deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-1881
Published: 2024-06-06
Description: AutoGPT, a component of significant-gravitas/autogpt, is vulnerable to an improper neutralization of special elements used in an OS command ('OS Command Injection') due to a flaw in its shell command validation function. Specifically, the vulnerability exists in versions v0.5.0 up to but not including 5.1.0. The issue arises from the application's method of validating shell commands against an allowlist or denylist, where it only checks the first word of the command. This allows an attacker to bypass the intended restrictions by crafting commands that are executed despite not being on the allowlist or by including malicious commands not present in the denylist. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary shell commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/significant-gravitas/autogpt/commit/26324f29849967fa72c207da929af612f1740669; https://huntr.com/bounties/416c4a8b-36ba-4bbc-850a-a2f978b0fac8; https://github.com/significant-gravitas/autogpt/commit/26324f29849967fa72c207da929af612f1740669
CVE: CVE-2024-22326
Published: 2024-06-06
Description: IBM System Storage DS8900F 89.22.19.0, 89.30.68.0, 89.32.40.0, 89.33.48.0, 89.40.83.0, and 89.40.93.0 could allow a remote user to create an LDAP connection with a valid username and empty password to establish an anonymous connection.    IBM X-Force ID:  279518.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/279518; https://www.ibm.com/support/pages/node/7156621; https://exchange.xforce.ibmcloud.com/vulnerabilities/279518
CVE: CVE-2024-23793
Published: 2024-06-06
Description: The file upload feature in OTRS and ((OTRS)) Community Edition has a path traversal vulnerability. This issue permits authenticated agents or customer users to upload potentially harmful files to directories accessible by the web server, potentially leading to the execution of local code like Perl scripts.
This issue affects OTRS: from 7.0.X through 7.0.49, 8.0.X, 2023.X, from 2024.X through 2024.3.2; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34.


CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22
References: https://otrs.com/release-notes/otrs-security-advisory-2024-05/; https://otrs.com/release-notes/otrs-security-advisory-2024-05/
CVE: CVE-2024-2032
Published: 2024-06-06
Description: A race condition vulnerability exists in zenml-io/zenml versions up to and including 0.55.3, which allows for the creation of multiple users with the same username when requests are sent in parallel. This issue was fixed in version 0.55.5. The vulnerability arises due to insufficient handling of concurrent user creation requests, leading to data inconsistencies and potential authentication problems. Specifically, concurrent processes may overwrite or corrupt user data, complicating user identification and posing security risks. This issue is particularly concerning for APIs that rely on usernames as input parameters, such as PUT /api/v1/users/test_race, where it could lead to further complications.
CVSS Score: 3.1 (LOW)
CWE: CWE-366, CWE-362
References: https://github.com/zenml-io/zenml/commit/afcaf741ef9114c9b32f722f101b97de3d8d147b; https://huntr.com/bounties/6199cd5d-611f-4ea9-96c5-52a952ba5a56; https://github.com/zenml-io/zenml/commit/afcaf741ef9114c9b32f722f101b97de3d8d147b
CVE: CVE-2024-2035
Published: 2024-06-06
Description: An improper authorization vulnerability exists in the zenml-io/zenml repository, specifically within the API PUT /api/v1/users/id endpoint. This vulnerability allows any authenticated user to modify the information of other users, including changing the `active` status of user accounts to false, effectively deactivating them. This issue affects version 0.55.3 and was fixed in version 0.56.2. The impact of this vulnerability is significant as it allows for the deactivation of admin accounts, potentially disrupting the functionality and security of the application.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://github.com/zenml-io/zenml/commit/b95f083efffa56831cd41d8ed536aeb0b6038fa3; https://huntr.com/bounties/1cfc6493-082e-4229-9f2f-496801a6557c; https://github.com/zenml-io/zenml/commit/b95f083efffa56831cd41d8ed536aeb0b6038fa3
CVE: CVE-2024-2171
Published: 2024-06-06
Description: A stored Cross-Site Scripting (XSS) vulnerability was identified in the zenml-io/zenml repository, specifically within the 'logo_url' field. By injecting malicious payloads into this field, an attacker could send harmful messages to other users, potentially compromising their accounts. The vulnerability affects version 0.55.3 and was fixed in version 0.56.2. The impact of exploiting this vulnerability could lead to user account compromise.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/zenml-io/zenml/commit/68bcb3ba60cba9729c9713a49c39502d40fb945e; https://huntr.com/bounties/cee06a28-7e3b-460b-b504-69add838ebe8; https://github.com/zenml-io/zenml/commit/68bcb3ba60cba9729c9713a49c39502d40fb945e
CVE: CVE-2024-2213
Published: 2024-06-06
Description: An issue was discovered in zenml-io/zenml versions up to and including 0.55.4. Due to improper authentication mechanisms, an attacker with access to an active user session can change the account password without needing to know the current password. This vulnerability allows for unauthorized account takeover by bypassing the standard password change verification process. The issue was fixed in version 0.56.3.
