deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-20833
Published: 2024-03-05
Description: Use after free vulnerability in pub_crypto_recv_msg prior to SMR Mar-2024 Release 1 due to race condition allows local attackers with system privilege to cause memory corruption.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-416
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03; https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03
CVE: CVE-2024-26333
Published: 2024-03-05
Description: swftools v0.9.2 was discovered to contain a segmentation violation via the function free_lines at swftools/lib/modules/swfshape.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/matthiaskramm/swftools/issues/219; https://github.com/matthiaskramm/swftools/issues/219
CVE: CVE-2024-26334
Published: 2024-03-05
Description: swftools v0.9.2 was discovered to contain a segmentation violation via the function compileSWFActionCode at swftools/lib/action/actioncompiler.c.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-125
References: https://github.com/matthiaskramm/swftools/issues/221; https://github.com/matthiaskramm/swftools/issues/221
CVE: CVE-2024-26335
Published: 2024-03-05
Description: swftools v0.9.2 was discovered to contain a segmentation violation via the function state_free at swftools/src/swfc-history.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/matthiaskramm/swftools/issues/222; https://github.com/matthiaskramm/swftools/issues/222
CVE: CVE-2024-26337
Published: 2024-03-05
Description: swftools v0.9.2 was discovered to contain a segmentation violation via the function s_font at swftools/src/swfc.c.
CVSS Score: 4.3 (MEDIUM)
References: https://github.com/matthiaskramm/swftools/issues/223; https://github.com/matthiaskramm/swftools/issues/223
CVE: CVE-2024-26339
Published: 2024-03-05
Description: swftools v0.9.2 was discovered to contain a strcpy parameter overlap via /home/swftools/src/swfc+0x48318a.
CVSS Score: 9.1 (CRITICAL)
References: https://github.com/matthiaskramm/swftools/issues/225; https://github.com/matthiaskramm/swftools/issues/225
CVE: CVE-2023-5456
Published: 2024-03-05
Description: A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows a remote unauthenticated attacker to access the database service and all included data with the same privileges of the web application. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
CVSS Score: 8.1 (HIGH)
CWE: CWE-798, CWE-798
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-5456; https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-5456
CVE: CVE-2022-48630
Published: 2024-03-05
Description: In the Linux kernel, the following vulnerability has been resolved:

crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ

The commit referenced in the Fixes tag removed the 'break' from the else
branch in qcom_rng_read(), causing an infinite loop whenever 'max' is
not a multiple of WORD_SZ. This can be reproduced e.g. by running:

    kcapi-rng -b 67 >/dev/null

There are many ways to fix this without adding back the 'break', but
they all seem more awkward than simply adding it back, so do just that.

