deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-23087
Published: 2024-02-15
Description: The e1000 network adapters permit a variety of modifications to an Ethernet packet when it is being transmitted.  These include the insertion of IP and TCP checksums, insertion of an Ethernet VLAN header, and TCP segmentation offload ("TSO").  The e1000 device model uses an on-stack buffer to generate the modified packet header when simulating these modifications on transmitted packets.

When checksum offload is requested for a transmitted packet, the e1000 device model used a guest-provided value to specify the checksum offset in the on-stack buffer.  The offset was not validated for certain packet types.

A misbehaving bhyve guest could overwrite memory in the bhyve process on the host, possibly leading to code execution in the host context.

The bhyve process runs in a Capsicum sandbox, which (depending on the FreeBSD version and bhyve configuration) limits the impact of exploiting this issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://security.freebsd.org/advisories/FreeBSD-SA-22:05.bhyve.asc; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.freebsd.org/advisories/FreeBSD-SA-22:05.bhyve.asc
CVE: CVE-2022-23088
Published: 2024-02-15
Description: The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer.

While a FreeBSD Wi-Fi client is in scanning mode (i.e., not associated with a SSID) a malicious beacon frame may overwrite kernel memory, leading to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://security.freebsd.org/advisories/FreeBSD-SA-22:07.wifi_meshid.asc; https://security.freebsd.org/advisories/FreeBSD-SA-22:07.wifi_meshid.asc
CVE: CVE-2022-23089
Published: 2024-02-15
Description: When dumping core and saving process information, proc_getargv() might return an sbuf which have a sbuf_len() of 0 or -1, which is not properly handled.

An out-of-bound read can happen when user constructs a specially crafted ps_string, which in turn can cause the kernel to crash.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-125
References: https://security.freebsd.org/advisories/FreeBSD-SA-22:09.elf.asc; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.freebsd.org/advisories/FreeBSD-SA-22:09.elf.asc
CVE: CVE-2024-1488
Published: 2024-02-15
Description: A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.
CVSS Score: 8.0 (HIGH)
CWE: CWE-276, CWE-276
References: https://access.redhat.com/errata/RHSA-2024:1750; https://access.redhat.com/errata/RHSA-2024:1751; https://access.redhat.com/errata/RHSA-2024:1780
CVE: CVE-2024-25559
Published: 2024-02-15
Description: URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8. If an attacker sends a specially crafted request, the administrator of the product may be forced to access an arbitrary website when clicking a link in the audit log.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-601
References: https://developer.a-blogcms.jp/blog/news/JVN-48966481.html; https://jvn.jp/en/jp/JVN48966481/; https://developer.a-blogcms.jp/blog/news/JVN-48966481.html
CVE: CVE-2024-25940
Published: 2024-02-15
Description: `bhyveload -h <host-path>` may be used to grant loader access to the <host-path> directory tree on the host.  Affected versions of bhyveload(8) do not make any attempt to restrict loader's access to <host-path>, allowing the loader to read any file the host user has access to. In the bhyveload(8) model, the host supplies a userboot.so to boot with, but the loader scripts generally come from the guest image.  A maliciously crafted script could be used to exfiltrate sensitive data from the host accessible to the user running bhyhveload(8), which is often the system root.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-922
References: https://security.freebsd.org/advisories/FreeBSD-SA-24:01.bhyveload.asc; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.freebsd.org/advisories/FreeBSD-SA-24:01.bhyveload.asc
CVE: CVE-2024-25941
Published: 2024-02-15
Description: The jail(2) system call has not limited a visiblity of allocated TTYs (the kern.ttys sysctl).  This gives rise to an information leak about processes outside the current jail.

