deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-51060
Published: 2024-10-31
Description: Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'a_id' parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: http://projectworld.com; https://github.com/0x1c1ph3r/CVEs/tree/main/CVE-2024-51060
CVE: CVE-2024-51063
Published: 2024-10-31
Description: Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: http://phpgurukul.com; https://github.com/0x1c1ph3r/CVEs/tree/main/CVE-2024-51063
CVE: CVE-2024-51064
Published: 2024-10-31
Description: Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection via the tid parameter to admin/queries.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://phpgurukul.com; https://github.com/0x1c1ph3r/CVEs/tree/main/CVE-2024-51064
CVE: CVE-2024-51065
Published: 2024-10-31
Description: Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://phpgurukul.com; https://github.com/0x1c1ph3r/CVEs/tree/main/CVE-2024-51065
CVE: CVE-2024-51066
Published: 2024-10-31
Description: An Insecure Direct Object Reference (IDOR) vulnerability in appointment-detail.php in Phpgurukul's Beauty Parlour Management System v1.1 allows unauthorized access to the Personally Identifiable Information (PII) of other customers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: http://phpgurukul.com; https://github.com/0x1c1ph3r/CVEs/tree/main/CVE-2024-51066
CVE: CVE-2024-39719
Published: 2024-10-31
Description: An issue was discovered in Ollama through 0.3.14. File existence disclosure can occur via api/create. When calling the CreateModel route with a path parameter that does not exist, it reflects the "File does not exist" error message to the attacker, providing a primitive for file existence on the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-209
References: https://www.oligo.security/blog/more-models-more-probllms
CVE: CVE-2024-39720
Published: 2024-10-31
Description: An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file containing just 4 bytes starting with the GGUF custom magic header. By leveraging a custom Modelfile that includes a FROM statement pointing to the attacker-controlled blob file, the attacker can crash the application through the CreateModel route, leading to a segmentation fault (signal SIGSEGV: segmentation violation).
CVSS Score: 8.2 (HIGH)
CWE: CWE-125
References: https://github.com/ollama/ollama/compare/v0.1.45...v0.1.46#diff-782c2737eecfa83b7cb46a77c8bdaf40023e7067baccd4f806ac5517b4563131L417; https://oligo.security/blog/more-models-more-probllms
CVE: CVE-2024-39721
Published: 2024-10-31
Description: An issue was discovered in Ollama before 0.1.34. The CreateModelHandler function uses os.Open to read a file until completion. The req.Path parameter is user-controlled and can be set to /dev/random, which is blocking, causing the goroutine to run infinitely (even after the HTTP request is aborted by the client).
CVSS Score: 7.5 (HIGH)
CWE: CWE-404
References: https://github.com/ollama/ollama/blob/9164b0161bcb24e543cba835a8863b80af2c0c21/server/routes.go#L557; https://github.com/ollama/ollama/blob/adeb40eaf29039b8964425f69a9315f9f1694ba8/server/routes.go#L536; https://www.oligo.security/blog/more-models-more-probllms
CVE: CVE-2024-39722
Published: 2024-10-31
Description: An issue was discovered in Ollama before 0.1.46. It exposes which files exist on the server on which it is deployed via path traversal in the api/push route.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.oligo.security/blog/more-models-more-probllms
CVE: CVE-2024-48359
Published: 2024-10-31
Description: Qualitor v8.24 was discovered to contain a remote code execution (RCE) vulnerability via the gridValoresPopHidden parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/OpenXP-Research/CVE-2024-48359; https://www.qualitor.com.br/official-security-advisory-cve-2024-48359
CVE: CVE-2024-48360
Published: 2024-10-31
Description: Qualitor v8.24 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /request/viewValidacao.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://github.com/OpenXP-Research/CVE-2024-48360; https://www.qualitor.com.br/official-security-advisory-cve-2024-48360; https://www.qualitor.com.br/qualitor-8-20
CVE: CVE-2024-10594
Published: 2024-10-31
Description: A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function docHistory of the file /com/esafenet/servlet/fileManagement/FileDirectoryService.java. The manipulation of the argument fileId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://flowus.cn/share/b95a0695-de84-4459-aa7b-87a1400d5509?code=G8A6P3; https://vuldb.com/?ctiid.282606; https://vuldb.com/?id.282606
CVE: CVE-2024-10595
Published: 2024-10-31
Description: A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delFile/delDifferCourseList of the file /com/esafenet/servlet/ajax/PublicDocInfoAjax.java. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://flowus.cn/share/651b6010-4701-4cec-a5a3-6e01e22636b9?code=G8A6P3; https://vuldb.com/?ctiid.282607; https://vuldb.com/?id.282607
CVE: CVE-2024-10596
Published: 2024-10-31
Description: A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. Affected by this issue is the function delEntryptPolicySort of the file /com/esafenet/servlet/system/EncryptPolicyTypeService.java. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://flowus.cn/share/0c59c0ea-9624-42b5-9e06-66fab39b773c?code=G8A6P3; https://vuldb.com/?ctiid.282608; https://vuldb.com/?id.282608
