deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-32083
Published: 2024-04-11
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Varun Kumar Easy Logo allows Stored XSS.This issue affects Easy Logo: from n/a through 1.9.3.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/easylogo/wordpress-easy-logo-plugin-1-9-3-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/easylogo/wordpress-easy-logo-plugin-1-9-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-32106
Published: 2024-04-11
Description: Cross-Site Request Forgery (CSRF) vulnerability in WP Compress WP Compress – Image Optimizer [All-In-One].This issue affects WP Compress – Image Optimizer [All-In-One]: from n/a through 6.10.35.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/wp-compress-image-optimizer/wordpress-wp-compress-plugin-6-10-35-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-compress-image-optimizer/wordpress-wp-compress-plugin-6-10-35-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2024-32107
Published: 2024-04-11
Description: Cross-Site Request Forgery (CSRF) vulnerability in XLPlugins Finale Lite.This issue affects Finale Lite: from n/a through 2.18.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/finale-woocommerce-sales-countdown-timer-discount/wordpress-finale-lite-sales-countdown-timer-discount-for-woocommerce-plugin-2-18-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/finale-woocommerce-sales-countdown-timer-discount/wordpress-finale-lite-sales-countdown-timer-discount-for-woocommerce-plugin-2-18-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2024-32108
Published: 2024-04-11
Description: Cross-Site Request Forgery (CSRF) vulnerability in Stephanie Leary Convert Post Types.This issue affects Convert Post Types: from n/a through 1.4.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/convert-post-types/wordpress-convert-post-types-plugin-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/convert-post-types/wordpress-convert-post-types-plugin-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2024-32109
Published: 2024-04-11
Description: Cross-Site Request Forgery (CSRF) vulnerability in Julien Berthelot / MPEmbed.Com WP Matterport Shortcode allows Cross Site Request Forgery.This issue affects WP Matterport Shortcode: from n/a through 2.1.9.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/shortcode-gallery-for-matterport-showcase/wordpress-wp-matterport-shortcode-plugin-2-1-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/shortcode-gallery-for-matterport-showcase/wordpress-wp-matterport-shortcode-plugin-2-1-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-29483
Published: 2024-04-11
Description: eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.
CVSS Score: 7.0 (HIGH)
CWE: CWE-292
References: https://github.com/eventlet/eventlet/issues/913; https://github.com/eventlet/eventlet/releases/tag/v0.35.2; https://github.com/rthalley/dnspython/issues/1045
CVE: CVE-2024-32105
Published: 2024-04-11
Description: Cross-Site Request Forgery (CSRF) vulnerability in ELEXtensions ELEX WooCommerce Dynamic Pricing and Discounts.This issue affects ELEX WooCommerce Dynamic Pricing and Discounts: from n/a through 2.1.2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/elex-woocommerce-dynamic-pricing-and-discounts/wordpress-elex-woocommerce-dynamic-pricing-and-discounts-plugin-2-1-2-cross-site-request-forgery-csrf-vulnerability-2?_s_id=cve; https://patchstack.com/database/vulnerability/elex-woocommerce-dynamic-pricing-and-discounts/wordpress-elex-woocommerce-dynamic-pricing-and-discounts-plugin-2-1-2-cross-site-request-forgery-csrf-vulnerability-2?_s_id=cve
CVE: CVE-2024-0881
Published: 2024-04-11
Description: The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel  WordPress plugin before 2.2.76 does not have proper authorization, resulting in password protected posts to be displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to read such posts
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/e460e926-6e9b-4e9f-b908-ba5c9c7fb290/; https://wpscan.com/vulnerability/e460e926-6e9b-4e9f-b908-ba5c9c7fb290/
CVE: CVE-2024-31678
Published: 2024-04-11
Description: Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/CveSecLook/cve/issues/10; https://github.com/CveSecLook/cve/issues/10
CVE: CVE-2023-50949
Published: 2024-04-11
Description: IBM QRadar SIEM 7.5 could allow an unauthorized user to perform unauthorized actions due to improper certificate validation.  IBM X-Force ID:  275706.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/275706; https://www.ibm.com/support/pages/node/7147933; https://exchange.xforce.ibmcloud.com/vulnerabilities/275706
CVE: CVE-2024-30271
Published: 2024-04-11
Description: Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb24-25.html; https://helpx.adobe.com/security/products/illustrator/apsb24-25.html
CVE: CVE-2024-30272
Published: 2024-04-11
Description: Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb24-25.html; https://helpx.adobe.com/security/products/illustrator/apsb24-25.html
CVE: CVE-2024-30273
Published: 2024-04-11
Description: Illustrator versions 28.3, 27.9.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb24-25.html; https://helpx.adobe.com/security/products/illustrator/apsb24-25.html
CVE: CVE-2023-5392
Published: 2024-04-11
Description: C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning. 


CVSS Score: 7.5 (HIGH)
CWE: CWE-1295
References: https://process.honeywell.com; https://process.honeywell.com
CVE: CVE-2023-5393
Published: 2024-04-11
Description: Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in possible remote code execution. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.

