deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-32589
Published: 2024-12-19
Description: A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.2.10 and below, version 5.0.12 and below and FortiAnalyzer version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.3.11, version 5.2.10 to 5.2.4 fgfmsd daemon may allow a remote, non-authenticated attacker to execute unauthorized code as root via sending a specifically crafted request to the fgfm port of the targeted device.
CVSS Score: 8.1 (HIGH)
CWE: CWE-416
References: https://fortiguard.fortinet.com/psirt/FG-IR-21-067
CVE: CVE-2024-12782
Published: 2024-12-19
Description: A vulnerability has been found in Fujifilm Business Innovation Apeos C3070, Apeos C5570 and Apeos C6580 up to 24.8.28 and classified as critical. This vulnerability affects unknown code of the file /home/index.html#hashHome of the component Web Interface. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor explains that "during technical verification it is not possible to reproduce any active actions like reboots which were mentioned in the original researcher disclosure."
CVSS Score: 7.3 (HIGH)
CWE: CWE-266, CWE-285
References: https://vuldb.com/?ctiid.288958; https://vuldb.com/?id.288958; https://vuldb.com/?submit.458897
CVE: CVE-2024-12783
Published: 2024-12-19
Description: A vulnerability was found in itsourcecode Vehicle Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /billaction.php. The manipulation of the argument extra-cost leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/FinleyTang/Vehicle-Management-System/blob/main/Vehicle%20Management%20System%20billaction.php%20has%20Cross-site%20Scripting%20(XSS).pdf; https://itsourcecode.com/; https://vuldb.com/?ctiid.288959
CVE: CVE-2021-26102
Published: 2024-12-19
Description: A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remote non-authenticated attacker to delete files on the system by sending a crafted POST request. In particular, deleting specific configuration files will reset the Admin password to its default value.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-305, CWE-22
References: https://fortiguard.fortinet.com/psirt/FG-IR-21-048
CVE: CVE-2024-10244
Published: 2024-12-19
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ISDO Software Web Software allows SQL Injection.This issue affects Web Software: before 3.6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.usom.gov.tr/bildirim/tr-24-1893
CVE: CVE-2024-12784
Published: 2024-12-19
Description: A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been classified as critical. Affected is an unknown function of the file editbill.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/FinleyTang/Vehicle-Management-System/blob/main/Vehicle%20Management%20System%20editbill.php%20has%20Sqlinjection.pdf; https://itsourcecode.com/; https://vuldb.com/?ctiid.288960
CVE: CVE-2024-9101
Published: 2024-12-19
Description: A reflected cross-site scripting (XSS) vulnerability in the 'Entry Chooser' of phpLDAPadmin (version 1.2.1 through the latest version, 1.2.6.7) allows attackers to execute arbitrary JavaScript in the user's browser via the 'element' parameter, which is unsafely passed to the JavaScript 'eval' function. However, exploitation is limited to specific conditions where 'opener' is correctly set.
CWE: CWE-79
References: https://github.com/leenooks/phpLDAPadmin/blob/master/htdocs/entry_chooser.php; https://github.com/leenooks/phpLDAPadmin/commit/f713afc8d164169516c91b0988531f2accb9bce6#diff-c2d6d7678ada004e704ee055169395a58227aaec86a6f75fa74ca18ff49bca44R27; https://sourceforge.net/projects/phpldapadmin/files/phpldapadmin-php5/1.2.1/
CVE: CVE-2024-9102
Published: 2024-12-19
Description: phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Value (CSV) file, but it does not neutralize special elements that could be interpreted as a command when the file is opened by a spreadsheet product. Thus, this could lead to CSV Formula Injection. NOTE: This vulnerability will not be addressed, the maintainer's position is that it is not the intention of phpLDAPadmin to control what data Administrators can put in their LDAP database, nor filter it on export.
CWE: CWE-1236
References: https://github.com/leenooks/phpLDAPadmin/commit/ea17aadef46fd[PII_REDACTED]7fe7740ceed1381ad#diff-93b9f3e6d4c5bdacf469ea0ec74c1e9217ca6272da9be5a1bfd711f7da16f9e3R240; https://github.com/leenooks/phpLDAPadmin/issues/274#issuecomment[PII_REDACTED]; https://sourceforge.net/projects/phpldapadmin/files/phpldapadmin-php5/1.2.0
CVE: CVE-2024-12785
Published: 2024-12-19
Description: A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file sendmail.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/FinleyTang/Vehicle-Management-System/blob/main/Vehicle%20Management%20System%20sendmail.php%20has%20Sqlinjection.pdf; https://itsourcecode.com/; https://vuldb.com/?ctiid.288961
CVE: CVE-2024-12786
Published: 2024-12-19
Description: A vulnerability, which was classified as critical, was found in X1a0He Adobe Downloader up to 1.3.1 on macOS. Affected is the function shouldAcceptNewConnection of the file com.x1a0he.macOS.Adobe-Downloader.helper of the component XPC Service. The manipulation leads to improper privilege management. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. This product is not affiliated with the company Adobe.
