deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-40591
Published: 2023-09-06
Description: go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version `1.12.1-stable`, i.e, `1.12.2-unstable` and onwards. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://geth.ethereum.org/docs/developers/geth-developer/disclosures; https://github.com/ethereum/go-ethereum/releases/tag/v1.12.1; https://github.com/ethereum/go-ethereum/security/advisories/GHSA-ppjg-v974-84cm
CVE: CVE-2023-41601
Published: 2023-09-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in install/index.php of CSZ CMS v1.3.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Database Username or Database Host parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/al3zx/csz_cms_1_3_0_xss_in_install_page/blob/main/README.md; https://www.cszcms.com/; https://github.com/al3zx/csz_cms_1_3_0_xss_in_install_page/blob/main/README.md
CVE: CVE-2023-4809
Published: 2023-09-06
Description: In pf packet processing with a 'scrub fragment reassemble' rule, a packet containing multiple IPv6 fragment headers would be reassembled, and then immediately processed.  That is, a packet with multiple fragment extension headers would not be recognized as the correct ultimate payload. Instead a packet with multiple IPv6 fragment headers would unexpectedly be interpreted as a fragmented packet, rather than as whatever the real payload is.




As a result, IPv6 fragments may bypass pf firewall rules written on the assumption all fragments have been reassembled and, as a result, be forwarded or processed by the host.
CVSS Score: 7.5 (HIGH)
CWE: CWE-167
References: http://www.openwall.com/lists/oss-security/2023/09/08/5; http://www.openwall.com/lists/oss-security/2023/09/08/6; http://www.openwall.com/lists/oss-security/2023/09/08/7
CVE: CVE-2023-23623
Published: 2023-09-06
Description: Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. A Content-Security-Policy that disables eval, specifically setting a `script-src` directive and _not_ providing `unsafe-eval` in that directive, is not respected in renderers that have sandbox disabled.  i.e. `sandbox: false` in the `webPreferences` object. This allows usage of methods like `eval()` and `new Function` unexpectedly which can result in an expanded attack surface. This issue only ever affected the 22 and 23 major versions of Electron and has been fixed in the latest versions of those release lines. Specifically, these versions contain the fixes: 22.0.1 and 23.0.0-alpha.2 We recommend all apps upgrade to the latest stable version of Electron. If upgrading isn't possible, this issue can be addressed without upgrading by enabling `sandbox: true` on all renderers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-670
References: https://github.com/electron/electron/security/advisories/GHSA-gxh7-wv9q-fwfr; https://github.com/electron/electron/security/advisories/GHSA-gxh7-wv9q-fwfr
CVE: CVE-2023-29198
Published: 2023-09-06
Description: Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Electron apps using `contextIsolation` and `contextBridge` are affected. This is a context isolation bypass, meaning that code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions. This issue is only exploitable if an API exposed to the main world via `contextBridge` can return an object or array that contains a javascript object which cannot be serialized, for instance, a canvas rendering context. This would normally result in an exception being thrown `Error: object could not be cloned`. The app side workaround is to ensure that such a case is not possible. Ensure all values returned from a function exposed over the context bridge are supported. This issue has been fixed in versions `25.0.0-alpha.2`, `24.0.1`, `23.2.3`, and `22.3.6`.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-754, CWE-754
References: https://github.com/electron/electron/security/advisories/GHSA-p7v2-p9m8-qqg7; https://www.electronjs.org/docs/latest/api/context-bridge#parameter--error--return-type-support; https://github.com/electron/electron/security/advisories/GHSA-p7v2-p9m8-qqg7
