deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-37818
Published: 2024-06-20
Description: Strapi v4.24.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /strapi.io/_next/image. This vulnerability allows attackers to scan for open ports or access sensitive information via a crafted GET request. NOTE: The Strapi Development Community argues that this issue is not valid. They contend that "the strapi/admin was wrongly attributed a flaw that only pertains to the strapi.io website, and which, at the end of the day, does not pose any real SSRF risk to applications that make use of the Strapi library."
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: https://medium.com/%40barkadevaibhav491/server-side-request-forgery-in-strapi-e02d5fe218ab; https://strapi.io/; https://medium.com/%40barkadevaibhav491/server-side-request-forgery-in-strapi-e02d5fe218ab
CVE: CVE-2024-38082
Published: 2024-06-20
Description: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-451
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38082; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38082
CVE: CVE-2024-38093
Published: 2024-06-20
Description: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-451
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38093; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38093
CVE: CVE-2024-6147
Published: 2024-06-20
Description: Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Poly Plantronics Hub. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The specific flaw exists within the Spokes Update Service. By creating a symbolic link, an attacker can abuse the service to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-18271.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59, CWE-59
References: https://www.zerodayinitiative.com/advisories/ZDI-24-802/; https://www.zerodayinitiative.com/advisories/ZDI-24-802/
CVE: CVE-2024-6153
Published: 2024-06-20
Description: Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability. This vulnerability allows local attackers to downgrade Parallels software on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability.

The specific flaw exists within the Updater service. The issue results from the lack of proper validation of version information before performing an update. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-19481.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://www.zerodayinitiative.com/advisories/ZDI-24-803/; https://www.zerodayinitiative.com/advisories/ZDI-24-803/
CVE: CVE-2024-6154
Published: 2024-06-20
Description: Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability.

The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the current user on the host system. Was ZDI-CAN-20450.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-24-804/; https://www.zerodayinitiative.com/advisories/ZDI-24-804/
CVE: CVE-2024-29390
Published: 2024-06-20
Description: Daily Expenses Management System version 1.0, developed by PHP Gurukul, contains a time-based blind SQL injection vulnerability in the 'add-expense.php' page. An attacker can exploit the 'item' parameter in a POST request to execute arbitrary SQL commands in the backend database. This can be done by injecting specially crafted SQL queries that make the database perform time-consuming operations, thereby confirming the presence of the SQL injection vulnerability based on the delay in the server's response.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/CyberSentryX/CVE_Hunting/blob/main/CVE-2024-29390/README.md; https://github.com/CyberSentryX/CVE_Hunting/blob/main/CVE-2024-29390/README.md
CVE: CVE-2024-30848
Published: 2024-06-20
Description: Cross-site scripting (XSS) vulnerability in SilverSky E-mail service version 5.0.3126 allows remote attackers to inject arbitrary web script or HTML via the version parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Excis3/CVE-Disclosure/blob/main/CVE-2024-30848.md; https://github.com/Excis3/CVE-Disclosure/blob/main/CVE-2024-30848.md
CVE: CVE-2024-31586
Published: 2024-06-20
Description: A Cross Site Scripting (XSS) vulnerability exists in Computer Laboratory Management System version 1.0. This vulnerability allows a remote attacker to execute arbitrary code via the Borrower Name, Department, and Remarks parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/CyberSentryX/CVE_Hunting/tree/main/CVE-2024-31586; https://github.com/CyberSentryX/CVE_Hunting/tree/main/CVE-2024-31586
CVE: CVE-2024-36071
Published: 2024-06-20
Description: Samsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the directory and DLL files used during the installation process. This occurs because of an Untrusted Search Path.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-426
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE: CVE-2024-37183
Published: 2024-06-20
Description: Plain text credentials and session ID can be captured with a network sniffer.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-319
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-172-03; https://www.cisa.gov/news-events/ics-advisories/icsa-24-172-03
CVE: CVE-2024-5746
Published: 2024-06-20
Description: A Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker with the Site Administrator role to gain arbitrary code execution capability on the GitHub Enterprise Server instance. Exploitation required authenticated access to GitHub Enterprise Server as a user with the Site Administrator role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.13 and was fixed in versions 3.12.5, 3.11.11, 3.10.13, and 3.9.16. This vulnerability was reported via the GitHub Bug Bounty program.