CVSS Score: 3.3 (LOW)
CWE: CWE-620
References: https://github.com/zenml-io/zenml/commit/58cb3d987372c91eb605853c[PII_REDACTED]3337c2; https://huntr.com/bounties/8f5534ac-fd08-4b8b-8c2e-35949aa36e48; https://github.com/zenml-io/zenml/commit/58cb3d987372c91eb605853c[PII_REDACTED]3337c2
CVE: CVE-2024-2288
Published: 2024-06-06
Description: A Cross-Site Request Forgery (CSRF) vulnerability exists in the profile picture upload functionality of the Lollms application, specifically in the parisneo/lollms-webui repository, affecting versions up to 7.3.0. This vulnerability allows attackers to change a victim's profile picture without their consent, potentially leading to a denial of service by overloading the filesystem with files. Additionally, this flaw can be exploited to perform a stored cross-site scripting (XSS) attack, enabling attackers to execute arbitrary JavaScript in the context of the victim's browser session. The issue is resolved in version 9.3.
CVSS Score: 8.3 (HIGH)
CWE: CWE-352
References: https://github.com/parisneo/lollms-webui/commit/ed085e6effab2b1e25ba2b00366a16ff67d8551b; https://huntr.com/bounties/2a37ae0c-890a-401a-8f3c-a261f3006290; https://github.com/parisneo/lollms-webui/commit/ed085e6effab2b1e25ba2b00366a16ff67d8551b
CVE: CVE-2024-2359
Published: 2024-06-06
Description: A vulnerability in the parisneo/lollms-webui version 9.3 allows attackers to bypass intended access restrictions and execute arbitrary code. The issue arises from the application's handling of the `/execute_code` endpoint, which is intended to be blocked from external access by default. However, attackers can exploit the `/update_setting` endpoint, which lacks proper access control, to modify the `host` configuration at runtime. By changing the `host` setting to an attacker-controlled value, the restriction on the `/execute_code` endpoint can be bypassed, leading to remote code execution. This vulnerability is due to improper neutralization of special elements used in an OS command (`Improper Neutralization of Special Elements used in an OS Command`).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://huntr.com/bounties/62144831-8d4b-4cf2-9737-5e559f7bc67e; https://huntr.com/bounties/62144831-8d4b-4cf2-9737-5e559f7bc67e
CVE: CVE-2024-2360
Published: 2024-06-06
Description: parisneo/lollms-webui is vulnerable to path traversal attacks that can lead to remote code execution due to insufficient sanitization of user-supplied input in the 'Database path' and 'PDF LaTeX path' settings. An attacker can exploit this vulnerability by manipulating these settings to execute arbitrary code on the targeted server. The issue affects the latest version of the software. The vulnerability stems from the application's handling of the 'discussion_db_name' and 'pdf_latex_path' parameters, which do not properly validate file paths, allowing for directory traversal. This vulnerability can also lead to further file exposure and other attack vectors by manipulating the 'discussion_db_name' parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-29, CWE-22
References: https://huntr.com/bounties/65d0ef59-a761-4bbd-86fa-dd8e8621082e; https://huntr.com/bounties/65d0ef59-a761-4bbd-86fa-dd8e8621082e
CVE: CVE-2024-2362
Published: 2024-06-06
Description: A path traversal vulnerability exists in the parisneo/lollms-webui version 9.3 on the Windows platform. Due to improper validation of file paths between Windows and Linux environments, an attacker can exploit this vulnerability to delete any file on the system. The issue arises from the lack of adequate sanitization of user-supplied input in the 'del_preset' endpoint, where the application fails to prevent the use of absolute paths or directory traversal sequences ('..'). As a result, an attacker can send a specially crafted request to the 'del_preset' endpoint to delete files outside of the intended directory.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-36, CWE-22
References: https://huntr.com/bounties/2433d0a4-9ba0-474b-be1a-6fd5019770ba; https://huntr.com/bounties/2433d0a4-9ba0-474b-be1a-6fd5019770ba
CVE: CVE-2024-2383