CVE: CVE-2023-38605
Published: 2023-09-06
Description: This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.5. An app may be able to determine a user’s current location.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/en-us/HT213843; https://support.apple.com/kb/HT213841; https://support.apple.com/kb/HT213842
CVE: CVE-2023-38616
Published: 2023-09-06
Description: A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213843
CVE: CVE-2023-39956
Published: 2023-09-06
Description: Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Electron apps that are launched as command line executables are impacted.   Specifically this issue can only be exploited if the following conditions are met: 1. The app is launched with an attacker-controlled working directory and 2. The attacker has the ability to write files to that working directory. This makes the risk quite low, in fact normally issues of this kind are considered outside of our threat model as similar to Chromium we exclude Physically Local Attacks but given the ability for this issue to bypass certain protections like ASAR Integrity it is being treated with higher importance.  This issue has been fixed in versions:`26.0.0-beta.13`, `25.4.1`, `24.7.1`, `23.3.13`, and `22.3.19`. There are no app side workarounds, users must update to a patched version of Electron.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-94
References: https://github.com/electron/electron/security/advisories/GHSA-7x97-j373-85x5; https://github.com/electron/electron/security/advisories/GHSA-7x97-j373-85x5
CVE: CVE-2023-39967
Published: 2023-09-06
Description: WireMock is a tool for mocking HTTP services. When certain request URLs like “@127.0.0.1:1234" are used in WireMock Studio configuration fields, the request might be forwarded to an arbitrary service reachable from WireMock’s instance. There are 3 identified potential attack vectors: via “TestRequester” functionality, webhooks and the proxy mode. As we can control HTTP Method, HTTP Headers, HTTP Data, it allows sending requests with the default level of credentials for the WireMock instance. The vendor has discontinued the affected Wiremock studio product and there will be no fix. Users are advised to find alternatives.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-918
References: https://github.com/wiremock/wiremock/security/advisories/GHSA-676j-xrv3-73vc; https://github.com/wiremock/wiremock/security/advisories/GHSA-676j-xrv3-73vc
CVE: CVE-2023-40392
Published: 2023-09-06
Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.5. An app may be able to read sensitive location information.
CVSS Score: 3.3 (LOW)
CWE: CWE-532
References: https://support.apple.com/en-us/HT213843; https://support.apple.com/kb/HT213841; https://support.apple.com/kb/HT213842
CVE: CVE-2023-40397
Published: 2023-09-06
Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote attacker may be able to cause arbitrary javascript code execution.
CVSS Score: 9.8 (CRITICAL)
References: http://www.openwall.com/lists/oss-security/2023/09/11/1; https://security.gentoo.org/glsa/202401-04; https://support.apple.com/en-us/HT213843
CVE: CVE-2023-41053
Published: 2023-09-06
Description: Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by `SORT_RO` and as a result may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. The problem exists in Redis 7.0 or newer and has been fixed in Redis 7.0.13 and 7.2.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 3.3 (LOW)
CWE: CWE-269
References: https://github.com/redis/redis/commit/9e505e6cd842338424e05883521ca1fb7d0f47f6; https://github.com/redis/redis/security/advisories/GHSA-q4jr-5p56-4xwc; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OLBPIUUD273UGRN2WAYHPVUAULY36QVL/
CVE: CVE-2023-41327
Published: 2023-09-06
Description: WireMock is a tool for mocking HTTP services. WireMock can be configured to only permit proxying (and therefore recording) to certain addresses. This is achieved via a list of allowed address rules and a list of denied address rules, where the allowed list is evaluated first. 

