deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-30265
Published: 2024-04-03
Description: Collabora Online is a collaborative online office suite based on LibreOffice technology. Any deployment of voilà dashboard allow local file inclusion. Any file on a filesystem that is readable by the user that runs the voilà dashboard server can be downloaded by someone with network access to the server. Whether this still requires authentication depends on how voilà is deployed. This issue has been patched in 0.2.17, 0.3.8, 0.4.4 and 0.5.6.

CVSS Score: 7.5 (HIGH)
CWE: CWE-73
References: https://github.com/voila-dashboards/voila/commit/00d6362c237b6b4d[PII_REDACTED]54d6076ead0c52; https://github.com/voila-dashboards/voila/commit/28faacc9b03b160fd8fa920ad045f4ec0667ab67; https://github.com/voila-dashboards/voila/commit/5542e4ae36bb5d184deaa48f95e76be477756af2
CVE: CVE-2024-3270
Published: 2024-04-03
Description: A vulnerability classified as problematic was found in ThingsBoard up to 3.6.2. This vulnerability affects unknown code of the component AdvancedFeature. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-259282 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure and replied to be planning to fix this issue in version 3.7.
CVSS Score: 3.8 (LOW)
CWE: CWE-284
References: https://drive.google.com/file/d/1w9iSMpyKDuapH9wjsgTe8AYPn8Z30u2Z/view?usp=drive_link; https://vuldb.com/?ctiid.259282; https://vuldb.com/?id.259282
CVE: CVE-2024-25568
Published: 2024-04-04
Description: OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands by sending a specially crafted request to the product. Affected products and versions are as follows: WRC-X3200GST3-B v1.25 and earlier, WRC-G01-W v1.24 and earlier, and WMC-X1800GST-B v1.41 and earlier. Note that WMC-X1800GST-B is also included in e-Mesh Starter Kit "WMC-2LX-B".
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://jvn.jp/en/vu/JVNVU95381465/; https://www.elecom.co.jp/news/security/20240326-01/; https://jvn.jp/en/vu/JVNVU95381465/
CVE: CVE-2024-26258
Published: 2024-04-04
Description: OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with credentials to execute arbitrary OS commands by sending a specially crafted request to the product.
CVSS Score: 7.1 (HIGH)
CWE: CWE-78
References: https://jvn.jp/en/vu/JVNVU95381465/; https://www.elecom.co.jp/news/security/20240326-01/; https://jvn.jp/en/vu/JVNVU95381465/
CVE: CVE-2024-29167
Published: 2024-04-04
Description: SVR-116 firmware version 1.6.0.30028871 allows a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://jvn.jp/en/vu/JVNVU93932313/; https://jvn.jp/en/vu/JVNVU93932313/
CVE: CVE-2024-29225
Published: 2024-04-04
Description: WRC-X3200GST3-B v1.25 and earlier, and WRC-G01-W v1.24 and earlier allow a network-adjacent unauthenticated attacker to obtain the configuration file containing sensitive information by sending a specially crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-552
References: https://jvn.jp/en/vu/JVNVU95381465/; https://www.elecom.co.jp/news/security/20240326-01/; https://jvn.jp/en/vu/JVNVU95381465/
CVE: CVE-2024-3272
Published: 2024-04-04
Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user with the input messagebus leads to hard-coded credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259283. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://github.com/netsecfish/dlink; https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383; https://vuldb.com/?ctiid.259283
CVE: CVE-2024-3273
Published: 2024-04-04
Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument system leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259284. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
CVSS Score: 7.3 (HIGH)
CWE: CWE-77
References: https://github.com/netsecfish/dlink; https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383; https://vuldb.com/?ctiid.259284
CVE: CVE-2024-2692
Published: 2024-04-04
Description: SiYuan version 3.0.3 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to Server Side XSS.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://fluidattacks.com/advisories/dezco/; https://github.com/siyuan-note/siyuan/; https://fluidattacks.com/advisories/dezco/
CVE: CVE-2024-2803
Published: 2024-04-04
Description: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the countdown widget in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3062463%40elementskit-lite&new=3062463%40elementskit-lite&sfp_email=&sfph_mail=#file12; https://www.wordfence.com/threat-intel/vulnerabilities/id/b1c44ad9-e61e-4f29-9c0b-7c0a89b0c8da?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3062463%40elementskit-lite&new=3062463%40elementskit-lite&sfp_email=&sfph_mail=#file12
CVE: CVE-2024-2868
Published: 2024-04-04
Description: The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the slitems parameter in the WL Special Day Offer Widget in all versions up to, and including, 2.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/woolentor-addons/tags/2.8.2/includes/addons/universal_product.php#L2548; https://plugins.trac.wordpress.org/changeset/3061864/woolentor-addons/tags/2.8.4/includes/addons/universal_product.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/27b8e0c0-fb0b-4d36-abc4-3e66ec7b5195?source=cve
CVE: CVE-2024-3022
Published: 2024-04-04
