deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-24117
Published: 2024-10-02
Description: Insecure Permissions vulnerability in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release (9736) allows a remote attacker to gain privileges via the login check state component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732, CWE-732
References: https://gist.github.com/zty-1995/dbb3d5b2dbf65b4de5b71e57d08139ea; https://github.com/zty-1995/RG-NBS2009G-P-switch/tree/main/Any%20user%20login%20exists; https://github.com/zty-1995/RG-NBS2009G-P-switch/tree/main/Any%20user%20login%20exists
CVE: CVE-2024-28888
Published: 2024-10-02
Description: A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox  field object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1967; https://www.foxit.com/support/security-bulletins.html; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1967
CVE: CVE-2024-45519
Published: 2024-10-02
Description: The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78
References: https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes; https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes
CVE: CVE-2024-47616
Published: 2024-10-02
Description: Pomerium is an identity and context-aware access proxy. The Pomerium databroker service is responsible for managing all persistent Pomerium application state. Requests to the databroker service API are authorized by the presence of a JSON Web Token (JWT) signed by a key known by all Pomerium services in the same deployment. However, incomplete validation of this JWT meant that some service account access tokens would incorrectly be treated as valid for the purpose of databroker API authorization. Improper access to the databroker API could allow exfiltration of user info, spoofing of user sessions, or tampering with Pomerium routes, policies, and other settings. A Pomerium deployment is susceptible to this issue if all of the following conditions are met, you have issued a service account access token using Pomerium Zero or Pomerium Enterprise, the access token has an explicit expiration date in the future, and the core Pomerium databroker gRPC API is not otherwise secured by network access controls. This vulnerability is fixed in 0.27.1.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-863
References: https://github.com/pomerium/pomerium/commit/e018cf0fc0979d2abe25ff705db019feb7523444; https://github.com/pomerium/pomerium/releases/tag/v0.27.1; https://github.com/pomerium/pomerium/security/advisories/GHSA-r7rh-jww5-5fjr
CVE: CVE-2024-47134
Published: 2024-10-03
Description: Out-of-bounds write vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execution, and/or information disclosure because the issues exist in parsing of KPP project files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://jvn.jp/en/vu/JVNVU92808077/; https://www.electronics.jtekt.co.jp/en/topics/[PII_REDACTED]28/; https://www.electronics.jtekt.co.jp/jp/topics/[PII_REDACTED]388/
CVE: CVE-2024-47135
Published: 2024-10-03
Description: Stack-based buffer overflow vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execution, and/or information disclosure because the issues exist in parsing of KPP project files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://jvn.jp/en/vu/JVNVU92808077/; https://www.electronics.jtekt.co.jp/en/topics/[PII_REDACTED]28/; https://www.electronics.jtekt.co.jp/jp/topics/[PII_REDACTED]388/
CVE: CVE-2024-47136
Published: 2024-10-03
Description: Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execution, and/or information disclosure because the issues exist in parsing of KPP project files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://jvn.jp/en/vu/JVNVU92808077/; https://www.electronics.jtekt.co.jp/en/topics/[PII_REDACTED]28/; https://www.electronics.jtekt.co.jp/jp/topics/[PII_REDACTED]388/
CVE: CVE-2024-8352
Published: 2024-10-03
Description: The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.1.11 via the download_log function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/browser/social-web-suite/trunk/includes/libs/class-socialwebsuite-log.php#L78; https://plugins.trac.wordpress.org/changeset/3155593/social-web-suite/trunk?old=3068377&old_path=%2Fsocial-web-suite%2Ftrunk; https://www.wordfence.com/threat-intel/vulnerabilities/id/78ba132c-b5b4-4999-a0ec-67d17ae2857f?source=cve
CVE: CVE-2024-8159
Published: 2024-10-03
Description: Deep Freeze 9.00.020.5760 is vulnerable to an out-of-bounds read vulnerability by triggering the 0x70014 IOCTL code of the FarDisk.sys driver.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-125
References: https://fluidattacks.com/advisories/kanka/; https://www.faronics.com/products/deep-freeze
CVE: CVE-2024-42504
Published: 2024-10-03
Description: A security vulnerability in HPE IceWall Agent products could be exploited remotely to cause a Cross-Site Request Forgery (CSRF) in the login flow.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbmu04711en_us&docLocale=en_US
CVE: CVE-2024-47561
Published: 2024-10-03
Description: Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.
