deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-33218
Published: 2024-05-22
Description: An issue in the component AsUpIO64.sys of ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver 5.30.20.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.
CVSS Score: 7.8 (HIGH)
CWE: CWE-782
References: https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33218; https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33218
CVE: CVE-2024-33219
Published: 2024-05-22
Description: An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.
CVSS Score: 7.8 (HIGH)
CWE: CWE-782
References: https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33219; https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33219
CVE: CVE-2024-33220
Published: 2024-05-22
Description: An issue in the component AslO3_64.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-782
References: https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33220; https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33220
CVE: CVE-2024-33221
Published: 2024-05-22
Description: An issue in the component AsusBSItf.sys of ASUSTeK Computer Inc ASUS BIOS Flash Driver v3.2.12.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.
CVSS Score: 7.8 (HIGH)
CWE: CWE-782
References: https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33221; https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33221
CVE: CVE-2024-3926
Published: 2024-05-22
Description: The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom_attributes value in widgets in all versions up to, and including, 5.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/bdthemes-element-pack-lite/tags/5.6.0/modules/creative-button/widgets/creative-button.php#L648; https://plugins.trac.wordpress.org/changeset/3066178; https://www.wordfence.com/threat-intel/vulnerabilities/id/f931cf8e-01dd-4f0b-ac86-6e0654fd1597?source=cve
CVE: CVE-2024-29392
Published: 2024-05-22
Description: Silverpeas Core 6.3 is vulnerable to Cross Site Scripting (XSS) via ClipboardSessionController.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/phulelouch/48ee63a7c46078574f3b3dc9a739052c; https://gist.github.com/phulelouch/48ee63a7c46078574f3b3dc9a739052c
CVE: CVE-2024-33222
Published: 2024-05-22
Description: An issue in the component ATSZIO64.sys of ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.
CVSS Score: 8.4 (HIGH)
CWE: CWE-782
References: https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33222; https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33222
CVE: CVE-2024-33223
Published: 2024-05-22
Description: An issue in the component IOMap64.sys of ASUSTeK Computer Inc ASUS GPU TweakII v1.4.5.2 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33223; https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33223
CVE: CVE-2024-33224
Published: 2024-05-22
Description: An issue in the component rtkio64.sys of Realtek Semiconductor Corp Realtek lO Driver v1.008.0823.2017 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.
CVSS Score: 8.4 (HIGH)
CWE: CWE-269
References: https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33224; https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33224
CVE: CVE-2024-33225
Published: 2024-05-22
Description: An issue in the component RTKVHD64.sys of Realtek Semiconductor Corp Realtek(r) High Definition Audio Function Driver v6.0.9549.1 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33225; https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33225
CVE: CVE-2024-33226
Published: 2024-05-22
Description: An issue in the component Access64.sys of Wistron Corporation TBT Force Power Control v1.0.0.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-269
References: https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33226; https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33226
CVE: CVE-2024-33227
Published: 2024-05-22
Description: An issue in the component ddcdrv.sys of Nicomsoft WinI2C/DDC v3.7.4.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33227; https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33227
CVE: CVE-2024-33228
Published: 2024-05-22
Description: An issue in the component segwindrvx64.sys of Insyde Software Corp SEG Windows Driver v100.00.07.02 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.