 


CVSS Score: 7.4 (HIGH)
CWE: CWE-130
References: https://process.honeywell.com; https://process.honeywell.com
CVE: CVE-2023-5394
Published: 2024-04-11
Description: Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code execution. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning. 


CVSS Score: 7.4 (HIGH)
CWE: CWE-119
References: https://process.honeywell.com; https://process.honeywell.com
CVE: CVE-2024-22717
Published: 2024-04-11
Description: Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/; https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/
CVE: CVE-2024-22718
Published: 2024-04-11
Description: Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the client_id parameter in the application URL.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/; https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/
CVE: CVE-2024-22719
Published: 2024-04-11
Description: SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/; https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/
CVE: CVE-2024-22721
Published: 2024-04-11
Description: Cross Site Request Forgery (CSRF) vulnerability in Form Tools 3.1.1 allows attackers to manipulate sensitive user data via crafted link.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-352
References: https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/; https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/
CVE: CVE-2024-22722
Published: 2024-04-11
Description: Server Side Template Injection (SSTI) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/; https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/
CVE: CVE-2024-29454
Published: 2024-04-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-25376
Published: 2024-04-11
Description: An issue discovered in Thesycon Software Solutions Gmbh & Co. KG TUSBAudio MSI-based installers before 5.68.0 allows a local attacker to execute arbitrary code via the msiexec.exe repair mode.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://www.thesycon.de/eng/usb_audiodriver.shtml#SecurityAdvisory; https://www.thesycon.de/eng/usb_audiodriver.shtml#SecurityAdvisory
CVE: CVE-2024-25852
Published: 2024-04-11
Description: Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the "AccessControlList" parameter of the access control function point. An attacker can use the vulnerability to obtain device administrator rights.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md; https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd; https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md
CVE: CVE-2024-27592
Published: 2024-04-11
Description: Open Redirect vulnerability in Corezoid Process Engine v6.5.0 allows attackers to redirect to arbitrary websites via appending a crafted link to /login/ in the login page URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-601
References: https://github.com/corezoid/helm/issues/110; https://medium.com/%40nicatabbasov00002/open-redirect-vulnerability-62986ccaf0f7; https://github.com/corezoid/helm/issues/110
CVE: CVE-2024-28458
Published: 2024-04-11
Description: Null Pointer Dereference vulnerability in swfdump in swftools 0.9.2 allows attackers to crash the appliation via the function compileSWFActionCode in action/actioncompiler.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/keepinggg/poc/blob/main/poc_of_swfc; https://github.com/keepinggg/poc/blob/main/poc_of_swfc
CVE: CVE-2023-48865
Published: 2024-04-11
Description: An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via execute_mode parameter of the URL.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://gist.github.com/aashiqahamedn/39383cfbc639cbdc3e1a7d74b977aeae; https://github.com/reportico-web/reportico/issues/51; https://gist.github.com/aashiqahamedn/39383cfbc639cbdc3e1a7d74b977aeae
CVE: CVE-2023-6489
Published: 2024-04-12
Description: A denial of service vulnerability was identified in GitLab CE/EE, versions 16.7.7 prior to 16.8.6, 16.9 prior to 16.9.4 and 16.10 prior to 16.10.2 which allows an attacker to spike the GitLab instance resources usage resulting in service degradation via chat integration feature.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1333, CWE-1333
References: https://gitlab.com/gitlab-org/gitlab/-/issues/433520; https://hackerone.com/reports/2262450; https://gitlab.com/gitlab-org/gitlab/-/issues/433520
CVE: CVE-2023-6678
Published: 2024-04-12
Description: An issue has been discovered in GitLab EE affecting all versions before 16.8.6, all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. It was possible for an attacker to cause a  denial of service using malicious crafted content in a junit test report file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1333, CWE-1333
References: https://gitlab.com/gitlab-org/gitlab/-/issues/434689; https://hackerone.com/reports/2268037; https://gitlab.com/gitlab-org/gitlab/-/issues/434689
CVE: CVE-2024-2279
Published: 2024-04-12
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.7 to 16.8.6 all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. Using the autocomplete for issues references feature a crafted payload may lead to a stored XSS, allowing attackers to perform arbitrary actions on behalf of victims.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79, CWE-79
References: https://gitlab.com/gitlab-org/gitlab/-/issues/448469; https://hackerone.com/reports/2404710; https://gitlab.com/gitlab-org/gitlab/-/issues/448469
CVE: CVE-2024-3092
Published: 2024-04-12
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. A payload may lead to a Stored XSS while using the diff viewer, allowing attackers to perform arbitrary actions on behalf of victims.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79, CWE-79