CVSS Score: 7.8 (HIGH)
CWE: CWE-266, CWE-269
References: https://vuldb.com/?ctiid.288966; https://vuldb.com/?id.288966; https://vuldb.com/?submit.464685
CVE: CVE-2024-25131
Published: 2024-12-19
Description: A flaw was found in the MustGather.managed.openshift.io Custom Defined Resource (CRD) of OpenShift Dedicated. A non-privileged user on the cluster can create a MustGather object with a specially crafted file and set the most privileged service account to run the job. This can allow a standard developer user to escalate their privileges to a cluster administrator and pivot to the AWS environment.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://access.redhat.com/security/cve/CVE-2024-25131; https://bugzilla.redhat.com/show_bug.cgi?id=2258856; https://github.com/openshift/must-gather-operator/pull/135
CVE: CVE-2024-47093
Published: 2024-12-19
Description: Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://github.com/NagVis/nagvis/commit/30e71e8167d17a1828e7da71d6942f6fb36478cd; https://github.com/NagVis/nagvis/commit/b5b[PII_REDACTED]de526df7d54d5c02d7732ba1c42; https://www.nagvis.org/downloads/changelog/1.9.42
CVE: CVE-2024-54790
Published: 2024-12-19
Description: A SQL Injection vulnerability was found in /index.php in PHPGurukul Pre-School Enrollment System v1.0, which allows remote attackers to execute arbitrary code via the visittime parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Pre-School%20Enrollment/SQL%20Injection%20pr-school%20i.pdf
CVE: CVE-2024-12787
Published: 2024-12-19
Description: A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /student/check_student_login.php. The manipulation of the argument student_emailid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://1000projects.org/; https://github.com/AFK-cmd/CVE/issues/1; https://vuldb.com/?ctiid.288967
CVE: CVE-2024-12798
Published: 2024-12-19
Description: ACE vulnerability in JaninoEventEvaluator  by QOS.CH logback-core
      upto including version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 in Java applications allows
      attacker to execute arbitrary code by compromising an existing
      logback configuration file or by injecting an environment variable
      before program execution.





Malicious logback configuration files can allow the attacker to execute 
arbitrary code using the JaninoEventEvaluator extension.



A successful attack requires the user to have write access to a 
configuration file. Alternatively, the attacker could inject a malicious 
environment variable pointing to a malicious configuration file. In both 
cases, the attack requires existing privilege.
CWE: CWE-917
References: https://logback.qos.ch/news.html#1.3.15; https://logback.qos.ch/news.html#1.5.13
CVE: CVE-2024-38864
Published: 2024-12-19
Description: Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk < 2.3.0p23, < 2.2.0p38 and <= 2.1.0p49 (EOL) allows a local attacker to read sensitive data.
CVSS Score: 3.3 (LOW)
CWE: CWE-732
References: https://checkmk.com/werk/17098
CVE: CVE-2024-55082
Published: 2024-12-19
Description: A Server-Side Request Forgery (SSRF) in the endpoint http://{your-server}/url-to-pdf of Stirling-PDF 0.35.1 allows attackers to access sensitive information via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://gist.github.com/summerxxoo/f98033dbf1ab81a045c1196c3a1ab3ef; https://github.com/summerxxoo/VulnPoc/blob/main/Stirling-PDF-%20Server-Side%20Request%20Forgery%28SSRF%29%20vulnerability.md
CVE: CVE-2024-9154
Published: 2024-12-19
Description: A code injection vulnerability in HMS Networks Ewon Flexy 205 allows executing commands on system level on the device. This issue affects Ewon Flexy 205: through 14.8s0 (#2633).
CWE: CWE-94
References: https://cyberdanube.com/security-research/authenticated-remote-code-execution-in-ewon-flexy-205/; http://seclists.org/fulldisclosure/2024/Dec/18
CVE: CVE-2021-22501
Published: 2024-12-19
Description: Improper Restriction of XML External Entity Reference vulnerability in OpenText™ Operations Bridge Manager allows Input Data Manipulation. 

