deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-27235
Published: 2024-03-11
Description: In plugin_extern_func of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27236
Published: 2024-03-11
Description: In aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-843
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27237
Published: 2024-03-11
Description: In wipe_ns_memory of nsmemwipe.c, there is a possible incorrect size calculation due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-131, CWE-131
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-28187
Published: 2024-03-11
Description: SOY CMS is an open source CMS (content management system) that allows you to build blogs and online shops. SOY CMS versions prior to 3.14.2 are vulnerable to an OS Command Injection vulnerability within the file upload feature when accessed by an administrator. The vulnerability enables the execution of arbitrary OS commands through specially crafted file names containing a semicolon, affecting the jpegoptim functionality. This vulnerability has been patched in version 3.14.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://github.com/inunosinsi/soycms/commit/9b0e452f628df28dec69cd72b6b55db21066cbf8; https://github.com/inunosinsi/soycms/security/advisories/GHSA-qg3q-hfgc-5jmm; https://github.com/inunosinsi/soycms/commit/9b0e452f628df28dec69cd72b6b55db21066cbf8
CVE: CVE-2024-28197
Published: 2024-03-11
Description: Zitadel is an open source identity management system. Zitadel uses a cookie to identify the user agent (browser) and its user sessions.  Although the cookie was handled according to best practices, it was accessible on subdomains of the ZITADEL instance. An attacker could take advantage of this and provide a malicious link hosted on the subdomain to the user to gain access to the victim’s account in certain scenarios. A possible victim would need to login through the malicious link for this exploit to work. If the possible victim already had the cookie present, the attack would not succeed. The attack would further only be possible if there was an initial vulnerability on the subdomain. This could either be the attacker being able to control DNS or a XSS vulnerability in an application hosted on a subdomain. Versions 2.46.0, 2.45.1, and 2.44.3 have been patched. Zitadel recommends upgrading to the latest versions available in due course. Note that applying the patch will invalidate the current cookie and thus users will need to start a new session and existing sessions (user selection) will be empty. For self-hosted environments unable to upgrade to a patched version, prevent setting the following cookie name on subdomains of your Zitadel instance (e.g. within your WAF): `__Secure-zitadel-useragent`.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269, CWE-384
References: https://github.com/zitadel/zitadel/security/advisories/GHSA-mq4x-r2w3-j7mr; https://github.com/zitadel/zitadel/security/advisories/GHSA-mq4x-r2w3-j7mr
CVE: CVE-2024-28198
Published: 2024-03-11
Description: OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication. By manually manipulating http requests when using the draw.io integration it is possible to read arbitrary files as the configured system user and SSRF. The problem is fixed in version 18.1.6 and 18.2.2. It is advised to upgrade to the latest version of 18.1.x or 18.2.x. Users unable to upgrade may work around this issue by disabling the Draw.io module or the entire REST API which will secure the system.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://github.com/OpenOLAT/OpenOLAT/commit/23e6212e9412c3b099436159b8c8935321c91872; https://github.com/OpenOLAT/OpenOLAT/security/advisories/GHSA-pqvm-h9mg-434c; https://track.frentix.com/issue/OO-7553/XXE-injection-in-draw.io-endpoint
CVE: CVE-2024-2357
Published: 2024-03-11
Description: The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.