Published: 2024-06-06
Description: A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5 due to the application's failure to set appropriate X-Frame-Options or Content-Security-Policy HTTP headers. This vulnerability allows an attacker to embed the application UI within an iframe on a malicious page, potentially leading to unauthorized actions by tricking users into interacting with the interface under the attacker's control. The issue was addressed in version 0.56.3.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-1021
References: https://github.com/zenml-io/zenml/commit/f863fde1269bc355951f8cfc826c0244d88ad5e9; https://huntr.com/bounties/22d26f5a-c0ae-4344-aa7d-08ff5ada3963; https://github.com/zenml-io/zenml/commit/f863fde1269bc355951f8cfc826c0244d88ad5e9
CVE: CVE-2024-2548
Published: 2024-06-06
Description: A path traversal vulnerability exists in the parisneo/lollms-webui application, specifically within the `lollms_core/lollms/server/endpoints/lollms_binding_files_server.py` and `lollms_core/lollms/security.py` files. Due to inadequate validation of file paths between Windows and Linux environments using `Path(path).is_absolute()`, attackers can exploit this flaw to read any file on the system. This issue affects the latest version of LoLLMs running on the Windows platform. The vulnerability is triggered when an attacker sends a specially crafted request to the `/user_infos/{path:path}` endpoint, allowing the reading of arbitrary files, as demonstrated with the `win.ini` file. The issue has been addressed in version 9.5 of the software.
CVSS Score: 7.5 (HIGH)
CWE: CWE-36, CWE-22
References: https://github.com/parisneo/lollms-webui/commit/49b0332e98d42dd5204dda53dee410b160106265; https://huntr.com/bounties/65979513-db0d-46fd-9977-fcd73bcd8a41; https://github.com/parisneo/lollms-webui/commit/49b0332e98d42dd5204dda53dee410b160106265
CVE: CVE-2024-2624
Published: 2024-06-06
Description: A path traversal and arbitrary file upload vulnerability exists in the parisneo/lollms-webui application, specifically within the `@router.get("/switch_personal_path")` endpoint in `./lollms-webui/lollms_core/lollms/server/endpoints/lollms_user.py`. The vulnerability arises due to insufficient sanitization of user-supplied input for the `path` parameter, allowing an attacker to specify arbitrary file system paths. This flaw enables direct arbitrary file uploads, leakage of `personal_data`, and overwriting of configurations in `lollms-webui`->`configs` by exploiting the same named directory in `personal_data`. The issue affects the latest version of the application and is fixed in version 9.4. Successful exploitation could lead to sensitive information disclosure, unauthorized file uploads, and potentially remote code execution by overwriting critical configuration files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-29, CWE-22
References: https://github.com/parisneo/lollms-webui/commit/aeba79f3ea934331b8ecd625a58bae6e4f7e7d3f; https://huntr.com/bounties/39e17897-0e92-4473-91c7-f728322191aa; https://github.com/parisneo/lollms-webui/commit/aeba79f3ea934331b8ecd625a58bae6e4f7e7d3f
CVE: CVE-2024-2928
Published: 2024-06-06
Description: A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../'. An attacker can exploit this flaw by manipulating the fragment part of the URI to read arbitrary files on the local file system, including sensitive files like '/etc/passwd'. The vulnerability is a bypass to a previous patch that only addressed similar manipulation within the URI's query string, highlighting the need for comprehensive validation of all parts of a URI to prevent LFI attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-29, CWE-22
References: https://github.com/mlflow/mlflow/commit/96f0b573a73d8eedd6735a2ce26e08859527be07; https://huntr.com/bounties/19bf02d7-6393-4a95-b9d0-d6d4d2d8c298; https://github.com/mlflow/mlflow/commit/96f0b573a73d8eedd6735a2ce26e08859527be07
CVE: CVE-2024-2965
Published: 2024-06-06