Tested on a machine with Qualcomm Amberwing processor.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://git.kernel.org/stable/c/05d4d17475d8d094c519bb51658bc47899c175e3; https://git.kernel.org/stable/c/16287397ec5c08aa58db6acf7dbc55470d78087d; https://git.kernel.org/stable/c/233a3cc60e7a8fe0be8cf9934ae7b67ba25a866c
CVE: CVE-2023-45591
Published: 2024-03-05
Description: A CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the “Ax_rtu” binary allows a remote authenticated attacker to trigger a memory corruption in the context of the binary. This may result in a Denial-of-Service (DoS) condition, possibly in the execution of arbitrary code with the same privileges of the process (root), or have other unspecified impacts on the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-122, CWE-787
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45591; https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45591
CVE: CVE-2023-45592
Published: 2024-03-05
Description: A CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser (due to the binary being executed with the “--no-sandbox” option and with root privileges) exacerbates the impacts of successful attacks executed against the browser. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-250
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45592; https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45592
CVE: CVE-2023-45593
Published: 2024-03-05
Description: A CWE-184 “Incomplete List of Disallowed Inputs” vulnerability in the embedded Chromium browser (concerning the handling of alternative URLs, other than “ http://localhost” ) allows a physical attacker to read arbitrary files on the file system, alter the configuration of the embedded browser, and have other unspecified impacts to the confidentiality, integrity, and availability of the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-184
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45593; https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45593
CVE: CVE-2023-45594
Published: 2024-03-05
Description: A CWE-552 “Files or Directories Accessible to External Parties” vulnerability in the embedded Chromium browser allows a physical attacker to arbitrarily download/upload files to/from the file system, with unspecified impacts to the confidentiality, integrity, and availability of the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-552, CWE-552
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45594; https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45594
CVE: CVE-2023-45595
Published: 2024-03-05
Description: A CWE-434 “Unrestricted Upload of File with Dangerous Type” vulnerability in the “file_configuration” functionality of the web application allows a remote authenticated attacker to upload any arbitrary type of file into the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45595; https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45595
CVE: CVE-2023-45596
Published: 2024-03-05
Description: A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the web application allows a remote unauthenticated attacker to access confidential configuration files. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-425, CWE-425
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45596; https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45596
CVE: CVE-2023-45597
Published: 2024-03-05
Description: A CWE-1236 “Improper Neutralization of Formula Elements in a CSV File” vulnerability in the “file_configuration” functionality of the web application (concerning the function “export_file”) allows a remote authenticated attacker to inject arbitrary formulas inside generated CSV files. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-1236, CWE-1236
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45597; https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45597
CVE: CVE-2023-45598
Published: 2024-03-05
Description: A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “measure” functionality of the web application allows a remote unauthenticated attacker to access confidential measure information. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-425, CWE-425
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45598; https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45598
CVE: CVE-2023-45599
Published: 2024-03-05
Description: A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web application allows a remote authenticated attacker to upload any arbitrary type of file into the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-646, CWE-434
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45599; https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45599
CVE: CVE-2023-45600
Published: 2024-03-05
Description: A CWE-613 “Insufficient Session Expiration” vulnerability in the web application, due to the session cookie “sessionid” lasting two weeks, facilitates session hijacking attacks against victims. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-613, CWE-613
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45600; https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45600
CVE: CVE-2023-5457
Published: 2024-03-05
Description: A CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web framework used by the web application (due to the “debug” configuration parameter set to “True”) allows a remote unauthenticated attacker to access critical information and have other unspecified impacts to the confidentiality, integrity, and availability of the application. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1269
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-5457; https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-5457
CVE: CVE-2023-7103
Published: 2024-03-05
Description: Authentication Bypass by Primary Weakness vulnerability in ZKSoftware Biometric Security Solutions UFace 5 allows Authentication Bypass.This issue affects UFace 5: through 12022024.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-305
References: https://www.usom.gov.tr/bildirim/tr-24-0173; https://www.usom.gov.tr/bildirim/tr-24-0173
CVE: CVE-2024-2188
Published: 2024-03-05