Attacker can get information about TTYs allocated on the host or in other jails.  Effectively, the information printed by "pstat -t" may be leaked.
CVSS Score: 3.3 (LOW)
References: https://security.freebsd.org/advisories/FreeBSD-SA-24:02.tty.asc; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.freebsd.org/advisories/FreeBSD-SA-24:02.tty.asc
CVE: CVE-2021-29633
Published: 2024-02-15
Description: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021.
CVE: CVE-2021-29634
Published: 2024-02-15
Description: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021.
CVE: CVE-2021-29635
Published: 2024-02-15
Description: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021.
CVE: CVE-2021-29636
Published: 2024-02-15
Description: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021.
CVE: CVE-2021-29637
Published: 2024-02-15
Description: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021.
CVE: CVE-2021-29638
Published: 2024-02-15
Description: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021.
CVE: CVE-2021-29639
Published: 2024-02-15
Description: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021.
CVE: CVE-2021-29640
Published: 2024-02-15
Description: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021.
CVE: CVE-2022-23090
Published: 2024-02-15
Description: The aio_aqueue function, used by the lio_listio system call, fails to release a reference to a credential in an error case.

An attacker may cause the reference count to overflow, leading to a use after free (UAF).
CVSS Score: 7.7 (HIGH)
CWE: CWE-416
References: https://security.freebsd.org/advisories/FreeBSD-SA-22:10.aio.asc; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.freebsd.org/advisories/FreeBSD-SA-22:10.aio.asc
CVE: CVE-2022-23091
Published: 2024-02-15
Description: A particular case of memory sharing is mishandled in the virtual memory system.  This is very similar to SA-21:08.vm, but with a different root cause.

An unprivileged local user process can maintain a mapping of a page after it is freed, allowing that process to read private data belonging to other processes or the kernel.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-401
References: https://security.freebsd.org/advisories/FreeBSD-SA-22:11.vm.asc; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.freebsd.org/advisories/FreeBSD-SA-22:11.vm.asc
CVE: CVE-2022-23092
Published: 2024-02-15
Description: The implementation of lib9p's handling of RWALK messages was missing a bounds check needed when unpacking the message contents.  The missing check means that the receipt of a specially crafted message will cause lib9p to overwrite unrelated memory.

The bug can be triggered by a malicious bhyve guest kernel to overwrite memory in the bhyve(8) process.  This could potentially lead to user-mode code execution on the host, subject to bhyve's Capsicum sandbox.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://security.freebsd.org/advisories/FreeBSD-SA-22:12.lib9p.asc; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.freebsd.org/advisories/FreeBSD-SA-22:12.lib9p.asc
CVE: CVE-2022-23093
Published: 2024-02-15
Description: ping reads raw IP packets from the network to process responses in the pr_pack() function.  As part of processing a response ping has to reconstruct the IP header, the ICMP header and if present a "quoted packet," which represents the packet that generated an ICMP error.  The quoted packet again has an IP header and an ICMP header.

The pr_pack() copies received IP and ICMP headers into stack buffers for further processing.  In so doing, it fails to take into account the possible presence of IP option headers following the IP header in either the response or the quoted packet.  When IP options are present, pr_pack() overflows the destination buffer by up to 40 bytes.

The memory safety bugs described above can be triggered by a remote host, causing the ping program to crash.

The ping process runs in a capability mode sandbox on all affected versions of FreeBSD and is thus very constrained in how it can interact with the rest of the system at the point where the bug can occur.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://security.freebsd.org/advisories/FreeBSD-SA-22:15.ping.asc; https://security.freebsd.org/advisories/FreeBSD-SA-22:15.ping.asc
CVE: CVE-2023-46596
Published: 2024-02-15
Description: 
Improper input validation in Algosec FireFlow VisualFlow workflow editor via Name, Description and Configuration File field in version A32.20, A32.50, A32.60 permits an attacker to initiate an XSS attack by injecting malicious executable scripts into the application's code. Fixed in version A32.20 (b600 and above), A32.50 (b430 and above), A32.60 (b250 and above)