CVSS Score: 8.4 (HIGH)
CWE: CWE-94
References: https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33228; https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33228
CVE: CVE-2024-34448
Published: 2024-05-22
Description: Ghost before 5.82.0 allows CSV Injection during a member CSV export.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://github.com/phulelouch/CVEs/blob/main/CVE-2024-34448.md; https://github.com/phulelouch/CVEs/blob/main/CVE-2024-34448.md
CVE: CVE-2024-35362
Published: 2024-05-22
Description: Ecshop 3.6 is vulnerable to Cross Site Scripting (XSS) via ecshop/article_cat.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/shopex/ecshop/issues/6; https://github.com/shopex/ecshop/issues/6
CVE: CVE-2024-5157
Published: 2024-05-22
Description: Use after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_21.html; https://issues.chromium.org/issues/336012573; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5KEVD4433KTOCYY6V4I7MMYKQ6URUS4L/
CVE: CVE-2024-5158
Published: 2024-05-22
Description: Type Confusion in V8 in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to potentially perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.1 (HIGH)
CWE: CWE-843, CWE-843
References: https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_21.html; https://issues.chromium.org/issues/338908243; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5KEVD4433KTOCYY6V4I7MMYKQ6URUS4L/
CVE: CVE-2024-5159
Published: 2024-05-22
Description: Heap buffer overflow in ANGLE in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_21.html; https://issues.chromium.org/issues/335613092; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5KEVD4433KTOCYY6V4I7MMYKQ6URUS4L/
CVE: CVE-2024-5160
Published: 2024-05-22
Description: Heap buffer overflow in Dawn in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-122
References: https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_21.html; https://issues.chromium.org/issues/338161969; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5KEVD4433KTOCYY6V4I7MMYKQ6URUS4L/
CVE: CVE-2023-20239
Published: 2024-05-22
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-20261
Published: 2024-05-22
Description: A vulnerability in the file policy feature that is used to inspect encrypted archive files of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured file policy to block an encrypted archive file. This vulnerability exists because of a logic error when a specific class of encrypted archive files is inspected. An attacker could exploit this vulnerability by sending a crafted, encrypted archive file through the affected device. A successful exploit could allow the attacker to send an encrypted archive file, which could contain malware and should have been blocked and dropped at the Cisco FTD device.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-284
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-archive-bypass-z4wQjwcN; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-archive-bypass-z4wQjwcN
CVE: CVE-2024-20293
Published: 2024-05-22
Description: A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the protection that is offered by a configured ACL on an affected device. This vulnerability is due to a logic error that occurs when an ACL changes from inactive to active in the running configuration of an affected device. An attacker could exploit this vulnerability by sending traffic through the affected device that should be denied by the configured ACL. The reverse condition is also true—traffic that should be permitted could be denied by the configured ACL. A successful exploit could allow the attacker to bypass configured ACL protections on the affected device, allowing the attacker to access trusted networks that the device might be protecting. Note: This vulnerability applies to both IPv4 and IPv6 traffic as well as dual-stack ACL configurations in which both IPv4 and IPv6 ACLs are configured on an interface.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-436
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ogsnsg-aclbyp-3XB8q6jX; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ogsnsg-aclbyp-3XB8q6jX
CVE: CVE-2024-20355
Published: 2024-05-22
Description: A vulnerability in the implementation of SAML 2.0 single sign-on (SSO) for remote access VPN services in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to successfully establish a VPN session on an affected device. This vulnerability is due to improper separation of authorization domains when using SAML authentication. An attacker could exploit this vulnerability by using valid credentials to successfully authenticate using their designated connection profile (tunnel group), intercepting the SAML SSO token that is sent back from the Cisco ASA device, and then submitting the same SAML SSO token to a different tunnel group for authentication. A successful exploit could allow the attacker to establish a remote access VPN session using a connection profile that they are not authorized to use and connect to secured networks behind the affected device that they are not authorized to access. For successful exploitation, the attacker must have valid remote access VPN user credentials.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-862