The vulnerability could be exploited to confidential information

This issue affects Operations Bridge Manager: 2017.05, 2017.11, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10.
CWE: CWE-611
References: https://portal.microfocus.com/s/article/KM000037407?language=en_US
CVE: CVE-2024-12788
Published: 2024-12-19
Description: A vulnerability was found in Codezips Technical Discussion Forum 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file signinpost.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/laowuzi/cve/tree/main/Technical_Discussion_Forum; https://vuldb.com/?ctiid.288968; https://vuldb.com/?id.288968
CVE: CVE-2024-12789
Published: 2024-12-19
Description: A vulnerability was found in PbootCMS up to 3.2.3. It has been classified as critical. This affects an unknown part of the file apps/home/controller/IndexController.php. The manipulation of the argument tag leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.2.4 is able to address this issue. It is recommended to upgrade the affected component.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-94, CWE-94
References: https://gist.github.com/J1rrY-learn/8e52bf055fd1806ada81ae1ff25dd817; https://vuldb.com/?ctiid.288969; https://vuldb.com/?id.288969
CVE: CVE-2024-12790
Published: 2024-12-19
Description: A vulnerability was found in code-projects Hostel Management Site 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file room-details.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://code-projects.org/; https://github.com/asd1238525/cve/blob/main/xss.md; https://vuldb.com/?ctiid.288970
CVE: CVE-2024-12801
Published: 2024-12-19
Description: Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logback version 0.1 to 1.3.14 and 1.4.0 to 1.5.12  on the Java platform, allows an attacker to 
forge requests by compromising logback configuration files in XML.



The attacks involves the modification of DOCTYPE declaration in  XML configuration files.
CWE: CWE-918
References: https://logback.qos.ch/news.html#1.3.15; https://logback.qos.ch/news.html#1.5.13
CVE: CVE-2024-52896
Published: 2024-12-19
Description: IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-209
References: https://www.ibm.com/support/pages/node/7179152
CVE: CVE-2024-55081
Published: 2024-12-19
Description: An XML External Entity (XXE) injection vulnerability in the component /datagrip/upload of Chat2DB v0.3.5 allows attackers to execute arbitrary code via supplying a crafted XML input.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://gist.github.com/summerxxoo/18b3ccc91aacd606aa4d48a02029e9e7; https://github.com/summerxxoo/VulnPoc/blob/main/chat2DB_XXE.md
CVE: CVE-2023-7005
Published: 2024-12-19
Description: A specially crafted message can be sent to the TTLock App that downgrades the encryption protocol used for communication, and can be utilized to compromise the lock, such as through revealing the unlockKey field.
CVSS Score: 7.5 (HIGH)
References: https://alephsecurity.com/2024/03/07/kontrol-lux-lock-2/; https://www.kb.cert.org/vuls/id/949046
CVE: CVE-2024-12791
Published: 2024-12-19
Description: A vulnerability was found in Codezips E-Commerce Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file signin.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/laowuzi/cve/blob/main/E-commerce/E-commerce-signin.md; https://vuldb.com/?ctiid.288971; https://vuldb.com/?id.288971
CVE: CVE-2024-12792
Published: 2024-12-19
Description: A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file newadmin.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/laowuzi/cve/blob/main/E-commerce/E-commerce-newadmin.md; https://vuldb.com/?ctiid.288973; https://vuldb.com/?id.288973
CVE: CVE-2024-12793
Published: 2024-12-19
Description: A vulnerability, which was classified as problematic, has been found in PbootCMS up to 5.2.3. Affected by this issue is some unknown functionality of the file apps/home/controller/IndexController.php. The manipulation of the argument tag leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.2.4 is able to address this issue. It is recommended to upgrade the affected component.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://gist.github.com/J1rrY-learn/b939899001b2c6b59632d82df11da001; https://vuldb.com/?ctiid.288974; https://vuldb.com/?id.288974
CVE: CVE-2024-12794
Published: 2024-12-19
Description: A vulnerability, which was classified as critical, was found in Codezips E-Commerce Site 1.0. This affects an unknown part of the file /admin/editorder.php. The manipulation of the argument dstatus/quantity/ddate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/laowuzi/cve/blob/main/E-commerce/E-commerce_editorder.md; https://vuldb.com/?ctiid.288975; https://vuldb.com/?id.288975
CVE: CVE-2024-38819
Published: 2024-12-19
Description: Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://spring.io/security/cve-2024-38819; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-49336
Published: 2024-12-19
Description: IBM Security Guardium 11.5 and 12.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://www.ibm.com/support/pages/node/7179369
CVE: CVE-2024-51471
Published: 2024-12-19
