product Variants. The code will be executed while using an autocomplete field with one of the listed entities in the Admin Panel. Also for the taxons in the category tree on the product form.The issue is fixed in versions: 1.12.16, 1.13.1.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/Sylius/Sylius/commit/ba4b66da5af88cdb1bba6174de8bdf42f4853e12; https://github.com/Sylius/Sylius/security/advisories/GHSA-v2f9-rv6w-vw8r; https://github.com/Sylius/Sylius/commit/ba4b66da5af88cdb1bba6174de8bdf42f4853e12
CVE: CVE-2024-34350
Published: 2024-05-14
Description: Next.js is a React framework that can provide building blocks to create web applications. Prior to 13.5.1, an inconsistent interpretation of a crafted HTTP request meant that requests are treated as both a single request, and two separate requests by Next.js, leading to desynchronized responses. This led to a response queue poisoning vulnerability in the affected Next.js versions. For a request to be exploitable, the affected route also had to be making use of the [rewrites](https://nextjs.org/docs/app/api-reference/next-config-js/rewrites) feature in Next.js. The vulnerability is resolved in Next.js `13.5.1` and newer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444
References: https://github.com/vercel/next.js/security/advisories/GHSA-77r5-gw3j-2mpf; https://github.com/vercel/next.js/security/advisories/GHSA-77r5-gw3j-2mpf
CVE: CVE-2024-34351
Published: 2024-05-14
Description: Next.js is a React framework that can provide building blocks to create web applications. A Server-Side Request Forgery (SSRF) vulnerability was identified in Next.js Server Actions. If the `Host` header is modified, and the below conditions are also met, an attacker may be able to make requests that appear to be originating from the Next.js application server itself. The required conditions are 1) Next.js is running in a self-hosted manner; 2) the Next.js application makes use of Server Actions; and 3) the Server Action performs a redirect to a relative path which starts with a `/`. This vulnerability was fixed in Next.js `14.1.1`.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://github.com/vercel/next.js/commit/8f7a6ca7d21a97bc9f7a1bbe10427b5ad74b9085; https://github.com/vercel/next.js/pull/62561; https://github.com/vercel/next.js/security/advisories/GHSA-fr5h-rqp8-mj6g
CVE: CVE-2024-34352
Published: 2024-05-14
Description: 1Panel is an open source Linux server operation and maintenance management panel. Prior to  v1.10.3-lts, there are many command injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. The mirror configuration write symbol `>` can be used to achieve arbitrary file writing. This vulnerability is fixed in  v1.10.3-lts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77, CWE-77
References: https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-f8ch-w75v-c847; https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-f8ch-w75v-c847
CVE: CVE-2024-34353
Published: 2024-05-14
Description: The matrix-sdk-crypto crate, part of the Matrix Rust SDK project, is an implementation of a Matrix end-to-end encryption state machine in Rust. In Matrix, the server-side `key backup` stores encrypted copies of Matrix message keys. This facilitates key sharing between a user's devices and provides a redundant copy in case all devices are lost. The key backup uses asymmetric
cryptography, with each server-side key backup assigned a unique public-private key pair. Due to a logic bug introduced in commit 71136e44c03c79f80d6d1a2446673bc4d53a2067, matrix-sdk-crypto version 0.7.0 will sometimes log the private part of the backup key pair to Rust debug logs (using the `tracing` crate). This issue has been resolved in matrix-sdk-crypto version 0.7.1. No known workarounds are available.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: https://crates.io/crates/matrix-sdk-crypto/0.7.1; https://github.com/matrix-org/matrix-rust-sdk/commit/71136e44c03c79f80d6d1a2446673bc4d53a2067; https://github.com/matrix-org/matrix-rust-sdk/commit/fa10bbb5dd0f9120a51aa1854cec752e25790bb0
CVE: CVE-2024-34354
Published: 2024-05-14
Description: CMSaaSStarter is a SaaS template/boilerplate built with SvelteKit, Tailwind, and Supabase. Any forks of the CMSaaSStarter template before commit 7904d416d2c72ec75f42fbf51e9e64fa74062ee6 are impacted. The issue is the user JWT Token is not verified on server session. You should take the patch 7904d416d2c72ec75f42fbf51e9e64fa74062ee6 into your fork.