Description: The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient filename validation in the 'bookingpress_process_upload' function in all versions up to, and including 1.0.87. This allows an authenticated attacker with administrator-level capabilities or higher to upload arbitrary files on the affected site's server, enabling remote code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://plugins.trac.wordpress.org/changeset/3061435/bookingpress-appointment-booking/trunk/core/classes/class.bookingpress_fileupload_class.php; https://r0ot.notion.site/BookingPress-1-0-84-Authenticated-Administrator-Arbitrary-File-Upload-lead-to-RCE-e2603371c0c14d828144e26f2fdc1d01?pvs=4; https://www.wordfence.com/threat-intel/vulnerabilities/id/049ec264-3ed1-4741-937d-8a633ef0a627?source=cve
CVE: CVE-2024-3030
Published: 2024-04-04
Description: The Announce from the Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3061409%40announce-from-the-dashboard&new=3061409%40announce-from-the-dashboard&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/b0d1cf3b-5631-49bd-a7aa-86de2ee4b5b9?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3061409%40announce-from-the-dashboard&new=3061409%40announce-from-the-dashboard&sfp_email=&sfph_mail=
CVE: CVE-2024-3274
Published: 2024-04-04
Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DNS-320L, DNS-320LW and DNS-327L up to 20240403 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/info.cgi of the component HTTP GET Request Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259285 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/netsecfish/info_cgi; https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383; https://vuldb.com/?ctiid.259285
CVE: CVE-2024-2008
Published: 2024-04-04
Description: The Modal Popup Box – Popup Builder, Show Offers And News in Popup plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.5.2 via deserialization of untrusted input in the awl_modal_popup_box_shortcode function. This makes it possible for authenticated attackers, with contributor-level access and above, to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://plugins.trac.wordpress.org/browser/modal-popup-box/trunk/include/modal-popup-box-shortcode.php#L19; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3062572%40modal-popup-box&new=3062572%40modal-popup-box&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/fca3d106-49df-49fc-a90d-e0cb26bd34b6?source=cve
CVE: CVE-2024-2830
Published: 2024-04-04
Description: The WordPress Tag and Category Manager – AI Autotagger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'st_tag_cloud' shortcode in all versions up to, and including, 3.13.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/simple-tags/trunk/inc/class.client.php#L346; https://plugins.trac.wordpress.org/browser/simple-tags/trunk/inc/class.client.php#L348; https://plugins.trac.wordpress.org/changeset/3060746/simple-tags/trunk/inc/class.client.tagcloud.php
CVE: CVE-2024-2919
Published: 2024-04-04
Description: The Gutenberg Blocks by Kadence Blocks – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the CountUp Widget in all versions up to, and including, 3.2.31 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/3062911/kadence-blocks/trunk/includes/assets/js/kb-countup.min.js; https://www.wordfence.com/threat-intel/vulnerabilities/id/b38a69c7-91d4-43be-8650-eb1f0029bd44?source=cve; https://plugins.trac.wordpress.org/changeset/3062911/kadence-blocks/trunk/includes/assets/js/kb-countup.min.js
CVE: CVE-2024-31025
Published: 2024-04-04
Description: SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/no3586/CVE-2024-31025; https://github.com/no3586/CVE-2024-31025
CVE: CVE-2024-1418
Published: 2024-04-04
Description: The CGC Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2 via the REST API. This makes it possible for unauthenticated attackers to view protected posts via REST API even when maintenance mode is enabled.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://wordpress.org/plugins/cgc-maintenance-mode/; https://www.wordfence.com/threat-intel/vulnerabilities/id/1cd5fa89-ed3b-4ac1-9200-9f5eb26cb534?source=cve; https://wordpress.org/plugins/cgc-maintenance-mode/
CVE: CVE-2024-28520
Published: 2024-04-04
Description: File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an attacker to obtain sensitive information via the uploadfile.php component.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-434, CWE-616
References: https://github.com/aknbg1thub/cve/blob/main/upload.md; https://github.com/aknbg1thub/cve/blob/main/upload.md
CVE: CVE-2023-25199
Published: 2024-04-04
Description: A reflected cross-site scripting (XSS) vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 that enables a remote attacker to execute JavaScript code and obtain sensitive information in a victim's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://summitinfosec.com/blog/x-ray-vision-identifying-cve-2023-25199-and-cve-2023-25200-in-manufacturing-equipment/; https://summitinfosec.com/blog/x-ray-vision-identifying-cve-2023-25199-and-cve-2023-25200-in-manufacturing-equipment/
CVE: CVE-2023-25200
Published: 2024-04-04
Description: An HTML injection vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 that enables a remote attacker to render malicious HTML and obtain sensitive information in a victim's browser.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://summitinfosec.com/blog/x-ray-vision-identifying-cve-2023-25199-and-cve-2023-25200-in-manufacturing-equipment/; https://summitinfosec.com/blog/x-ray-vision-identifying-cve-2023-25199-and-cve-2023-25200-in-manufacturing-equipment/