CVSS Score: 6.5 (MEDIUM)
References: https://libreswan.org/security/CVE-2024-2357; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJZJYFHKBIJ4ZK5GAWWFFR3AKJS6O5JX/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HEM46ALKF7NG6CAUKZ7KQERVOHWQIQKY/
CVE: CVE-2022-46070
Published: 2024-03-11
Description: GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://s3.amazonaws.com/geovision_downloads/TechNotice/CyberSecurity/Security_Advistory_ASManager-ASM-2022-11.pdf; https://s3.amazonaws.com/geovision_downloads/TechNotice/CyberSecurity/Security_Advistory_ASManager-ASM-2022-11.pdf
CVE: CVE-2024-1400
Published: 2024-03-11
Description: The Mollie Forms plugin for WordPress is vulnerable to unauthorized post or page duplication due to a missing capability check on the duplicateForm function in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with subscriber access or higher, to duplicate arbitrary posts and pages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset/3046896/mollie-forms/trunk/classes/Admin.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/43c4ca71-0bf0-4529-97d9-2349f96bbb9e?source=cve; https://plugins.trac.wordpress.org/changeset/3046896/mollie-forms/trunk/classes/Admin.php
CVE: CVE-2024-1645
Published: 2024-03-11
Description: The Mollie Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exportRegistrations function in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with subscriber access or higher, to export payment data collected by this plugin.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/mollie-forms/trunk/classes/Admin.php#L904; https://plugins.trac.wordpress.org/changeset/3046896/mollie-forms/trunk/classes/Admin.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/353c244f-6d5d-47d6-988e-33da722a02f9?source=cve
CVE: CVE-2024-25114
Published: 2024-03-11
Description: Collabora Online is a collaborative online office suite based on LibreOffice technology. Each document in Collabora Online is opened by a separate "Kit" instance in a different "jail" with a unique directory "jailID" name. For security reasons, this directory name is randomly generated and should not be given out to the client. In affected versions of Collabora Online it is possible to use the CELL() function, with the "filename" argument, in the spreadsheet component to get a path which includes this JailID. The impact of this vulnerability in its own is low because it requires to be chained with another vulnerability. Users should upgrade to Collabora Online 23.05.9; Collabora Online 22.05.22; Collabora Online 21.11.10 or higher. There are no known workarounds for this vulnerability.
CVSS Score: 2.6 (LOW)
CWE: CWE-200
References: https://github.com/CollaboraOnline/online/security/advisories/GHSA-2fh2-ppjf-p3xv; https://github.com/LibreOffice/online/blob/master/wsd/README; https://github.com/CollaboraOnline/online/security/advisories/GHSA-2fh2-ppjf-p3xv
CVE: CVE-2024-25854
Published: 2024-03-11
Description: Cross Site Scripting (XSS) vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbitrary code via the Subject and Description fields when submitting a support ticket.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/hakkitoklu/hunt/blob/main/Insurance%20Management%20System%20PHP%20and%20MySQL%201.0/xss.md; https://github.com/hakkitoklu/hunt/blob/main/Insurance%20Management%20System%20PHP%20and%20MySQL%201.0/xss.md
CVE: CVE-2024-27297
Published: 2024-03-11
Description: Nix is a package manager for Linux and other Unix systems. A fixed-output derivations on Linux can send file descriptors to files in the Nix store to another program running on the host (or another fixed-output derivation) via Unix domain sockets in the abstract namespace. This allows to modify the output of the derivation, after Nix has registered the path as "valid" and immutable in the Nix database. In particular, this allows the output of fixed-output derivations to be modified from their expected content. This issue has been addressed in versions 2.3.18 2.18.2 2.19.4 and 2.20.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://github.com/NixOS/nix/commit/f8170ce9f119e5e6724eb81ff1b5a2d4c0024000; https://github.com/NixOS/nix/security/advisories/GHSA-2ffj-w4mj-pg37; https://hackmd.io/03UGerewRcy3db44JQoWvw
CVE: CVE-2024-27938
Published: 2024-03-11
Description: Postal is an open source SMTP server. Postal versions less than 3.0.0 are vulnerable to SMTP Smuggling attacks which may allow incoming e-mails to be spoofed. This, in conjunction with a cooperative outgoing SMTP service, would allow for an incoming e-mail to be received by Postal addressed from a server that a user has 'authorised' to send mail on their behalf but were not the genuine author of the e-mail. Postal is not affected for sending outgoing e-mails as email is re-encoded with `<CR><LF>` line endings when transmitted over SMTP. This issue has been addressed and users should upgrade to Postal v3.0.0 or higher. Once upgraded, Postal will only accept End of DATA sequences which are explicitly `<CR><LF>.<CR><LF>`. If a non-compliant sequence is detected it will be logged to the SMTP server log. There are no workarounds for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-116, CWE-116