Description: A Denial-of-Service (DoS) vulnerability exists in the `SitemapLoader` class of the `langchain-ai/langchain` repository, affecting all versions. The `parse_sitemap` method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap itself. This oversight allows for the possibility of an infinite loop, leading to a crash by exceeding the maximum recursion depth in Python. This vulnerability can be exploited to occupy server socket/port resources and crash the Python process, impacting the availability of services relying on this functionality.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-674, CWE-674
References: https://github.com/langchain-ai/langchain/commit/73c42306745b0831aa6fe7fe4eeb70d2c2d87a82; https://huntr.com/bounties/90b0776d-9fa6-4841-aac4-09fde5918cae; https://huntr.com/bounties/90b0776d-9fa6-4841-aac4-09fde5918cae
CVE: CVE-2024-30373
Published: 2024-06-06
Description: Kofax Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of JPF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write  past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22092.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-24-557/; https://www.zerodayinitiative.com/advisories/ZDI-24-557/
CVE: CVE-2024-32873
Published: 2024-06-06
Description: Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. The spendable balance is not updated properly when delegating vested tokens. The issue allows a clawback vesting account to anticipate the release of unvested tokens.  This vulnerability is fixed in 18.0.0.
CVSS Score: 3.5 (LOW)
CWE: CWE-682, CWE-682
References: https://github.com/evmos/evmos/commit/b2a09ca66613d8b04decd3f2dcba8e1e77709dcb; https://github.com/evmos/evmos/security/advisories/GHSA-pxv8-qhrh-jc7v; https://github.com/evmos/evmos/commit/b2a09ca66613d8b04decd3f2dcba8e1e77709dcb
CVE: CVE-2024-36730
Published: 2024-06-06
Description: Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting negative values into the oneflow.zeros/ones parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755, CWE-755
References: https://gist.github.com/Redmept1on/1c530e191fb3c76f034c2ea1d11eb821; https://gist.github.com/Redmept1on/1c530e191fb3c76f034c2ea1d11eb821
CVE: CVE-2024-36732
Published: 2024-06-06
Description: An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when an empty array is processed with oneflow.tensordot.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://gist.github.com/Redmept1on/3feef7639b2bc7891d0cfda6d932adfd; https://gist.github.com/Redmept1on/3feef7639b2bc7891d0cfda6d932adfd
CVE: CVE-2024-36734
Published: 2024-06-06
Description: Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting a negative value into the dim parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://gist.github.com/Redmept1on/7420cd59f30defda07cf7bb4bf4a92cd; https://gist.github.com/Redmept1on/7420cd59f30defda07cf7bb4bf4a92cd
CVE: CVE-2024-36735
Published: 2024-06-06
Description: OneFlow-Inc. Oneflow v0.9.1 does not display an error or warning when the oneflow.eye parameter is floating.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-704
References: https://gist.github.com/Redmept1on/4998e9b6435448cea07a8b2dbf96eedc; https://gist.github.com/Redmept1on/4998e9b6435448cea07a8b2dbf96eedc; https://gist.github.com/Redmept1on/4998e9b6435448cea07a8b2dbf96eedc
CVE: CVE-2024-36740
Published: 2024-06-06
Description: An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when index as a negative number exceeds the range of size.
CVSS Score: 7.5 (HIGH)
CWE: CWE-129, CWE-20
References: https://gist.github.com/Redmept1on/070f5b8b752079c6b761f00f3cab7103; https://gist.github.com/Redmept1on/070f5b8b752079c6b761f00f3cab7103
CVE: CVE-2024-37153
Published: 2024-06-06
Description: Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. There is an issue with how to liquid stake using Safe which itself is a contract. The bug only appears when there is a local state change together with an ICS20 transfer in the same function and uses the contract's balance, that is using the contract address as the sender parameter in an ICS20 transfer using the ICS20 precompile. This is in essence the "infinite money glitch" allowing contracts to double the supply of Evmos after each transaction.The issue has been patched in versions >=V18.1.0. 