Description: Cross-Site Scripting (XSS) vulnerability stored in TP-Link Archer AX50 affecting firmware version 1.0.11 build 2022052. This vulnerability could allow an unauthenticated attacker to create a port mapping rule via a SOAP request and store a malicious JavaScript payload within that rule, which could result in an execution of the JavaScript payload when the rule is loaded.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-tp-link-archer-ax50; https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-tp-link-archer-ax50
CVE: CVE-2024-27622
Published: 2024-03-05
Description: A remote code execution vulnerability has been identified in the User Defined Tags module of CMS Made Simple version 2.2.19 / 2.2.21. This vulnerability arises from inadequate sanitization of user-supplied input in the 'Code' section of the module. As a result, authenticated users with administrative privileges can inject and execute arbitrary PHP code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-75, CWE-94
References: https://github.com/capture0x/CMSMadeSimple/; https://packetstormsecurity.com/files/177241/CMS-Made-Simple-2.2.19-Remote-Code-Execution.html; https://github.com/capture0x/CMSMadeSimple/
CVE: CVE-2024-27623
Published: 2024-03-05
Description: CMS Made Simple version 2.2.19 is vulnerable to Server-Side Template Injection (SSTI). The vulnerability exists within the Design Manager, particularly when editing the Breadcrumbs.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-1336
References: https://github.com/capture0x/CMSMadeSimple2; https://github.com/capture0x/CMSMadeSimple2; https://www.vicarius.io/vsociety/posts/pwning-cmsms-via-user-defined-tags-for-fun-and-learning-cve-2024-27622-27623
CVE: CVE-2024-27625
Published: 2024-03-05
Description: CMS Made Simple Version 2.2.19 is vulnerable to Cross Site Scripting (XSS). This vulnerability resides in the File Manager module of the admin panel. Specifically, the issue arises due to inadequate sanitization of user input in the "New directory" field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/177243/CMS-Made-Simple-2.2.19-Cross-Site-Scripting.html; https://packetstormsecurity.com/files/177243/CMS-Made-Simple-2.2.19-Cross-Site-Scripting.html
CVE: CVE-2024-27627
Published: 2024-03-05
Description: A reflected cross-site scripting (XSS) vulnerability exists in SuperCali version 1.1.0, allowing remote attackers to execute arbitrary JavaScript code via the email parameter in the bad_password.php page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-94
References: https://packetstormsecurity.com/files/177254/SuperCali-1.1.0-Cross-Site-Scripting.html; https://packetstormsecurity.com/files/177254/SuperCali-1.1.0-Cross-Site-Scripting.html
CVE: CVE-2022-46088
Published: 2024-03-05
Description: Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the feedback form.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/ASR511-OO7/CVE-2022-46088/blob/main/CVE-36; https://packetstormsecurity.com; https://github.com/ASR511-OO7/CVE-2022-46088/blob/main/CVE-36
CVE: CVE-2024-24098
Published: 2024-03-05
Description: Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://code-projects.org/scholars-tracking-system-in-php-with-source-code/; https://github.com/ASR511-OO7/CVE-2024-24098/blob/main/CVE-13; https://code-projects.org/scholars-tracking-system-in-php-with-source-code/
CVE: CVE-2024-27561
Published: 2024-03-05
Description: A Server-Side Request Forgery (SSRF) in the installUpdateThemePluginAction function of WonderCMS v3.1.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the installThemePlugin parameter.
CVSS Score: 8.1 (HIGH)
CWE: CWE-918, CWE-918
References: https://github.com/zer0yu/CVE_Request/blob/master/WonderCMS/wondercms_installUpdateThemePluginAction_plugins.md; https://github.com/zer0yu/CVE_Request/blob/master/WonderCMS/wondercms_installUpdateThemePluginAction_plugins.md
CVE: CVE-2024-27563
Published: 2024-03-05
Description: A Server-Side Request Forgery (SSRF) in the getFileFromRepo function of WonderCMS v3.1.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the pluginThemeUrl parameter.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://github.com/zer0yu/CVE_Request/blob/master/WonderCMS/wondercms_pluginThemeUrl.md; https://github.com/zer0yu/CVE_Request/blob/master/WonderCMS/wondercms_pluginThemeUrl.md
CVE: CVE-2024-27564
Published: 2024-03-05
Description: pictureproxy.php in the dirk1983 mm1.ltd source code f9f4bbc allows SSRF via the url parameter. NOTE: the references section has an archived copy of pictureproxy.php from its original GitHub location, but the repository name might later change because it is misleading.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://github.com/dirk1983/chatgpt/issues/114; https://web.archive.org/save/https://github.com/dirk1983/chatgpt/blob/f9f4bbc99eed7210b291ec116bd57b3d8276bee5/README.md; https://web.archive.org/save/https://github.com/dirk1983/chatgpt/issues/114
CVE: CVE-2024-27565
Published: 2024-03-05
Description: A Server-Side Request Forgery (SSRF) in weixin.php of ChatGPT-wechat-personal commit a0857f6 allows attackers to force the application to make arbitrary requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://github.com/dirk1983/chatgpt-wechat-personal/issues/4; https://github.com/dirk1983/chatgpt-wechat-personal/issues/4
CVE: CVE-2024-27929
Published: 2024-03-05
Description: ImageSharp is a managed, cross-platform, 2D graphics library. A heap-use-after-free flaw was found in ImageSharp's InitializeImage() function of PngDecoderCore.cs file. This vulnerability is triggered when an attacker passes a specially crafted PNG image file to ImageSharp for conversion, potentially leading to information disclosure. This issue has been patched in versions 3.1.3 and 2.1.7.
CVSS Score: 7.1 (HIGH)
CWE: CWE-416, CWE-416
References: https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-65x7-c272-7g7r; https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-65x7-c272-7g7r
CVE: CVE-2024-27931
Published: 2024-03-05
Description: Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. Insufficient validation of parameters in `Deno.makeTemp*` APIs would allow for creation of files outside of the allowed directories. This may allow the user to overwrite important files on the system that may affect other systems. A user may provide a prefix or suffix to a `Deno.makeTemp*` API containing path traversal characters. This is fixed in Deno 1.41.1.


CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: https://github.com/denoland/deno/security/advisories/GHSA-hrqr-jv8w-v9jh; https://github.com/denoland/deno/security/advisories/GHSA-hrqr-jv8w-v9jh
CVE: CVE-2024-22252
Published: 2024-03-05
Description: VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-416, CWE-416
References: https://www.vmware.com/security/advisories/VMSA-2024-0006.html; https://www.vmware.com/security/advisories/VMSA-2024-0006.html
CVE: CVE-2024-22253
Published: 2024-03-05
Description: VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-416
References: https://www.vmware.com/security/advisories/VMSA-2024-0006.html; https://www.vmware.com/security/advisories/VMSA-2024-0006.html
CVE: CVE-2024-22254
Published: 2024-03-05
Description: VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.












CVSS Score: 7.9 (HIGH)
CWE: CWE-787
References: https://www.vmware.com/security/advisories/VMSA-2024-0006.html; https://www.vmware.com/security/advisories/VMSA-2024-0006.html
CVE: CVE-2024-22255
Published: 2024-03-05
Description: VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malicious actor with administrative access to a virtual machine may be able to exploit this issue to leak memory from the vmx process.  












CVSS Score: 7.1 (HIGH)
CWE: CWE-770
References: https://www.vmware.com/security/advisories/VMSA-2024-0006.html; https://www.vmware.com/security/advisories/VMSA-2024-0006.html
CVE: CVE-2022-22399
Published: 2024-03-05
Description: IBM Aspera Faspex 5.0.0 and 5.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.  This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking.  IBM X-Force ID:  222562.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-644, CWE-116
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/222562; https://www.ibm.com/support/pages/node/6618959; https://exchange.xforce.ibmcloud.com/vulnerabilities/222562
CVE: CVE-2023-25681
Published: 2024-03-05
Description: LDAP users on IBM Spectrum Virtualize 8.5 which are configured to require multifactor authentication can still authenticate to the CIM interface using only username and password. This does not affect local users with MFA configured or remote users authenticating via single sign-on.  IBM X-Force ID:  247033.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-308
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/247033; https://www.ibm.com/support/pages/node/6962203; https://exchange.xforce.ibmcloud.com/vulnerabilities/247033
CVE: CVE-2023-26282
Published: 2024-03-05
Description: IBM Watson CP4D Data Stores 4.6.0 through 4.6.3 could allow a user with physical access and specific knowledge of the system to modify files or data on the system.  IBM X-Force ID:  248415.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-73
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/248415; https://https://www.ibm.com/support/pages/node/6965452; https://exchange.xforce.ibmcloud.com/vulnerabilities/248415
CVE: CVE-2024-23225
Published: 2024-03-05
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/120880; https://support.apple.com/en-us/120881; https://support.apple.com/en-us/120882
CVE: CVE-2024-23243
Published: 2024-03-05
Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4. An app may be able to read sensitive location information.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/en-us/120893; http://seclists.org/fulldisclosure/2024/Mar/18; https://support.apple.com/en-us/HT214081
CVE: CVE-2024-23256
Published: 2024-03-05
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4. A user's locked tabs may be briefly visible while switching tab groups when Locked Private Browsing is enabled.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/en-us/120893; http://seclists.org/fulldisclosure/2024/Mar/18; https://support.apple.com/en-us/HT214081
CVE: CVE-2024-23296
Published: 2024-03-05
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.7, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/120881; https://support.apple.com/en-us/120882; https://support.apple.com/en-us/120883
CVE: CVE-2024-2055
Published: 2024-03-05
Description: The "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities. When the feature is enabled, it does not require authentication by default, and runs as the root user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288, CWE-552
References: http://seclists.org/fulldisclosure/2024/Mar/13; https://korelogic.com/Resources/Advisories/KL-001-2024-003.txt; http://seclists.org/fulldisclosure/2024/Mar/13