Users are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.
CVSS Score: 7.3 (HIGH)
CWE: CWE-502
References: https://lists.apache.org/thread/c2v7mhqnmq0jmbwxqq3r5jbj1xg43h5x; http://www.openwall.com/lists/oss-security/2024/10/03/1; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-9313
Published: 2024-10-03
Description: Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including authenticating as them.
CVSS Score: 8.8 (HIGH)
References: https://github.com/ubuntu/authd/security/advisories/GHSA-x5q3-c8rm-w787; https://www.cve.org/CVERecord?id=CVE-2024-9313
CVE: CVE-2024-47554
Published: 2024-10-03
Description: Uncontrolled Resource Consumption vulnerability in Apache Commons IO.

The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.


This issue affects Apache Commons IO: from 2.0 before 2.14.0.

Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-400
References: https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1; http://www.openwall.com/lists/oss-security/2024/10/03/2; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-47614
Published: 2024-10-03
Description: async-graphql is a GraphQL server library implemented in Rust. async-graphql before 7.0.10 does not limit the number of directives for a field. This can lead to Service Disruption, Resource Exhaustion, and User Experience Degradation. This vulnerability is fixed in 7.0.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/async-graphql/async-graphql/commit/7f[PII_REDACTED]d4e9c5adcd543962173e2f6cbd34; https://github.com/async-graphql/async-graphql/security/advisories/GHSA-5gc2-7c65-8fq8
CVE: CVE-2024-47617
Published: 2024-10-03
Description: Sulu is a PHP content management system. This vulnerability allows an attacker to inject arbitrary HTML/JavaScript code through the media download URL in Sulu CMS. It affects the SuluMediaBundle component. The vulnerability is a Reflected Cross-Site Scripting (XSS) issue, which could potentially allow attackers to steal sensitive information, manipulate the website's content, or perform actions on behalf of the victim. This vulnerability is fixed in 2.6.5 and 2.5.21.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/sulu/sulu/commit/a5a5ae555d282e88ff8559d38cfb46dea7939bda; https://github.com/sulu/sulu/commit/eeacd14b6cf55f[PII_REDACTED]40d40ebb00314b29; https://github.com/sulu/sulu/security/advisories/GHSA-6784-9c82-vr85
CVE: CVE-2024-47618
Published: 2024-10-03
Description: Sulu is a PHP content management system. Sulu is vulnerable against XSS whereas a low privileged user with access to the “Media” section can upload an SVG file with a malicious payload. Once uploaded and accessed, the malicious javascript will be executed on the victims’ (other users including admins) browsers. This issue is fixed in 2.6.5.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/sulu/sulu/commit/ca72f75eebe41ea7726624d8aea7da6c425f1eb9; https://github.com/sulu/sulu/security/advisories/GHSA-255w-87rh-rg44
CVE: CVE-2024-5803
Published: 2024-10-03
Description: The AVGUI.exe of AVG/Avast Antivirus before versions before 24.1 can allow a local attacker to escalate privileges via an COM hijack in a time-of-check to time-of-use (TOCTOU) when self protection is disabled.
CVSS Score: 7.5 (HIGH)
CWE: CWE-367
References: https://support.norton.com/sp/static/external/tools/security-advisories.html
CVE: CVE-2024-9100
Published: 2024-10-03
Description: Zohocorp ManageEngine Analytics Plus versions before 5410 and Zoho Analytics On-Premise versions before 5410 are vulnerable to Path traversal.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://www.manageengine.com/analytics-plus/CVE-2024-9100.html; https://www.zoho.com/analytics/onpremise/CVE-2024-9100.html
CVE: CVE-2024-9460
Published: 2024-10-03
Description: A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/ppp-src/CVE/issues/8; https://vuldb.com/?ctiid.279132; https://vuldb.com/?id.279132
CVE: CVE-2024-25590
Published: 2024-10-03
Description: An attacker can publish a zone containing specific Resource Record Sets.