References: https://gitlab.com/gitlab-org/gitlab/-/issues/452510; https://hackerone.com/reports/2441257; https://gitlab.com/gitlab-org/gitlab/-/issues/452510
CVE: CVE-2023-45186
Published: 2024-04-12
Description: IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  268691.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/268691; https://www.ibm.com/support/pages/node/7148015; https://exchange.xforce.ibmcloud.com/vulnerabilities/268691
CVE: CVE-2023-50307
Published: 2024-04-12
Description: IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  273338.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/273338; https://www.ibm.com/support/pages/node/7148015; https://exchange.xforce.ibmcloud.com/vulnerabilities/273338
CVE: CVE-2024-22357
Published: 2024-04-12
Description: IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  280894.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/280894; https://www.ibm.com/support/pages/node/7148010; https://exchange.xforce.ibmcloud.com/vulnerabilities/280894
CVE: CVE-2024-2137
Published: 2024-04-12
Description: The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple pricing widgets (e.g. Pricing Single, Pricing Icon, Pricing Tab) in all versions up to, and including, 2.5.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/widgetkit-for-elementor/trunk/elements/pricing-1/template/view.php#L29; https://www.wordfence.com/threat-intel/vulnerabilities/id/27945f52-7594-46f6-a760-2ee5dd094914?source=cve; https://plugins.trac.wordpress.org/browser/widgetkit-for-elementor/trunk/elements/pricing-1/template/view.php#L29
CVE: CVE-2024-2801
Published: 2024-04-12
Description: The Shopkeeper Extender plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'image_slide' shortcode in all versions up to, and including, 3.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3071499%40shopkeeper-extender&new=3071499%40shopkeeper-extender&sfp_email=&sfph_mail=; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3074471%40shopkeeper-extender&new=3074471%40shopkeeper-extender&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/b9f34195-fc03-4c3d-b25e-c9b9cf8ded3c?source=cve
CVE: CVE-2023-44852
Published: 2024-04-12
Description: Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the c_set_traps_decode function in the acu_web file.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79
References: https://pine-amphibian-9b9.notion.site/ENG-SAILOR-Ku-Software-XSS-SNMP-traps-82fcaaf379ba4a4cbc16143c6da6c258; https://pine-amphibian-9b9.notion.site/ENG-SAILOR-Ku-Software-XSS-SNMP-traps-82fcaaf379ba4a4cbc16143c6da6c258
CVE: CVE-2023-44853
Published: 2024-04-12
Description: \An issue was discovered in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the sub_219C4 function in the acu_web file.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-94
References: https://pine-amphibian-9b9.notion.site/SAILOR-Ku-Software-RCE-and-Privilege-Escalation-Diagnostics-report-0f3923d0ed434705b7ed4a6174218c2b?pvs=4; https://pine-amphibian-9b9.notion.site/SAILOR-Ku-Software-RCE-and-Privilege-Escalation-Diagnostics-report-0f3923d0ed434705b7ed4a6174218c2b?pvs=4
CVE: CVE-2023-44854
Published: 2024-04-12
Description: Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the c_set_rslog_decode function in the acu_web file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://pine-amphibian-9b9.notion.site/ENG-SAILOR-Ku-Software-XSS-Remote-syslog-131b8031c9f74600aa3279c7d733d624; https://pine-amphibian-9b9.notion.site/ENG-SAILOR-Ku-Software-XSS-Remote-syslog-131b8031c9f74600aa3279c7d733d624
CVE: CVE-2023-44857
Published: 2024-04-12
Description: An issue in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the sub_21D24 function in the acu_web component.
CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: https://pine-amphibian-9b9.notion.site/SAILOR-Ku-Software-RCE-and-Privilege-Escalation-Statistics-report-b8e[PII_REDACTED]29d9f60b89ff653847a; https://pine-amphibian-9b9.notion.site/SAILOR-Ku-Software-RCE-and-Privilege-Escalation-Statistics-report-b8e[PII_REDACTED]29d9f60b89ff653847a
CVE: CVE-2023-44855
Published: 2024-04-12
Description: Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019 allows a remote attacker to execute arbitrary code via a crafted script to the rdiag, sender, and recipients parameters of the sub_219C4 function in the acu_web file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://pine-amphibian-9b9.notion.site/ENG-SAILOR-Ku-Software-XSS-Diagnostics-report-019462dcebf6428da34dd7daee21583b; https://pine-amphibian-9b9.notion.site/ENG-SAILOR-Ku-Software-XSS-Diagnostics-report-019462dcebf6428da34dd7daee21583b
CVE: CVE-2023-44856
Published: 2024-04-12
Description: Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the rstat, sender, and recipients' parameters of the sub_21D24 function in the acu_web file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://pine-amphibian-9b9.notion.site/ENG-SAILOR-Ku-Software-XSS-Statistics-report-e97364c9d09449cf8869417e7187e997; https://pine-amphibian-9b9.notion.site/ENG-SAILOR-Ku-Software-XSS-Statistics-report-e97364c9d09449cf8869417e7187e997
CVE: CVE-2023-49528
Published: 2024-04-12
Description: Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service (DoS) via the af_dialoguenhance.c:261:5 in the de_stereo component.
CVSS Score: 8.0 (HIGH)
CWE: CWE-122
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/
CVE: CVE-2024-22734
Published: 2024-04-12
Description: An issue was discovered in AMCS Group Trux Waste Management Software before version 7.19.0018.26912, allows local attackers to obtain sensitive information via a static, hard-coded AES Key-IV pair in the TxUtilities.dll and TruxUser.cfg components.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-200
References: https://www.redlinecybersecurity.com/blog/cve-2024-22734; https://www.redlinecybersecurity.com/blog/cve-2024-22734