Until WireMock Webhooks Extension 3.0.0-beta-15, the filtering of target addresses from the proxy mode DID NOT work for Webhooks, so the users were potentially vulnerable regardless of the `limitProxyTargets` settings. Via the WireMock webhooks configuration, POST requests from a webhook might be forwarded to an arbitrary service reachable from WireMock’s instance. For example, If someone is running the WireMock docker Container inside a private cluster, they can trigger internal POST requests against unsecured APIs or even against secure ones by passing a token, discovered using another exploit, via authentication headers. This issue has been addressed in versions 2.35.1 and 3.0.3 of wiremock. Wiremock studio has been discontinued and will not see a fix. Users unable to upgrade should use external firewall rules to define the list of permitted destinations.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-918
References: https://github.com/wiremock/wiremock/releases/tag/3.0.0-beta-15; https://github.com/wiremock/wiremock/security/advisories/GHSA-hq8w-9w8w-pmx7; https://wiremock.org/docs/configuration/#preventing-proxying-to-and-recording-from-specific-target-addresses
CVE: CVE-2023-41329
Published: 2023-09-06
Description: WireMock is a tool for mocking HTTP services. The proxy mode of WireMock, can be protected by the network restrictions configuration, as documented in Preventing proxying to and recording from specific target addresses. These restrictions can be configured using the domain names, and in such a case the configuration is vulnerable to the DNS rebinding attacks. A similar patch was applied in WireMock 3.0.0-beta-15 for the WireMock Webhook Extensions. The root cause of the attack is a defect in the logic which allows for a race condition triggered by a DNS server whose address expires in between the initial validation and the outbound network request that might go to a domain that was supposed to be prohibited. Control over a DNS service is required to exploit this attack, so it has high execution complexity and limited impact. This issue has been addressed in version 2.35.1 of wiremock-jre8 and wiremock-jre8-standalone, version 3.0.3 of wiremock and wiremock-standalone, version 2.6.1 of the python version of wiremock, and versions 2.35.1-1 and 3.0.3-1 of the wiremock/wiremock Docker container. Users are advised to upgrade. Users unable to upgrade should either configure firewall rules to define the list of permitted destinations or to configure WireMock to use IP addresses instead of the domain names.
CVSS Score: 3.9 (LOW)
CWE: CWE-290
References: https://github.com/wiremock/wiremock/security/advisories/GHSA-pmxq-pj47-j8j4; https://wiremock.org/docs/configuration/#preventing-proxying-to-and-recording-from-specific-target-addresses; https://github.com/wiremock/wiremock/security/advisories/GHSA-pmxq-pj47-j8j4
CVE: CVE-2023-4772
Published: 2023-09-07
Description: The Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'newsletter_form' shortcode in versions up to, and including, 7.8.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/newsletter/tags/7.8.9/subscription/subscription.php#L1653; https://plugins.trac.wordpress.org/changeset/2955097/newsletter#file21; https://www.wordfence.com/threat-intel/vulnerabilities/id/87da5300-1add-44fc-a3e0-e8912f946c84?source=cve
CVE: CVE-2023-4792
Published: 2023-09-07
Description: The Duplicate Post Page Menu & Custom Post Type plugin for WordPress is vulnerable to unauthorized page and post duplication due to a missing capability check on the duplicate_ppmc_post_as_draft function in versions up to, and including, 2.3.1. This makes it possible for authenticated attackers with subscriber access or higher to duplicate posts and pages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/duplicate-post-page-menu-custom-post-type/trunk/duplicate-post-page-menu-cpt.php?rev=2871256#L383; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2963515%40duplicate-post-page-menu-custom-post-type&new=2963515%40duplicate-post-page-menu-custom-post-type&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/d6bb08e8-9ef5-41db-a111-c377a5dfae77?source=cve
CVE: CVE-2023-34357
Published: 2023-09-07
Description: 
Soar Cloud Ltd. HR Portal has a weak Password Recovery Mechanism for Forgotten Password. The reset password link sent out through e-mail, and the link will remain valid after the password has been reset and after the expected expiration date. An attacker with access to the browser history or has the line can thus use the URL again to change the password in order to take over the account.