 Repeatedly processing and caching results for these sets can lead to a 

denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-04.html; http://www.openwall.com/lists/oss-security/2024/10/03/3
CVE: CVE-2024-36474
Published: 2024-10-03
Description: An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library (libgsf) version v1.14.52. A specially crafted file can result in an integer overflow when processing the directory from the file that allows for an out-of-bounds index to be used when reading and writing to an array. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.4 (HIGH)
CWE: CWE-190, CWE-190
References: https://gitlab.gnome.org/GNOME/libgsf/-/issues/34; https://talosintelligence.com/vulnerability_reports/TALOS-2024-2068; https://lists.debian.org/debian-lts-announce/2024/10/msg00002.html
CVE: CVE-2024-39755
Published: 2024-10-03
Description: A privilege escalation vulnerability exists in the node update functionality of Veertu Anka Build 1.42.0. A specially crafted PKG file can lead to execute priviledged operation. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-282
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2060; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2060
CVE: CVE-2024-41163
Published: 2024-10-03
Description: A directory traversal vulnerability exists in the archive functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2059; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2059
CVE: CVE-2024-41922
Published: 2024-10-03
Description: A directory traversal vulnerability exists in the log files download functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2061; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2061
CVE: CVE-2024-42415
Published: 2024-10-03
Description: An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.4 (HIGH)
CWE: CWE-190
References: https://gitlab.gnome.org/GNOME/libgsf/-/issues/34; https://talosintelligence.com/vulnerability_reports/TALOS-2024-2069; http://www.openwall.com/lists/oss-security/2024/10/04/3
CVE: CVE-2024-45870
Published: 2024-10-03
Description: Bandisoft BandiView 7.05 is vulnerable to Incorrect Access Control in sub_0x3d80fc via a crafted POC file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://github.com/Jaecho6053/BandiView_PoC
CVE: CVE-2024-0123
Published: 2024-10-03
Description: NVIDIA CUDA toolkit for Windows and Linux contains a vulnerability in the nvdisasm command line tool where an attacker may cause an improper validation in input issue by tricking the user into running nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to denial of service.
CVSS Score: 3.3 (LOW)
CWE: CWE-1285
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5577
CVE: CVE-2024-0124
Published: 2024-10-03
Description: NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause nvdisasm to read freed memory by running it on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service.
CVSS Score: 3.3 (LOW)
CWE: CWE-416
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5577
CVE: CVE-2024-0125
Published: 2024-10-03
Description: NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause a NULL pointer dereference by running nvdisasm on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service.
CVSS Score: 3.3 (LOW)
CWE: CWE-476
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5577
CVE: CVE-2024-45871
Published: 2024-10-03
Description: Bandisoft BandiView 7.05 is Incorrect Access Control via sub_0x232bd8 resulting in denial of service (DOS).
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20
References: https://github.com/Jaecho6053/BandiView_PoC
CVE: CVE-2024-45872
Published: 2024-10-03
Description: Bandisoft BandiView 7.05 is vulnerable to Buffer Overflow via sub_0x410d1d. The vulnerability occurs due to insufficient validation of PSD files.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-122
References: https://github.com/Jaecho6053/BandiView_PoC
CVE: CVE-2024-7824
Published: 2024-10-03
Description: Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrUrl.Dll modules) allows Functionality Misuse.This issue affects SecureAnywhere - Web Shield: before 2.1.2.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-843, CWE-843
References: https://answers.webroot.com/Webroot/ukp.aspx?pid=12&app=vw&vw=1&login=1&json=1&solutionid=4275
CVE: CVE-2024-7825
Published: 2024-10-03
Description: Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrUrl.Dll modules) allows Functionality Misuse.This issue affects SecureAnywhere - Web Shield: before 2.1.2.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-843, CWE-843
References: https://answers.webroot.com/Webroot/ukp.aspx?pid=12&app=vw&vw=1&login=1&json=1&solutionid=4275
CVE: CVE-2024-7826
Published: 2024-10-03
Description: Improper Check for Unusual or Exceptional Conditions vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrURL.Dll modules) allows Functionality Misuse.This issue affects SecureAnywhere - Web Shield: before 2.1.2.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-754, CWE-754
References: https://answers.webroot.com/Webroot/ukp.aspx?pid=12&app=vw&vw=1&login=1&json=1&solutionid=4275
CVE: CVE-2024-8508
Published: 2024-10-03