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-saml-bypass-KkNvXyKW; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-saml-bypass-KkNvXyKW
CVE: CVE-2024-20361
Published: 2024-05-22
Description: A vulnerability in the Object Groups for Access Control Lists (ACLs) feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass configured access controls on managed devices that are running Cisco Firepower Threat Defense (FTD) Software. This vulnerability is due to the incorrect deployment of the Object Groups for ACLs feature from Cisco FMC Software to managed FTD devices in high-availability setups. After an affected device is rebooted following Object Groups for ACLs deployment, an attacker can exploit this vulnerability by sending traffic through the affected device. A successful exploit could allow the attacker to bypass configured access controls and successfully send traffic to devices that are expected to be protected by the affected device.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-object-bypass-fTH8tDjq; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-object-bypass-fTH8tDjq
CVE: CVE-2024-20363
Published: 2024-05-22
Description: Multiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System (IPS) rule engine that could allow an unauthenticated, remote attacker to bypass the configured rules on an affected system. This vulnerability is due to incorrect HTTP packet handling. An attacker could exploit this vulnerability by sending crafted HTTP packets through an affected device. A successful exploit could allow the attacker to bypass configured IPS rules and allow uninspected traffic onto the network.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-290, CWE-290
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-ips-bypass-uE69KBMd; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-ips-bypass-uE69KBMd
CVE: CVE-2024-36077
Published: 2024-05-22
Description: Qlik Sense Enterprise for Windows before 14.187.4 allows a remote attacker to elevate their privilege due to improper validation. The attacker can elevate their privilege to the internal system role, which allows them to execute commands on the server. This affects February 2024 Patch 3 (14.173.3 through 14.173.7), November 2023 Patch 8 (14.159.4 through 14.159.13), August 2023 Patch 13 (14.139.3 through 14.139.20), May 2023 Patch 15 (14.129.3 through 14.129.22), February 2023 Patch 13 (14.113.1 through 14.113.18), November 2022 Patch 13 (14.97.2 through 14.97.18), August 2022 Patch 16 (14.78.3 through 14.78.23), and May 2022 Patch 17 (14.67.7 through 14.67.31). This has been fixed in May 2024 (14.187.4), February 2024 Patch 4 (14.173.8), November 2023 Patch 9 (14.159.14), August 2023 Patch 14 (14.139.21), May 2023 Patch 16 (14.129.23), February 2023 Patch 14 (14.113.19), November 2022 Patch 14 (14.97.19), August 2022 Patch 17 (14.78.25), and May 2022 Patch 18 (14.67.34).
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://community.qlik.com/t5/Official-Support-Articles/High-Severity-Security-fixes-for-Qlik-Sense-Enterprise-for/ta-p/2452509; https://community.qlik.com/t5/Official-Support-Articles/High-Severity-Security-fixes-for-Qlik-Sense-Enterprise-for/ta-p/2452509
CVE: CVE-2024-4563
Published: 2024-05-22
Description: The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-327
References: https://community.progress.com/s/article/MOVEit-Automation-Vulnerability-CVE-2024-4563-May-22-2024; https://www.progress.com/moveit; https://community.progress.com/s/article/MOVEit-Automation-Vulnerability-CVE-2024-4563-May-22-2024
CVE: CVE-2024-5166
Published: 2024-05-22
Description: An Insecure Direct Object Reference in Google Cloud's Looker allowed metadata exposure across authenticated Looker users sharing the same LookML model.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://cloud.google.com/looker/docs/best-practices/query-id-update-instructions; https://cloud.google.com/looker/docs/best-practices/query-id-update-instructions
CVE: CVE-2024-20360
Published: 2024-05-22
Description: A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability exists because the web-based management interface does not adequately validate user input. An attacker could exploit this vulnerability by authenticating to the application and sending crafted SQL queries to an affected system. A successful exploit could allow the attacker to obtain any data from the database, execute arbitrary commands on the underlying operating system, and elevate privileges to root. To exploit this vulnerability, an attacker would need at least Read Only user credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sqli-WFFDnNOs; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sqli-WFFDnNOs
CVE: CVE-2024-21791
Published: 2024-05-22
Description: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. 