CVE: CVE-2024-10597
Published: 2024-10-31
Description: A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function delPolicyAction of the file /com/esafenet/servlet/system/PolicyActionService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://flowus.cn/share/380bcc9d-95ae-4576-b3df-bf3b06f1c5cd?code=G8A6P3; https://vuldb.com/?ctiid.282609; https://vuldb.com/?id.282609
CVE: CVE-2024-10598
Published: 2024-10-31
Description: A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-285, CWE-862
References: https://github.com/LvZCh/td/issues/1; https://vuldb.com/?ctiid.282610; https://vuldb.com/?id.282610
CVE: CVE-2024-10599
Published: 2024-10-31
Description: A vulnerability, which was classified as problematic, has been found in Tongda OA 2017 up to 11.7. This issue affects some unknown processing of the file /inc/package_static_resources.php. The manipulation leads to resource consumption. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://github.com/LvZCh/td/issues/2; https://vuldb.com/?ctiid.282611; https://vuldb.com/?id.282611
CVE: CVE-2024-6479
Published: 2024-10-31
Description: The SIP Reviews Shortcode for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'no_of_reviews' attribute in the woocommerce_reviews shortcode in all versions up to, and including, 1.2.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/sip-reviews-shortcode-woocommerce/trunk/public/partials/plugin-reviews-shortcode-display.php; https://plugins.trac.wordpress.org/browser/sip-reviews-shortcode-woocommerce/trunk/public/partials/plugin-reviews-shortcode-display.php#L331; https://plugins.trac.wordpress.org/browser/sip-reviews-shortcode-woocommerce/trunk/public/partials/plugin-reviews-shortcode-display.php?rev=3405373
CVE: CVE-2024-6480
Published: 2024-10-31
Description: The SIP Reviews Shortcode for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'no_of_reviews' attribute in the woocommerce_reviews shortcode in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-89, CWE-79
References: https://plugins.trac.wordpress.org/browser/sip-reviews-shortcode-woocommerce/trunk/public/partials/plugin-reviews-shortcode-display.php; https://plugins.trac.wordpress.org/browser/sip-reviews-shortcode-woocommerce/trunk/public/partials/plugin-reviews-shortcode-display.php#L424; https://plugins.trac.wordpress.org/browser/sip-reviews-shortcode-woocommerce/trunk/public/partials/plugin-reviews-shortcode-display.php?rev=3405373
CVE: CVE-2024-10600
Published: 2024-10-31
Description: A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.6. Affected is an unknown function of the file pda/appcenter/submenu.php. The manipulation of the argument appid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/LvZCh/td/issues/3; https://vuldb.com/?ctiid.282612; https://vuldb.com/?id.282612
CVE: CVE-2024-10601
Published: 2024-10-31
Description: A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /general/address/private/address/query/delete.php. The manipulation of the argument where_repeat leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/LvZCh/td/issues/4; https://vuldb.com/?ctiid.282613; https://vuldb.com/?id.282613
CVE: CVE-2024-10602
Published: 2024-11-01
Description: A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file /general/approve_center/list/input_form/data_picker_link.php. The manipulation of the argument dataSrc leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/LvZCh/td/issues/5; https://vuldb.com/?ctiid.282614; https://vuldb.com/?id.282614
CVE: CVE-2024-10605
Published: 2024-11-01
Description: A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /file/request.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://code-projects.org/; https://github.com/bevennyamande/receiver_request_sample_csrf; https://vuldb.com/?ctiid.282615
CVE: CVE-2024-10607
Published: 2024-11-01
Description: A vulnerability was found in code-projects Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /track-result.php. The manipulation of the argument Consignment leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/yanhuoshanjin/cve/issues/1; https://vuldb.com/?ctiid.282616
CVE: CVE-2024-10608
Published: 2024-11-01
Description: A vulnerability was found in code-projects Courier Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://code-projects.org/; https://github.com/AXUyaku/cve/issues/1; https://vuldb.com/?ctiid.282617
CVE: CVE-2024-10609
Published: 2024-11-01
Description: A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System Project 1.0. This affects an unknown part of the file typeadd.php. The manipulation of the argument sex leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Lanxiy7th/lx_CVE_report-/issues/17; https://itsourcecode.com/; https://vuldb.com/?ctiid.282621
CVE: CVE-2024-10610
Published: 2024-11-01
Description: A vulnerability has been found in ESAFENET CDG 5 and classified as critical. This vulnerability affects the function delProtocol of the file /com/esafenet/servlet/system/ProtocolService.java. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://flowus.cn/share/0099e10a-5242-4651-a85a-5e8f98abc533?code=G8A6P3; https://vuldb.com/?ctiid.282622; https://vuldb.com/?id.282622
CVE: CVE-2024-10611
Published: 2024-11-01