CVSS Score: 5.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.algosec.com/docs/en/cves/Content/tech-notes/cves/cve-2023-46596.htm; https://www.algosec.com/docs/en/cves/Content/tech-notes/cves/cve-2023-46596.htm
CVE: CVE-2023-51787
Published: 2024-02-15
Description: An issue was discovered in Wind River VxWorks 7 22.09 and 23.03. If a VxWorks task or POSIX thread that uses OpenSSL exits, limited per-task memory is not freed, resulting in a memory leak.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2023-51787; https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2023-51787
CVE: CVE-2024-0708
Published: 2024-02-15
Description: The Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.2. This makes it possible for unauthenticated attackers to access landing pages that may not be public.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/changeset/3034324/landing-page-cat/trunk/includes/landing/landing.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/7b34f50a-4d2d-49b8-86e4-0416c8be202b?source=cve; https://plugins.trac.wordpress.org/changeset/3034324/landing-page-cat/trunk/includes/landing/landing.php
CVE: CVE-2024-21727
Published: 2024-02-15
Description: XSS vulnerability in DP Calendar component for Joomla.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://extensions.joomla.org/extension/dpcalendar/; https://extensions.joomla.org/extension/dpcalendar/
CVE: CVE-2024-0353
Published: 2024-02-15
Description: Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.eset.com/en/ca8612-eset-customer-advisory-link-following-local-privilege-escalation-vulnerability-in-eset-products-for-windows-fixed; https://packetstormsecurity.com/files/179495/ESET-NOD32-Antivirus-17.2.7.0-Unquoted-Service-Path.html; https://packetstormsecurity.com/files/182464/ESET-NOD32-Antivirus-18.0.12.0-Unquoted-Service-Path.html
CVE: CVE-2024-24256
Published: 2024-02-15
Description: SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an attacker to obtain sensitive information via the gwbhAIM parameter in the saveMove.jsp in the hr_position directory.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-89
References: https://github.com/l8l1/killl.github.io/blob/main/3.md; https://github.com/l8l1/killl.github.io/blob/main/3.md
CVE: CVE-2024-24386
Published: 2024-02-15
Description: An issue in VitalPBX v.3.2.4-5 allows an attacker to execute arbitrary code via a crafted payload to the /var/lib/vitalpbx/scripts folder.
CVSS Score: 7.2 (HIGH)
CWE: CWE-284
References: https://erickduarte.notion.site/VitalPBX-3-2-4-5-ee402173241c493687aa22ec60160c67?pvs=4; https://github.com/erick-duarte/CVE-2024-24386; https://erickduarte.notion.site/VitalPBX-3-2-4-5-ee402173241c493687aa22ec60160c67?pvs=4
CVE: CVE-2023-4537
Published: 2024-02-15
Description: Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification.

This issue affects ERP XL: from 2020.2.2 through 2023.2.
CVSS Score: 7.4 (HIGH)
CWE: CWE-755
References: https://cert.pl/en/posts/2024/02/CVE-2023-4537/; https://cert.pl/posts/2024/02/CVE-2023-4537/; https://cert.pl/en/posts/2024/02/CVE-2023-4537/
CVE: CVE-2023-4538
Published: 2024-02-15
Description: The database access credentials configured during installation are stored in a special table, and are encrypted with a shared key, same among all Comarch ERP XL client installations. This could allow an attacker with access to that table to retrieve plain text passwords.

This issue affects ERP XL: from 2020.2.2 through 2023.2.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://cert.pl/en/posts/2024/02/CVE-2023-4537/; https://cert.pl/posts/2024/02/CVE-2023-4537/; https://cert.pl/en/posts/2024/02/CVE-2023-4537/
CVE: CVE-2023-4539
Published: 2024-02-15
Description: Use of a hard-coded password for a special database account created during Comarch ERP XL installation allows an attacker to retrieve embedded sensitive data stored in the database. The password is same among all Comarch ERP XL installations. 

This issue affects ERP XL: from 2020.2.2 through 2023.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798, CWE-798
References: https://cert.pl/en/posts/2024/02/CVE-2023-4537/; https://cert.pl/posts/2024/02/CVE-2023-4537/; https://cert.pl/en/posts/2024/02/CVE-2023-4537/
CVE: CVE-2024-0390
Published: 2024-02-15
Description: INPRAX "iZZi connect" application on Android contains hard-coded MQTT queue credentials. The same MQTT queue is used by corresponding physical recuperation devices. Exploiting this vulnerability could potentially allow unauthorized access to manage and read parameters of the recuperation unit "reQnet iZZi".This issue affects "iZZi connect" application versions before[PII_REDACTED].