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-345
References: https://github.com/CriticalMoments/CMSaasStarter/commit/7904d416d2c72ec75f42fbf51e9e64fa74062ee6; https://github.com/CriticalMoments/CMSaasStarter/pull/65; https://github.com/CriticalMoments/CMSaasStarter/security/advisories/GHSA-qgcj-9rxf-rw7q
CVE: CVE-2024-34359
Published: 2024-05-14
Description: llama-cpp-python is the Python bindings for llama.cpp. `llama-cpp-python` depends on class `Llama` in `llama.py` to load `.gguf` llama.cpp or Latency Machine Learning Models. The `__init__` constructor built in the `Llama` takes several parameters to configure the loading and running of the model. Other than `NUMA, LoRa settings`, `loading tokenizers,` and `hardware settings`, `__init__` also loads the `chat template` from targeted `.gguf` 's Metadata and furtherly parses it to `llama_chat_format.Jinja2ChatFormatter.to_chat_handler()` to construct the `self.chat_handler` for this model. Nevertheless, `Jinja2ChatFormatter` parse the `chat template` within the Metadate with sandbox-less `jinja2.Environment`, which is furthermore rendered in `__call__` to construct the `prompt` of interaction. This allows `jinja2` Server Side Template Injection which leads to remote code execution by a carefully constructed payload.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-76
References: https://github.com/abetlen/llama-cpp-python/commit/b454f40a9a1787b2b5659cd2cb00819d983185df; https://github.com/abetlen/llama-cpp-python/security/advisories/GHSA-56xg-wfcc-g829; https://github.com/abetlen/llama-cpp-python/commit/b454f40a9a1787b2b5659cd2cb00819d983185df
CVE: CVE-2024-34360
Published: 2024-05-14
Description: go-spacemesh is a Go implementation of the Spacemesh protocol full node. Nodes can publish activations transactions (ATXs) which reference the incorrect previous ATX of the Smesher that created the ATX. ATXs are expected to form a single chain from the newest to the first ATX ever published by an identity. Allowing Smeshers to reference an earlier (but not the latest) ATX as previous breaks this protocol rule and can serve as an attack vector where Nodes are rewarded for holding their PoST data for less than one epoch but still being eligible for rewards. This vulnerability is fixed in go-spacemesh 1.5.2-hotfix1 and Spacemesh API 1.37.1.
CVSS Score: 8.2 (HIGH)
CWE: CWE-754
References: https://github.com/spacemeshos/api/commit/1d5bd972bbe225d024c3e0ae5214ddb6b481716e; https://github.com/spacemeshos/go-spacemesh/commit/9aff88d54be809ac43d60e8a8b4d65359c356b87; https://github.com/spacemeshos/go-spacemesh/security/advisories/GHSA-jcqq-g64v-gcm7
CVE: CVE-2024-34365
Published: 2024-05-14
Description: ** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Karaf Cave.This issue affects all versions of Apache Karaf Cave.

As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2024/05/09/5; https://karaf.apache.org/security/cve-2024-34365.txt; http://www.openwall.com/lists/oss-security/2024/05/09/5
CVE: CVE-2024-34411
Published: 2024-05-14
Description: Unrestricted Upload of File with Dangerous Type vulnerability in Thomas Scholl canvasio3D Light.This issue affects canvasio3D Light: from n/a through 2.5.0.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-434
References: https://patchstack.com/database/vulnerability/canvasio3d-light/wordpress-canvasio3d-light-plugin-2-5-0-arbitrary-file-upload-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/canvasio3d-light/wordpress-canvasio3d-light-plugin-2-5-0-arbitrary-file-upload-vulnerability?_s_id=cve