Description: A vulnerability was found in ESAFENET CDG 5 and classified as critical. This issue affects the function delProtocol of the file /com/esafenet/servlet/system/PrintScreenListService.java. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://flowus.cn/share/9967b626-9a33-42f9-b8d2-d001b2a0b24a?code=G8A6P3; https://vuldb.com/?ctiid.282623; https://vuldb.com/?id.282623
CVE: CVE-2024-10612
Published: 2024-11-01
Description: A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function removeHookInvalidCourse of the file /com/esafenet/servlet/system/HookInvalidCourseService.java. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://flowus.cn/share/ba7e7981-c66b-4d04-8fed-6d26b6765fe7?code=G8A6P3; https://vuldb.com/?ctiid.282624; https://vuldb.com/?id.282624
CVE: CVE-2024-10613
Published: 2024-11-01
Description: A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delSystemEncryptPolicy of the file /com/esafenet/servlet/system/SystemEncryptPolicyService.java. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://flowus.cn/share/b73c3e0f-21ff-4026-84ec-be60bcbd5bfc?code=G8A6P3; https://vuldb.com/?ctiid.282625; https://vuldb.com/?id.282625
CVE: CVE-2024-10615
Published: 2024-11-01
Description: A vulnerability was found in Tongda OA 2017 up to 11.10. It has been rated as critical. Affected by this issue is some unknown functionality of the file /general/approve_center/query/list/input_form/delete_data_attach.php. The manipulation of the argument RUN_ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/LvZCh/td/issues/6; https://vuldb.com/?ctiid.282626; https://vuldb.com/?id.282626
CVE: CVE-2024-10616
Published: 2024-11-01
Description: A vulnerability classified as critical has been found in Tongda OA up to 11.9. This affects an unknown part of the file /pda/workflow/webSignSubmit.php. The manipulation of the argument saleId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/LvZCh/td/issues/7; https://vuldb.com/?ctiid.282627; https://vuldb.com/?id.282627
CVE: CVE-2024-10617
Published: 2024-11-01
Description: A vulnerability classified as critical was found in Tongda OA up to 11.10. This vulnerability affects unknown code of the file /pda/workflow/check_seal.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/LvZCh/td/issues/8; https://vuldb.com/?ctiid.282628; https://vuldb.com/?id.282628
CVE: CVE-2024-10618
Published: 2024-11-01
Description: A vulnerability, which was classified as critical, has been found in Tongda OA 2017 up to 11.10. This issue affects some unknown processing of the file /pda/reportshop/record_detail.php. The manipulation of the argument repid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/LvZCh/td/issues/9; https://vuldb.com/?ctiid.282629; https://vuldb.com/?id.282629
CVE: CVE-2024-10619
Published: 2024-11-01
Description: A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.10. Affected is an unknown function of the file /pda/reportshop/next_detail.php. The manipulation of the argument repid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/LvZCh/td/issues/10; https://vuldb.com/?ctiid.282630; https://vuldb.com/?id.282630
CVE: CVE-2024-10620
Published: 2024-11-01
Description: A vulnerability was found in knightliao Disconf 2.6.36. It has been classified as critical. This affects an unknown part of the file /api/config/list of the component Configuration Center. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://github.com/knightliao/disconf/issues/431; https://github.com/knightliao/disconf/issues/431#issue[PII_REDACTED]; https://vuldb.com/?ctiid.282633
CVE: CVE-2024-21510
Published: 2024-11-01
Description: Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack by inserting an arbitrary address into this header. If used for caching purposes, such as with servers like Nginx, or as a reverse proxy, without handling the X-Forwarded-Host header, attackers can potentially exploit Cache Poisoning or Routing-based SSRF.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-807
References: https://github.com/sinatra/sinatra/blob/b626e2d82c23b4fde0b51782fd32ca27ccde1d1a/lib/sinatra/base.rb%23L319; https://github.com/sinatra/sinatra/blob/b626e2d82c23b4fde0b51782fd32ca27ccde1d1a/lib/sinatra/base.rb%23L323C1-L343C17; https://github.com/sinatra/sinatra/pull/2010
CVE: CVE-2024-47939
Published: 2024-11-01
Description: Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].
CVSS Score: 7.7 (HIGH)
CWE: CWE-121
References: https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2024-000011; https://jvn.jp/en/jp/JVN87770340/; https://www.konicaminolta.jp/business/support/important/250519_01_01.html
CVE: CVE-2024-49501
Published: 2024-11-01
Description: Sysmac Studio provided by OMRON Corporation contains an incorrect authorization vulnerability. If this vulnerability is exploited, an attacker may access the program which is protected by Data Protection function.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-863
References: https://jvn.jp/en/vu/JVNVU95685374; https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2024-006_en.pdf; https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2024-006_ja.pdf
CVE: CVE-2024-0105
Published: 2024-11-01
Description: NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.
CVSS Score: 8.9 (HIGH)
CWE: CWE-274
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5562
CVE: CVE-2024-0106
Published: 2024-11-01
Description: NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.
CVSS Score: 8.7 (HIGH)
CWE: CWE-274
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5562