Description: IBM MQ Appliance 9.3 LTS, 9.3 CD, and 9.4 LTS web console could allow an authenticated user to cause a denial-of-service when trace is enabled due to information being written into memory outside of the intended buffer size.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: https://www.ibm.com/support/pages/node/7178243
CVE: CVE-2024-52897
Published: 2024-12-19
Description: IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-209
References: https://www.ibm.com/support/pages/node/7179151
CVE: CVE-2020-6923
Published: 2024-12-19
Description: The HP Linux Imaging and Printing (HPLIP) software may potentially be affected by memory buffer overflow.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-120
References: https://support.hp.com/us-en/document/c06927115
CVE: CVE-2024-54150
Published: 2024-12-19
Description: cjwt is a C JSON Web Token (JWT) Implementation. Algorithm confusion occurs when a system improperly verifies the type of signature used, allowing attackers to exploit the lack of distinction between signing methods.  If the system doesn't differentiate between an HMAC signed token and an RS/EC/PS signed token during verification, it becomes vulnerable to this kind of attack. For instance, an attacker could craft a token with the alg field set to "HS256" while the server expects an asymmetric algorithm like "RS256". The server might mistakenly use the wrong verification method, such as using a public key as the HMAC secret, leading to unauthorised access. For RSA, the key can be computed from a few signatures. For Elliptic Curve (EC), two potential keys can be recovered from one signature. This can be used to bypass the signature mechanism if an application relies on asymmetrically signed tokens. This issue has been addressed in version 2.3.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-347
References: https://github.com/xmidt-org/cjwt/commit/096ab3e37f73c914b716e[PII_REDACTED]f363265fd; https://github.com/xmidt-org/cjwt/security/advisories/GHSA-9h24-7qp5-gp82
CVE: CVE-2024-55196
Published: 2024-12-19
Description: Insufficiently Protected Credentials in the Mail Server Configuration in GoPhish v0.12.1 allows an attacker to access cleartext passwords for the configured IMAP and SMTP servers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://github.com/hexkaster/SecurityResearch/blob/main/CVE-2024-55196.md
CVE: CVE-2024-56159
Published: 2024-12-19
Description: Astro is a web framework for content-driven websites. A bug in the build process allows any unauthenticated user to read parts of the server source code. During build, along with client assets such as css and font files, the sourcemap files **for the server code** are moved to a publicly-accessible folder. Any outside party can read them with an unauthorized HTTP GET request to the same server hosting the rest of the website. While some server files are hashed, making their access obscure, the files corresponding to the file system router (those in `src/pages`) are predictably named. For example. the sourcemap file for `src/pages/index.astro` gets named `dist/client/pages/index.astro.mjs.map`. This vulnerability is the root cause of issue #12703, which links to a simple stackblitz project demonstrating the vulnerability. Upon build, notice the contents of the `dist/client` (referred to as `config.build.client` in astro code) folder. All astro servers make the folder in question accessible to the public internet without any authentication. It contains `.map` files corresponding to the code that runs on the server. All **server-output** projects on Astro 5 versions **v5.0.3** through **v5.0.7**, that have **sourcemaps enabled**, either directly or through an add-on such as `sentry`, are affected. The fix for **server-output** projects was released in **astro@5.0.8**. Additionally, all **static-output** projects built using Astro 4 versions **4.16.17 or older**, or Astro 5 versions **5.0.8 or older**, that have **sourcemaps enabled** are also affected. The fix for **static-output** projects was released in **astro@5.0.9**, and backported to Astro v4 in **astro@4.16.18**. The immediate impact is limited to source code. Any secrets or environment variables are not exposed unless they are present verbatim in the source code. There is no immediate loss of integrity within the the vulnerable server. However, it is possible to subsequently discover another vulnerability via the revealed source code . There is no immediate impact to availability of the vulnerable server. However, the presence of an unsafe regular expression, for example, can quickly be exploited to subsequently compromise the availability. The fix for **server-output** projects was released in **astro@5.0.8**, and the fix for **static-output** projects was released in **astro@5.0.9** and backported to Astro v4 in **astro@4.16.18**. Users are advised to update immediately if they are using sourcemaps or an integration that enables sourcemaps.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-219
References: https://github.com/getsentry/sentry-javascript/blob/develop/packages/astro/src/integration/index.ts#L50; https://github.com/withastro/astro/blob/176fe9f113fd912f9b61e848b00bbcfecd6d5c2c/packages/astro/src/core/build/static-build.ts#L139; https://github.com/withastro/astro/issues/12703