CVSS Score: 7.5 (HIGH)
CWE: CWE-670, CWE-670
References: https://github.com/evmos/evmos/commit/478b7a62e7af57a70cf3a01126c7f5a89bee69d7; https://github.com/evmos/evmos/security/advisories/GHSA-xgr7-jgq3-mhmc; https://github.com/evmos/evmos/commit/478b7a62e7af57a70cf3a01126c7f5a89bee69d7
CVE: CVE-2024-37154
Published: 2024-06-06
Description: Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. Users are able to delegate tokens that have not yet been vested. This affects employees and grantees who have funds managed via `ClawbackVestingAccount`. This affects 18.1.0 and earlier.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-285, CWE-863
References: https://github.com/evmos/evmos/security/advisories/GHSA-7hrh-v6wp-53vw; https://github.com/evmos/evmos/security/advisories/GHSA-7hrh-v6wp-53vw
CVE: CVE-2024-37364
Published: 2024-06-06
Description: Ariane Allegro Scenario Player through 2024-03-05, when Ariane Duo kiosk mode is used, allows physically proximate attackers to obtain sensitive information (such as hotel invoice content with PII), and potentially create unauthorized room keys, by entering a guest-search quote character and then accessing the underlying Windows OS.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-269
References: https://news.ycombinator.com/item?id=40582475; https://www.pentagrid.ch/en/blog/ariane-allegro-hotel-check-in-terminal-kios-escape/; https://news.ycombinator.com/item?id=40582475
CVE: CVE-2024-3095
Published: 2024-06-06
Description: A Server-Side Request Forgery (SSRF) vulnerability exists in the Web Research Retriever component of langchain-ai/langchain version 0.1.5. The vulnerability arises because the Web Research Retriever does not restrict requests to remote internet addresses, allowing it to reach local addresses. This flaw enables attackers to execute port scans, access local services, and in some scenarios, read instance metadata from cloud environments. The vulnerability is particularly concerning as it can be exploited to abuse the Web Explorer server as a proxy for web attacks on third parties and interact with servers in the local network, including reading their response data. This could potentially lead to arbitrary code execution, depending on the nature of the local services. The vulnerability is limited to GET requests, as POST requests are not possible, but the impact on confidentiality, integrity, and availability is significant due to the potential for stolen credentials and state-changing interactions with internal APIs.
CVSS Score: 7.7 (HIGH)
CWE: CWE-918
References: https://huntr.com/bounties/e62d4895-2901-405b-9559-38276b6a5273; https://huntr.com/bounties/e62d4895-2901-405b-9559-38276b6a5273
CVE: CVE-2024-3099
Published: 2024-06-06
Description: A vulnerability in mlflow/mlflow version 2.11.1 allows attackers to create multiple models with the same name by exploiting URL encoding. This flaw can lead to Denial of Service (DoS) as an authenticated user might not be able to use the intended model, as it will open a different model each time. Additionally, an attacker can exploit this vulnerability to perform data model poisoning by creating a model with the same name, potentially causing an authenticated user to become a victim by using the poisoned model. The issue stems from inadequate validation of model names, allowing for the creation of models with URL-encoded names that are treated as distinct from their URL-decoded counterparts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-475
References: https://huntr.com/bounties/8d96374a-ce8d-480e-9cb0-0a7e5165c24a; https://huntr.com/bounties/8d96374a-ce8d-480e-9cb0-0a7e5165c24a
CVE: CVE-2024-3102
Published: 2024-06-06
Description: A JSON Injection vulnerability exists in the `mintplex-labs/anything-llm` application, specifically within the username parameter during the login process at the `/api/request-token` endpoint. The vulnerability arises from improper handling of values, allowing attackers to perform brute force attacks without prior knowledge of the username. Once the password is known, attackers can conduct blind attacks to ascertain the full username, significantly compromising system security.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-307, CWE-307
References: https://github.com/mintplex-labs/anything-llm/commit/2374939ffb551ab2929d7f9d5827fe6597fa8caa; https://huntr.com/bounties/8af4650d-5955-44a4-86b4-d08e1c862b49; https://github.com/mintplex-labs/anything-llm/commit/2374939ffb551ab2929d7f9d5827fe6597fa8caa