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://cert.pl/en/posts/2024/02/CVE-2024-0390/; https://cert.pl/posts/2024/02/CVE-2024-0390/; https://cert.pl/en/posts/2024/02/CVE-2024-0390/
CVE: CVE-2024-20722
Published: 2024-02-15
Description: Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html; https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html
CVE: CVE-2024-20723
Published: 2024-02-15
Description: Substance3D - Painter versions 9.1.1 and earlier are affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html; https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html
CVE: CVE-2024-20724
Published: 2024-02-15
Description: Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html; https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html
CVE: CVE-2024-20725
Published: 2024-02-15
Description: Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html; https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html
CVE: CVE-2024-20740
Published: 2024-02-15
Description: Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html; https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html
CVE: CVE-2024-20741
Published: 2024-02-15
Description: Substance3D - Painter versions 9.1.1 and earlier are affected by a Write-what-where Condition vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-123, CWE-787
References: https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html; https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html
CVE: CVE-2024-20742
Published: 2024-02-15
Description: Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html; https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html
CVE: CVE-2024-20743
Published: 2024-02-15
Description: Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html; https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html
CVE: CVE-2024-20744
Published: 2024-02-15
Description: Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html; https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html
CVE: CVE-2023-28078
Published: 2024-02-15
Description: 
Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured. A remote unauthenticated attacker could potentially exploit this vulnerability leading to information disclosure and a possible Denial of Service when a huge number of requests are sent to the switch. This is a high severity vulnerability as it allows an attacker to view sensitive data. Dell recommends customers to upgrade at the earliest opportunity.


CVSS Score: 9.1 (CRITICAL)
CWE: CWE-923
References: https://www.dell.com/support/kbdoc/en-us/000216584/dsa-2023-124-security-update-for-dell-smartfabric-os10-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000216584/dsa-2023-124-security-update-for-dell-smartfabric-os10-multiple-vulnerabilities
CVE: CVE-2023-32462
Published: 2024-02-15
Description: 
Dell OS10 Networking Switches running 10.5.2.x and above contain an OS command injection vulnerability when using remote user authentication. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands and possible system takeover. This is a critical vulnerability as it allows an attacker to cause severe damage. Dell recommends customers to upgrade at the earliest opportunity.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-78
References: https://www.dell.com/support/kbdoc/en-us/000216584/dsa-2023-124-security-update-for-dell-smartfabric-os10-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000216584/dsa-2023-124-security-update-for-dell-smartfabric-os10-multiple-vulnerabilities
CVE: CVE-2023-32484
Published: 2024-02-15
Description: 
Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability. A remote unauthenticated malicious user may exploit this vulnerability and escalate privileges up to the highest administrative level. This is a Critical vulnerability affecting certain protocols, Dell recommends customers to upgrade at the earliest opportunity.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://www.dell.com/support/kbdoc/en-us/000216586/dsa-2023-284-security-update-for-dell-emc-enterprise-sonic-os-command-injection-vulnerability-when-using-remote-user-authentication; https://www.dell.com/support/kbdoc/en-us/000216586/dsa-2023-284-security-update-for-dell-emc-enterprise-sonic-os-command-injection-vulnerability-when-using-remote-user-authentication
CVE: CVE-2023-39244
Published: 2024-02-15
Description: DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability in EHAC component. An remote unauthenticated attacker could potentially exploit this vulnerability by eavesdropping the network traffic to gain admin level credentials.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://www.dell.com/support/kbdoc/en-us/000216654/dsa-2023-299-security-update-for-dell-esi-enterprise-storage-integrator-for-sap-lama-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000216654/dsa-2023-299-security-update-for-dell-esi-enterprise-storage-integrator-for-sap-lama-multiple-security-vulnerabilities