CVSS Score: 7.6 (HIGH)
CWE: CWE-918
References: https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.13; https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.11; https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.5
CVE: CVE-2024-32943
Published: 2024-06-20
Description: An attacker may be able to cause a denial-of-service condition by sending many SSH packets repeatedly.
CVSS Score: 7.5 (HIGH)
CWE: CWE-799
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-172-03; https://www.cisa.gov/news-events/ics-advisories/icsa-24-172-03
CVE: CVE-2024-35246
Published: 2024-06-20
Description: An attacker may be able to cause a denial-of-service condition by sending many packets repeatedly.
CVSS Score: 7.5 (HIGH)
CWE: CWE-799
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-172-03; https://www.cisa.gov/news-events/ics-advisories/icsa-24-172-03
CVE: CVE-2024-37899
Published: 2024-06-20
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When an admin disables a user account, the user's profile is executed with the admin's rights. This allows a user to place malicious code in the user profile before getting an admin to disable the user account. To reproduce, as a user without script nor programming rights, edit the about section of your user profile and add `{{groovy}}services.logging.getLogger("attacker").error("Hello from Groovy!"){{/groovy}}`.
As an admin, go to the user profile and click the "Disable this account" button. Then, reload the page. If the logs show `attacker - Hello from Groovy!` then the instance is vulnerable. This has been patched in XWiki 14.10.21, 15.5.5, 15.10.6 and 16.0.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.

### Workarounds
We're not aware of any workaround except upgrading.

### References
* https://jira.xwiki.org/browse/XWIKI-21611
* https://github.com/xwiki/xwiki-platform/commit/f89c8f47fad6e5cc7e68c69a7e0acde07f5eed5a

CVSS Score: 9.0 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://github.com/xwiki/xwiki-platform/commit/f89c8f47fad6e5cc7e68c69a7e0acde07f5eed5a; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-j584-j2vj-3f93; https://jira.xwiki.org/browse/XWIKI-21611
CVE: CVE-2024-38359
Published: 2024-06-20
Description: The Lightning Network Daemon (lnd) - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation.  The issue was patched in lnd v0.17.0. Users should update to a version > v0.17.0 to be protected. Users unable to upgrade may set the `--rejecthtlc` CLI flag and also disable forwarding on channels via the `UpdateChanPolicyCommand`, or disable listening on a public network interface via the `--nolisten` flag as a mitigation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://delvingbitcoin.org/t/dos-disclosure-lnd-onion-bomb/979; https://github.com/lightningnetwork/lnd/releases/tag/v0.17.0-beta; https://github.com/lightningnetwork/lnd/security/advisories/GHSA-9gxx-58q6-42p7
CVE: CVE-2024-38361
Published: 2024-06-20
Description: Spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications. Use of an exclusion under an arrow that has multiple resources may resolve to `NO_PERMISSION` when permission is expected. If the resource exists under *multiple* folders and the user has access to view more than a single folder, SpiceDB may report the user does not have access due to a failure in the exclusion dispatcher to request that *all* the folders in which the user is a member be returned. Permission is returned as `NO_PERMISSION` when `PERMISSION` is expected on the `CheckPermission` API. This issue has been addressed in version 1.33.1. All users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 3.7 (LOW)
CWE: CWE-281
References: https://github.com/authzed/spicedb/commit/ecef31d2b266fde17eb2c3415e2ec4ceff96fbeb; https://github.com/authzed/spicedb/security/advisories/GHSA-grjv-gjgr-66g2; https://github.com/authzed/spicedb/commit/ecef31d2b266fde17eb2c3415e2ec4ceff96fbeb
CVE: CVE-2019-15797
Published: 2024-06-21
Description: Rejected reason: CVE ID was once reserved, but never used.