References: https://github.com/postalserver/postal/commit/0140dc4; https://github.com/postalserver/postal/security/advisories/GHSA-j42r-6c99-hqf2; https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide
CVE: CVE-2024-28120
Published: 2024-03-11
Description: codeium-chrome is an open source code completion plugin for the chrome web browser. The service worker of the codeium-chrome extension doesn't check the sender when receiving an external message. This allows an attacker to host a website that will steal the user's Codeium api-key, and thus impersonate the user on the backend autocomplete server. This issue has not been addressed. Users are advised to monitor the usage of their API key.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-284
References: https://github.com/Exafunction/codeium-chrome/security/advisories/GHSA-8c7j-2h97-q63p; https://securitylab.github.com/advisories/GHSL-2024-027_GHSL-2024-028_codeium-chrome; https://github.com/Exafunction/codeium-chrome/security/advisories/GHSA-8c7j-2h97-q63p
CVE: CVE-2024-28199
Published: 2024-03-11
Description: phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting (XSS) vulnerability that can be exploited via maliciously crafted user data. This was due to improper case-sensitivity in the code that was meant to prevent these attacks. If you render an `<a>` tag with an `href` attribute set to a user-provided link, that link could potentially execute JavaScript when clicked by another user. If you splat user-provided attributes when rendering any HTML tag, malicious event attributes could be included in the output, executing JavaScript when the events are triggered by another user. Patches are available on RubyGems for all 1.x minor versions. Users are advised to upgrade. Users unable to upgrade should consider configuring a content security policy that does not allow `unsafe-inline`.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy; https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy#unsafe-inline; https://github.com/phlex-ruby/phlex/commit/aa50c604cdee1d0ce7ef068a4c66cbd5d43f96a1
CVE: CVE-2023-49785
Published: 2024-03-12
Description: NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2 and prior are vulnerable to server-side request forgery and cross-site scripting. This vulnerability enables read access to internal HTTP endpoints but also write access using HTTP POST, PUT, and other methods. Attackers can also use this vulnerability to mask their source IP by forwarding malicious traffic intended for other Internet targets through these open proxies. As of time of publication, no patch is available, but other mitigation strategies are available. Users may avoid exposing the application to the public internet or, if exposing the application to the internet, ensure it is an isolated network with no access to any other internal resources.

CVSS Score: 9.1 (CRITICAL)
CWE: CWE-79, CWE-918, CWE-79, CWE-918
References: https://github.com/ChatGPTNextWeb/ChatGPT-Next-Web; https://www.horizon3.ai/attack-research/attack-blogs/nextchat-an-ai-chatbot-that-lets-you-talk-to-anyone-you-want-to/; https://github.com/ChatGPTNextWeb/ChatGPT-Next-Web
CVE: CVE-2024-22127
Published: 2024-03-12
Description: SAP NetWeaver Administrator AS Java (Administrator Log Viewer plug-in) - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to command injection vulnerability. This would enable the attacker to run commands which can cause high impact on confidentiality, integrity and availability of the application.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-77
References: https://me.sap.com/notes/3433192; https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364; https://me.sap.com/notes/3433192
CVE: CVE-2024-22133
Published: 2024-03-12
Description: SAP Fiori Front End Server - version 605, allows altering of approver details on the read-only field when sending leave request information. This could lead to creation of request with incorrect approver causing low impact on Confidentiality and Integrity with no impact on Availability of the application.


CVSS Score: 4.6 (MEDIUM)
CWE: CWE-863
References: https://me.sap.com/notes/3417399; https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364; https://me.sap.com/notes/3417399
CVE: CVE-2024-25644
Published: 2024-03-12
Description: Under certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732
References: https://me.sap.com/notes/3425682; https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364; https://me.sap.com/notes/3425682
CVE: CVE-2024-25645
Published: 2024-03-12
Description: Under certain condition SAP NetWeaver (Enterprise Portal) - version 7.50 allows an attacker to access information which would otherwise be restricted causing low impact on confidentiality of the application and with no impact on Integrity and Availability of the application.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732
References: https://me.sap.com/notes/3428847; https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364; https://me.sap.com/notes/3428847
CVE: CVE-2024-27900
Published: 2024-03-12
Description: Due to missing authorization check, attacker with business user account in SAP ABAP Platform - version 758, 795, can change the privacy setting of job templates from shared to private. As a result, the selected template would only be accessible to the owner.