Description: NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very large RRsets can cause Unbound to spend a considerable time applying name compression to downstream replies. This can lead to degraded performance and eventually denial of service in well orchestrated attacks. The vulnerability can be exploited by a malicious actor querying Unbound for the specially crafted contents of a malicious zone with very large RRsets. Before Unbound replies to the query it will try to apply name compression which was an unbounded operation that could lock the CPU until the whole packet was complete. Unbound version 1.21.1 introduces a hard limit on the number of name compression calculations it is willing to do per packet. Packets that need more compression will result in semi-compressed packets or truncated packets, even on TCP for huge messages, to avoid locking the CPU for long. This change should not affect normal DNS traffic.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-606, CWE-1284
References: https://www.nlnetlabs.nl/downloads/unbound/CVE-2024-8508.txt; http://www.openwall.com/lists/oss-security/2024/10/04/5; https://lists.debian.org/debian-lts-announce/2024/11/msg00009.html
CVE: CVE-2023-37822
Published: 2024-10-03
Description: The Eufy Homebase 2 before firmware version 3.3.4.1h creates a dedicated wireless network for its ecosystem, which serves as a proxy to the end user's primary network. The WPA2-PSK generation of this dedicated network is flawed and solely based on the serial number. Due to the flawed generation process, the WPA2-PSK can be brute forced offline within seconds. This vulnerability allows an attacker in proximity to the dedicated wireless network to gain unauthorized access to the end user's primary network. The only requirement of the attack is proximity to the dedicated wireless network.
CVSS Score: 8.2 (HIGH)
CWE: CWE-331, CWE-331
References: http://anker.com; http://eufy.com; https://www.usenix.org/conference/woot24/presentation/goeman
CVE: CVE-2024-34535
Published: 2024-10-03
Description: In Mastodon 4.1.6, API endpoint rate limiting can be bypassed by setting a crafted HTTP request header.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-444
References: https://github.com/mastodon/mastodon/security/advisories/GHSA-q3rg-xx5v-4mxh; https://github.com/mastodon/mastodon/tags
CVE: CVE-2024-41987
Published: 2024-10-03
Description: The TEM Opera Plus FM Family Transmitter application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.
CWE: CWE-352
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-277-01
CVE: CVE-2024-41988
Published: 2024-10-03
Description: TEM Opera Plus FM Family Transmitter allows access to an unprotected endpoint that allows MPFS File System binary image upload without authentication. This file system serves as the basis for the HTTP2 web server module but is also used by the SNMP module and is available to other applications that require basic read-only storage capabilities. This can be exploited to overwrite the flash program memory that holds the web server's main interfaces and execute arbitrary code.
CWE: CWE-306
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-277-01
CVE: CVE-2024-47762
Published: 2024-10-03
Description: Backstage is an open framework for building developer portals. Configuration supplied through APP_CONFIG_* environment variables, for example APP_CONFIG_backend_listen_port=7007, where unexpectedly ignoring the visibility defined in configuration schema. This occurred even if the configuration schema specified that they should have backend or secret visibility. This was an intended feature of the APP_CONFIG_* way of supplying configuration, but now clearly goes against the expected behavior of the configuration system. This behavior leads to a risk of potentially exposing sensitive configuration details intended to remain private or restricted to backend processes. The issue has been resolved in version 0.3.75 of the @backstage/plugin-app-backend package. As a temporary measure, avoid supplying secrets using the APP_CONFIG_ configuration pattern. Consider alternative methods for setting secrets, such as the environment substitution available for Backstage configuration.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-440
References: https://github.com/backstage/backstage/commit/323e6129073c5cb4cc106a1239eaec31a129554f; https://github.com/backstage/backstage/security/advisories/GHSA-qc4v-xq2m-65wc
CVE: CVE-2024-41583
Published: 2024-10-03
Description: DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to stored Cross Site Scripting (XSS) by authenticated users due to poor sanitization of the router name.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://www.forescout.com/resources/draybreak-draytek-research/; https://www.forescout.com/resources/draytek14-vulnerabilities
CVE: CVE-2024-41584
Published: 2024-10-03
Description: DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to reflected XSS by authenticated users, caused by missing validation of the sFormAuthStr parameter.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://www.forescout.com/resources/draybreak-draytek-research/; https://www.forescout.com/resources/draytek14-vulnerabilities