Note: Non-admin users cannot exploit this vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html; https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html
CVE: CVE-2024-29421
Published: 2024-05-22
Description: xmedcon 0.23.0 and fixed in v.0.24.0 is vulnerable to Buffer Overflow via libs/dicom/basic.c which allows an attacker to execute arbitrary code.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-121
References: https://github.com/SpikeReply/advisories/blob/530dbd7ce68600a22c47dd1bcbe360220feda1d9/cve/xmedcon/cve-2024-29421.md; https://github.com/SpikeReply/advisories/blob/530dbd7ce68600a22c47dd1bcbe360220feda1d9/cve/xmedcon/cve-2024-29421.md
CVE: CVE-2024-31617
Published: 2024-05-22
Description: OpenLiteSpeed before 1.8.1 mishandles chunked encoding.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-770
References: https://github.com/litespeedtech/openlitespeed/releases/tag/v1.8.1; https://github.com/litespeedtech/openlitespeed/releases/tag/v1.8.1
CVE: CVE-2024-25737
Published: 2024-05-22
Description: A Server-Side Request Forgery (SSRF) vulnerability in the /Cover/Show route (showAction in CoverController.php) in Open Library Foundation VuFind 2.4 through 9.1 before 9.1.1 allows remote attackers to access internal HTTP servers and perform Cross-Site Scripting (XSS) attacks by proxying arbitrary URLs via the proxy GET parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/vufind-org/vufind/commit/345d00f7d7f1c581f46742effdac70e803b3847b; https://github.com/vufind-org/vufind/commit/51f2ddac0dc1047e6fd3b27e6d984b19e1601d00; https://vufind.org/wiki/security:cve-2024-25737
CVE: CVE-2024-25738
Published: 2024-05-22
Description: A Server-Side Request Forgery (SSRF) vulnerability in the /Upgrade/FixConfig route in Open Library Foundation VuFind 2.0 through 9.1 before 9.1.1 allows a remote attacker to overwrite local configuration files to gain access to the administrator panel and achieve Remote Code Execution. A mitigating factor is that it requires the allow_url_include PHP runtime setting to be on, which is off in default installations. It also requires the /Upgrade route to be exposed, which is exposed by default after installing VuFind, and is recommended to be disabled by setting autoConfigure to false in config.ini.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: https://vufind.org/wiki/security:cve-2024-25738; https://vufind.org/wiki/security:cve-2024-25738
CVE: CVE-2024-31893
Published: 2024-05-22
Description: IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive calendar information using an expired access token.  IBM X-Force ID:  288174.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-324, CWE-672
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/288174; https://www.ibm.com/support/pages/node/7154606; https://exchange.xforce.ibmcloud.com/vulnerabilities/288174
CVE: CVE-2024-31904
Published: 2024-05-22
Description: IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 integration nodes could allow an authenticated user to cause a denial of service due to an uncaught exception.  IBM X-Force ID:  289647.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-248
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/289647; https://www.ibm.com/support/pages/node/7154607; https://exchange.xforce.ibmcloud.com/vulnerabilities/289647
CVE: CVE-2024-35627
Published: 2024-05-22
Description: tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /data/v3/?key.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/SaleSlave/e23d49e7f8eb937784d15c2c2fc34fca; https://gist.github.com/SaleSlave/e23d49e7f8eb937784d15c2c2fc34fca
CVE: CVE-2023-51636
Published: 2024-05-22
Description: Avira Prime Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avira Prime. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The specific flaw exists within the Avira Spotlight Service. By creating a symbolic link, an attacker can abuse the service to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-21600.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://www.zerodayinitiative.com/advisories/ZDI-24-469/; https://www.zerodayinitiative.com/advisories/ZDI-24-469/
CVE: CVE-2023-51637
Published: 2024-05-22
Description: Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante PACS Server PG. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the implementation of the DICOM service, which listens on TCP port 11122 by default. When parsing the NAME element of the PATIENT record, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of NETWORK SERVICE. Was ZDI-CAN-21579.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.zerodayinitiative.com/advisories/ZDI-24-468/; https://www.zerodayinitiative.com/advisories/ZDI-24-468/