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3419022; https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364; https://me.sap.com/notes/3419022
CVE: CVE-2024-27902
Published: 2024-03-12
Description: Applications based on SAP GUI for HTML in SAP NetWeaver AS ABAP - versions 7.89, 7.93, do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. A successful attack can allow a malicious attacker to access and modify data through their ability to execute code in a user’s browser. There is no impact on the availability of the system


CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://me.sap.com/notes/3377979; https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364; https://me.sap.com/notes/3377979
CVE: CVE-2024-28163
Published: 2024-03-12
Description: Under certain conditions, Support Web Pages of SAP NetWeaver Process Integration (PI) - versions 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732, CWE-732
References: https://me.sap.com/notes/3434192; https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364; https://me.sap.com/notes/3434192
CVE: CVE-2023-6814
Published: 2024-03-12
Description: Insertion of Sensitive Information into Log File vulnerability in Hitachi Cosminexus Component Container allows local users to gain sensitive information.This issue affects Cosminexus Component Container: from 11-30 before 11-30-05, from 11-20 before 11-20-07, from 11-10 before 11-10-10, from 11-00 before 11-00-12, All versions of V8 and V9.


CVSS Score: 5.6 (MEDIUM)
CWE: CWE-532
References: https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-118/index.html; https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-118/index.html
CVE: CVE-2024-26521
Published: 2024-03-12
Description: HTML Injection vulnerability in CE Phoenix v1.0.8.20 and before allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted payload to the english.php component.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/capture0x/Phoenix; https://github.com/hackervegas001/CVE-2024-26521; https://github.com/capture0x/Phoenix
CVE: CVE-2024-25331
Published: 2024-03-12
Description: DIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev. B Firmware v2.03WWb01 suffer from a LAN-Side Unauthenticated Remote Code Execution (RCE) vulnerability elevated from HNAP Stack-Based Buffer Overflow.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-121
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10372; https://www.ensigninfosecurity.com/advisories/vulnerability-advisories/2; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10372
CVE: CVE-2023-49453
Published: 2024-03-12
Description: Reflected cross-site scripting (XSS) vulnerability in Racktables v0.22.0 and before, allows local attackers to execute arbitrary code and obtain sensitive information via the search component in index.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://nitipoom-jar.github.io/CVE-2023-49453/; https://nitipoom-jaroonchaipipat.github.io/security-research-portal/2023-49453; https://nitipoom-jar.github.io/CVE-2023-49453/
CVE: CVE-2024-21584
Published: 2024-03-12
Description: Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability. If an attacker tricks the user to access the product with a specially crafted URL and perform a specific operation, an arbitrary script may be executed on the web browser of the user.

CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://jvn.jp/en/jp/JVN51135247/; https://pleasanter.org/archives/vulnerability-update-202401; https://jvn.jp/en/jp/JVN51135247/
CVE: CVE-2024-21805
Published: 2024-03-12
Description: Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary file may be placed in the specific folder by a user who can log in to the PC where the product's Windows client is installed. In case the file is a specially crafted DLL file, arbitrary code may be executed with SYSTEM privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://jvn.jp/en/jp/JVN54451757/; https://www.skyseaclientview.net/news/240307_01/; https://jvn.jp/en/jp/JVN54451757/
CVE: CVE-2024-24964
Published: 2024-03-12
Description: Improper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed.
CVSS Score: 6.3 (MEDIUM)
References: https://jvn.jp/en/jp/JVN54451757/; https://www.skyseaclientview.net/news/240307_01/; https://jvn.jp/en/jp/JVN54451757/
CVE: CVE-2024-25325
Published: 2024-03-12
Description: SQL injection vulnerability in Employee Management System v.1.0 allows a local attacker to obtain sensitive information via a crafted payload to the txtemail parameter in the login.php.
CVSS Score: 7.1 (HIGH)
CWE: CWE-89
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2024-27121
Published: 2024-03-12
Description: Path traversal vulnerability exists in Machine Automation Controller NJ Series and Machine Automation Controller NX Series. An arbitrary file in the affected product may be accessed or arbitrary code may be executed by processing a specially crafted request sent from a remote attacker with an administrative privilege. As for the details of the affected product names/versions, see the information provided by the vendor under [References] section.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://jvn.jp/en/vu/JVNVU95852116/index.html; https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2024-001_en.pdf; https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2024-001_ja.pdf
CVE: CVE-2024-0906
Published: 2024-03-12
Description: The f(x) Private Site plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.1 via the API. This makes it possible for unauthenticated attackers to obtain page and post contents of a site protected with this plugin.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://wordpress.org/plugins/fx-private-site/; https://www.wordfence.com/threat-intel/vulnerabilities/id/79c3abc6-68fa-4c51-88fa-03ab7d26cc4c?source=cve; https://wordpress.org/plugins/fx-private-site/