CVSS Score: 7.8 (HIGH)
CWE: CWE-640
References: https://www.twcert.org.tw/tw/cp-132-7347-2653e-1.html; https://www.twcert.org.tw/tw/cp-132-7347-2653e-1.html
CVE: CVE-2023-38031
Published: 2023-09-07
Description: 
ASUS RT-AC86U Adaptive QoS - Web History function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.




CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.twcert.org.tw/tw/cp-132-7348-56989-1.html; https://www.twcert.org.tw/tw/cp-132-7348-56989-1.html
CVE: CVE-2023-38032
Published: 2023-09-07
Description: 
ASUS RT-AC86U AiProtection security- related function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.




CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.twcert.org.tw/tw/cp-132-7349-7f8cd-1.html; https://www.twcert.org.tw/tw/cp-132-7349-7f8cd-1.html
CVE: CVE-2023-38033
Published: 2023-09-07
Description: 
ASUS RT-AC86U unused Traffic Analyzer legacy Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.


CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.twcert.org.tw/tw/cp-132-7350-ded5e-1.html; https://www.twcert.org.tw/tw/cp-132-7350-ded5e-1.html
CVE: CVE-2023-39236
Published: 2023-09-07
Description: 
ASUS RT-AC86U Traffic Analyzer - Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.


CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.twcert.org.tw/tw/cp-132-7351-ec8fe-1.html; https://www.twcert.org.tw/tw/cp-132-7351-ec8fe-1.html
CVE: CVE-2023-39237
Published: 2023-09-07
Description: 
ASUS RT-AC86U Traffic Analyzer - Apps analysis function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.


CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.twcert.org.tw/tw/cp-132-7352-bad68-1.html; https://www.twcert.org.tw/tw/cp-132-7352-bad68-1.html
CVE: CVE-2023-4815
Published: 2023-09-07
Description: Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: https://github.com/answerdev/answer/commit/e75142a55546e01d8904f59db228422561f51666; https://huntr.dev/bounties/4cd3eeb4-57c9-4af2-ad19-2166c9e0fd2c; https://github.com/answerdev/answer/commit/e75142a55546e01d8904f59db228422561f51666
CVE: CVE-2023-39238
Published: 2023-09-07
Description: 
It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_svr.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.


CVSS Score: 7.2 (HIGH)
CWE: CWE-134
References: https://www.twcert.org.tw/tw/cp-132-7354-4e654-1.html; https://www.twcert.org.tw/tw/cp-132-7354-4e654-1.html
CVE: CVE-2023-39239
Published: 2023-09-07
Description: 
It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its  apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.


CVSS Score: 7.2 (HIGH)
CWE: CWE-134
References: https://https://www.twcert.org.tw/tw/cp-132-7355-0ce8d-1.html; https://https://www.twcert.org.tw/tw/cp-132-7355-0ce8d-1.html
CVE: CVE-2023-39240
Published: 2023-09-07
Description: 
It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_cli.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.


CVSS Score: 7.2 (HIGH)
CWE: CWE-134
References: https://www.twcert.org.tw/tw/cp-132-7356-021bf-1.html; https://www.twcert.org.tw/tw/cp-132-7356-021bf-1.html
CVE: CVE-2021-40698
Published: 2023-09-07
Description: ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an Use of Inherently Dangerous Function vulnerability that can lead to a security feature bypass  . An authenticated attacker could leverage this vulnerability to access and manipulate arbitrary data on the environment. 
CVSS Score: 7.4 (HIGH)
CWE: CWE-242
References: https://helpx.adobe.com/security/products/coldfusion/apsb21-75.html; https://helpx.adobe.com/security/products/coldfusion/apsb21-75.html
CVE: CVE-2021-40699
Published: 2023-09-07
Description: ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an improper access control vulnerability when checking permissions in the CFIDE path. An authenticated attacker could leverage this vulnerability to access and manipulate arbitrary data on the environment. 
CVSS Score: 7.4 (HIGH)
CWE: CWE-284
References: https://helpx.adobe.com/security/products/coldfusion/apsb21-75.html; https://helpx.adobe.com/security/products/coldfusion/apsb21-75.html
CVE: CVE-2021-40723
Published: 2023-09-07
Description: Acrobat Reader DC versions versions 2[PII_REDACTED]4 (and earlier), 2[PII_REDACTED]8 (and earlier) and 2[PII_REDACTED]8 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb21-09.html; https://helpx.adobe.com/security/products/acrobat/apsb21-09.html
CVE: CVE-2021-40790
Published: 2023-09-07
Description: Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an Use-After-Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://helpx.adobe.com/security/products/premiere_pro/apsb21-117.html; https://helpx.adobe.com/security/products/premiere_pro/apsb21-117.html
CVE: CVE-2021-40791
Published: 2023-09-07
Description: Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/premiere_pro/apsb21-117.html; https://helpx.adobe.com/security/products/premiere_pro/apsb21-117.html
CVE: CVE-2021-40795
Published: 2023-09-07
Description: Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/premiere_pro/apsb21-117.html; https://helpx.adobe.com/security/products/premiere_pro/apsb21-117.html
CVE: CVE-2021-42265
Published: 2023-09-07
Description: Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/premiere_pro/apsb21-117.html; https://helpx.adobe.com/security/products/premiere_pro/apsb21-117.html
CVE: CVE-2021-42734
Published: 2023-09-07
Description: Adobe Photoshop version 22.5.1  and earlier versions   are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/photoshop/apsb21-109.html; https://helpx.adobe.com/security/products/photoshop/apsb21-109.html