CVE: CVE-2024-29375
Published: 2024-04-04
Description: CSV Injection vulnerability in Addactis IBNRS v.3.10.3.107 allows a remote attacker to execute arbitrary code via a crafted .ibnrs file to the Project Description, Identifiers, Custom Triangle Name (inside Input Triangles) and Yield Curve Name parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1236
References: https://github.com/ismailcemunver/CVE-2024-29375; https://github.com/ismailcemunver/CVE-2024-29375
CVE: CVE-2020-25730
Published: 2024-04-04
Description: Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, and obtain sensitive information via PHP_SELF component in classic/views/download.php.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79
References: https://github.com/ZoneMinder/zoneminder/commit/9268db14a79c4ccd444c2bf8d24e62b13207b413; https://github.com/ZoneMinder/zoneminder/commit/9268db14a79c4ccd444c2bf8d24e62b13207b413
CVE: CVE-2024-25503
Published: 2024-04-04
Description: Cross Site Scripting (XSS) vulnerability in Advanced REST Client v.17.0.9 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the edit details parameter of the New Project function.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://github.com/EQSTLab/PoC/tree/main/2024/XSS/CVE-2024-25503; https://github.com/EQSTLab/PoC/tree/main/2024/XSS/CVE-2024-25503
CVE: CVE-2024-29006
Published: 2024-04-04
Description: By default the CloudStack management server honours the x-forwarded-for HTTP header and logs it as the source IP of an API request. This could lead to authentication bypass and other operational problems should an attacker decide to spoof their IP address this way. Users are recommended to upgrade to CloudStack version 4.18.1.1 or 4.19.0.1, which fixes this issue.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-290
References: https://lists.apache.org/thread/82f46pv7mvh95ybto5hn8wlo6g8jhjvp; https://lists.apache.org/thread/82f46pv7mvh95ybto5hn8wlo6g8jhjvp
CVE: CVE-2024-29007
Published: 2024-04-04
Description: The CloudStack management server and secondary storage VM could be tricked into making requests to restricted or random resources by means of following 301 HTTP redirects presented by external servers when downloading templates or ISOs. Users are recommended to upgrade to version 4.18.1.1 or 4.19.0.1, which fixes this issue.


CVSS Score: 7.3 (HIGH)
CWE: CWE-918, CWE-918
References: https://lists.apache.org/thread/82f46pv7mvh95ybto5hn8wlo6g8jhjvp; https://lists.apache.org/thread/82f46pv7mvh95ybto5hn8wlo6g8jhjvp
CVE: CVE-2024-29008
Published: 2024-04-04
Description: A problem has been identified in the CloudStack additional VM configuration (extraconfig) feature which can be misused by anyone who has privilege to deploy a VM instance or configure settings of an already deployed VM instance, to configure additional VM configuration even when the feature is not explicitly enabled by the administrator. In a KVM based CloudStack environment, an attacker can exploit this issue to attach host devices such as storage disks, and PCI and USB devices such as network adapters and GPUs, in a regular VM instance that can be further exploited to gain access to the underlying network and storage infrastructure resources, and access any VM instance disks on the local storage.

Users are advised to upgrade to version 4.18.1.1 or 4.19.0.1, which fixes this issue.


CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: https://lists.apache.org/thread/82f46pv7mvh95ybto5hn8wlo6g8jhjvp; https://lists.apache.org/thread/82f46pv7mvh95ybto5hn8wlo6g8jhjvp
CVE: CVE-2024-30565
Published: 2024-04-04
Description: An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/XiLitter/CMS_vulnerability-discovery/blob/main/SeaCMS_v.12.9.md; https://github.com/XiLitter/CMS_vulnerability-discovery/blob/main/SeaCMS_v.12.9.md
CVE: CVE-2023-36643
Published: 2024-04-04
Description: Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the online shop via oordershow component in customer function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://github.com/caffeinated-labs/CVE-2023-36643; https://github.com/caffeinated-labs/CVE-2023-36643
CVE: CVE-2023-36644
Published: 2024-04-04
Description: Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmations from the online shop via the printmail plugin.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://github.com/caffeinated-labs/CVE-2023-36644; https://github.com/caffeinated-labs/CVE-2023-36644
CVE: CVE-2023-36645
Published: 2024-04-04
Description: SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow component in customer function.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-94
References: https://github.com/caffeinated-labs/CVE-2023-36645; https://github.com/caffeinated-labs/CVE-2023-36645
CVE: CVE-2024-20800
Published: 2024-04-04
Description: Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable web pages. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable script. This could result in arbitrary code execution within the context of the victim's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb24-05.html; https://helpx.adobe.com/security/products/experience-manager/apsb24-05.html