CVE: CVE-2019-15798
Published: 2024-06-21
Description: Rejected reason: CVE ID was once reserved, but never used.
CVE: CVE-2020-35155
Published: 2024-06-21
Description: Rejected reason: CVE ID was once reserved, but never used.
CVE: CVE-2020-35156
Published: 2024-06-21
Description: Rejected reason: CVE ID was once reserved, but never used.
CVE: CVE-2020-35157
Published: 2024-06-21
Description: Rejected reason: CVE ID was once reserved, but never used.
CVE: CVE-2020-35158
Published: 2024-06-21
Description: Rejected reason: CVE ID was once reserved, but never used.
CVE: CVE-2020-35159
Published: 2024-06-21
Description: Rejected reason: CVE ID was once reserved, but never used.
CVE: CVE-2020-35160
Published: 2024-06-21
Description: Rejected reason: CVE ID was once reserved, but never used.
CVE: CVE-2020-35161
Published: 2024-06-21
Description: Rejected reason: CVE ID was once reserved, but never used.
CVE: CVE-2020-35162
Published: 2024-06-21
Description: Rejected reason: CVE ID was once reserved, but never used.
CVE: CVE-2024-6212
Published: 2024-06-21
Description: A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected by this issue is the function get_student of the file student_form.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269276.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79, CWE-89
References: https://docs.google.com/document/d/1tl9-EAxUR64Og9zS-nyUx3YtG1V32Monkvq-h39tjpw/edit?usp=sharing; https://vuldb.com/?ctiid.269276; https://vuldb.com/?id.269276
CVE: CVE-2024-6213
Published: 2024-06-21
Description: A vulnerability was found in SourceCodester Food Ordering Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file login.php of the component Login Panel. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-269277 was assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/jadu101/CVE/blob/main/SourceCodester_Food_Ordering_Management_System_Sqli.md; https://vuldb.com/?ctiid.269277; https://vuldb.com/?id.269277
CVE: CVE-2024-6214
Published: 2024-06-21
Description: A vulnerability was found in SourceCodester Food Ordering Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file add-item.php. The manipulation of the argument price leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-269278 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/jadu101/CVE/blob/main/SourceCoderster_Food_Ordering_Management_System_add_item_Sqli.md; https://vuldb.com/?ctiid.269278; https://vuldb.com/?id.269278
CVE: CVE-2023-3352
Published: 2024-06-21
Description: The Smush plugin for WordPress is vulnerable to unauthorized deletion of the resmush list due to a missing capability check on the delete_resmush_list() function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to delete the resmush list for Nextgen or the Media Library.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset/3105107/wp-smushit/trunk/app/class-ajax.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/dfbaa3e4-40c2-41d8-996c-232e27a04b73?source=cve; https://plugins.trac.wordpress.org/changeset/3105107/wp-smushit/trunk/app/class-ajax.php
CVE: CVE-2024-1639
Published: 2024-06-21
Description: The License Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the showLicenseKey() and showAllLicenseKeys() functions in all versions up to, and including, 3.0.6. This makes it possible for authenticated attackers, with admin dashboard access (contributors by default due to WooCommerce) to view arbitrary decrypted license keys. The functions contain a referrer nonce check. However, these can be retrieved via the dashboard through the "license" JS variable. Please note that the version in trunk is patched, however, the 3.0.7 tagged version is not.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-863
References: https://plugins.trac.wordpress.org/browser/license-manager-for-woocommerce/tags/3.0.5/includes/Controllers/License.php; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3106503%40license-manager-for-woocommerce&new=3106503%40license-manager-for-woocommerce&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/92e444db-72d5-444f-811e-ade0bc097769?source=cve
CVE: CVE-2024-1955
Published: 2024-06-21
Description: The Hide Dashboard Notifications plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'warning_notices_settings' function in all versions up to, and including, 1.3. This makes it possible for authenticated attackers, with contributor access and above, to modify the plugin's settings.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/wp-hide-backed-notices/tags/1.3/admin/class-wp-hide-backed-notices-admin.php; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3104675%40wp-hide-backed-notices&new=3104675%40wp-hide-backed-notices&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/d4655236-7dfe-40ae-9d0c-6eacc59af13d?source=cve
CVE: CVE-2024-3610
Published: 2024-06-21
Description: The WP Child Theme Generator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wctg_easy_child_theme() function in all versions up to, and including, 1.1.1. This makes it possible for unauthenticated attackers to create a blank child theme and activate it cause the site to whitescreen.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/wp-child-theme-generator/trunk/wp-easy-child/wp-easy-child.php#L60; https://plugins.trac.wordpress.org/changeset?old_path=/wp-child-theme-generator/tags/1.1.1&new_path=/wp-child-theme-generator/tags/1.1.2&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/581e6686-a103-43f6-aa99-6a9862d98837?source=cve
CVE: CVE-2024-5344
Published: 2024-06-21
Description: The The Plus Addons for Elementor Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘forgoturl’ attribute within the plugin's WP Login & Register widget in all versions up to, and including, 5.5.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://roadmap.theplusaddons.com/updates/; https://www.wordfence.com/threat-intel/vulnerabilities/id/1ac8fb0b-21a9-4b94-bb24-b349a7fe3305?source=cve; https://roadmap.theplusaddons.com/updates/
CVE: CVE-2024-5503
Published: 2024-06-21
Description: The WP Blog Post Layouts plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.3. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary PHP files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.
CVSS Score: 8.8 (HIGH)
CWE: CWE-98
References: https://plugins.trac.wordpress.org/browser/wp-blog-post-layouts/trunk/includes/gutenberg.php#L883; https://plugins.trac.wordpress.org/browser/wp-blog-post-layouts/trunk/includes/gutenberg.php#L900; https://plugins.trac.wordpress.org/browser/wp-blog-post-layouts/trunk/includes/gutenberg.php#L917
CVE: CVE-2024-6215
Published: 2024-06-21
Description: A vulnerability was found in SourceCodester Food Ordering Management System up to 1.0. It has been rated as critical. This issue affects some unknown processing of the file view-ticket-admin.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269279.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/jadu101/CVE/blob/main/SourceCodester_Food_Ordering_Management_System_view_ticket_admin_Sqli.md; https://vuldb.com/?ctiid.269279; https://vuldb.com/?id.269279
CVE: CVE-2024-6216
Published: 2024-06-21
Description: A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file add-users.php. The manipulation of the argument contact leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269280.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/jadu101/CVE/blob/main/SourceCodester_Food_Ordering_Management_System_add_users_Sqli.md; https://vuldb.com/?ctiid.269280; https://vuldb.com/?id.269280
CVE: CVE-2024-6217
Published: 2024-06-21
Description: A vulnerability classified as critical was found in SourceCodester Food Ordering Management System 1.0. Affected by this vulnerability is an unknown functionality of the file user-router.php. The manipulation of the argument 1_verified leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-269281 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/jadu101/CVE/blob/main/SourceCodester_Food_Ordering_Management_System_user_router_Sqli.md; https://vuldb.com/?ctiid.269281; https://vuldb.com/?id.269281
CVE: CVE-2024-6218
Published: 2024-06-21
Description: A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. Affected by this issue is some unknown functionality of the file busprofile.php. The manipulation of the argument busid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-269282 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/HryspaHodor/CVE/issues/7; https://vuldb.com/?ctiid.269282; https://vuldb.com/?id.269282
CVE: CVE-2024-3961
Published: 2024-06-21
Description: The ConvertKit – Email Newsletter, Email Marketing, Subscribers and Landing Pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tag_subscriber function in all versions up to, and including, 2.4.9. This makes it possible for unauthenticated attackers to subscribe users to tags. Financial damages may occur to site owners if their API quota is exceeded.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3104932%40convertkit%2Ftrunk&old=3085997%40convertkit%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/79d828b8-aea2-4705-ae23-ac70133a6c3e?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3104932%40convertkit%2Ftrunk&old=3085997%40convertkit%2Ftrunk&sfp_email=&sfph_mail=