deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-28969
Published: 2024-06-13
Description: Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API (if enabled by Admin user from UI). A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain APIs applicable only for Admin Users on the application's backend database that could potentially allow an unauthorized user access to restricted resources.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://www.dell.com/support/kbdoc/en-us/000225910/dsa-2024-181-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000225910/dsa-2024-181-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities
CVE: CVE-2024-29168
Published: 2024-06-13
Description: Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing potential unauthorized access and modification of application data.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://www.dell.com/support/kbdoc/en-us/000225910/dsa-2024-181-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000225910/dsa-2024-181-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities
CVE: CVE-2024-37131
Published: 2024-06-13
Description: SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious actions on the application in the context of the authenticated user.
CVSS Score: 7.5 (HIGH)
CWE: CWE-942
References: https://www.dell.com/support/kbdoc/en-us/000225956/dsa-2024-254-security-update-for-dell-secure-connect-gateway-policy-manager-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000225956/dsa-2024-254-security-update-for-dell-secure-connect-gateway-policy-manager-vulnerabilities
CVE: CVE-2024-37164
Published: 2024-06-13
Description: Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. CVAT allows users to supply custom endpoint URLs for cloud storages based on Amazon S3 and Azure Blob Storage. Starting in version 2.1.0 and prior to version 2.14.3, an attacker with a CVAT account can exploit this feature by specifying URLs whose host part is an intranet IP address or an internal domain name. By doing this, the attacker may be able to probe the network that the CVAT backend runs in for HTTP(S) servers. In addition, if there is a web server on this network that is sufficiently API-compatible with an Amazon S3 or Azure Blob Storage endpoint, and either allows anonymous access, or allows authentication with credentials that are known by the attacker, then the attacker may be able to create a cloud storage linked to this server. They may then be able to list files on the server; extract files from the server, if these files are of a type that CVAT supports reading from cloud storage (media data (such as images/videos/archives), importable annotations or datasets, task/project backups); and/or overwrite files on this server with exported annotations/datasets/backups. The exact capabilities of the attacker will depend on how the internal server is configured. Users should upgrade to CVAT 2.14.3 to receive a patch. In this release, the existing SSRF mitigation measures are applied to requests to cloud providers, with access to intranet IP addresses prohibited by default. Some workarounds are also available. One may use network security solutions such as virtual networks or firewalls to prohibit network access from the CVAT backend to unrelated servers on your internal network and/or require authentication for access to internal servers.
CVSS Score: 7.1 (HIGH)
CWE: CWE-918, CWE-918
References: https://github.com/cvat-ai/cvat/commit/f2346934c80bd91740f55c2788ef7d535a291d4c; https://github.com/cvat-ai/cvat/security/advisories/GHSA-q684-4jjh-83g6; https://github.com/cvat-ai/cvat/commit/f2346934c80bd91740f55c2788ef7d535a291d4c
CVE: CVE-2024-37306
Published: 2024-06-13
Description: Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. Starting in version 2.2.0 and prior to version 2.14.3, if an attacker can trick a logged-in CVAT user into visiting a malicious URL, they can initiate a dataset export or a backup from a project, task or job that the victim user has permission to export into a cloud storage that the victim user has access to. The name of the resulting file can be chosen by the attacker. This implies that the attacker can overwrite arbitrary files in any cloud storage that the victim can access and, if the attacker has read access to the cloud storage used in the attack, they can obtain media files, annotations, settings and other information from any projects, tasks or jobs that the victim has permission to export. Version 2.14.3 contains a fix for the issue. No known workarounds are available.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/cvat-ai/cvat/commit/5d36d10e493d92e893d7eae595544bcbe9cce1ce; https://github.com/cvat-ai/cvat/security/advisories/GHSA-jpf9-646h-4px7; https://github.com/cvat-ai/cvat/commit/5d36d10e493d92e893d7eae595544bcbe9cce1ce
CVE: CVE-2023-35858
Published: 2024-06-13
Description: XPath Injection vulnerabilities in the blog and RSS functions of Modern Campus - Omni CMS 2023.1 allow a remote, unauthenticated attacker to obtain application information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-91
References: https://lp.constantcontactpages.com/cu/c2nSB5D/moderncampuscve; https://lp.constantcontactpages.com/cu/c2nSB5D/moderncampuscve
CVE: CVE-2023-35859
Published: 2024-06-13
Description: A Reflected Cross-Site Scripting (XSS) vulnerability in the blog function of Modern Campus - Omni CMS 2023.1 allows a remote attacker to inject arbitrary scripts or HTML via multiple parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://lp.constantcontactpages.com/cu/c2nSB5D/moderncampuscve; https://lp.constantcontactpages.com/cu/c2nSB5D/moderncampuscve
CVE: CVE-2023-35860
Published: 2024-06-13
Description: A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system information via the dir parameter to listing.php or rss.php.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22, CWE-31
References: https://lp.constantcontactpages.com/cu/c2nSB5D/moderncampuscve; https://lp.constantcontactpages.com/cu/c2nSB5D/moderncampuscve
CVE: CVE-2024-22441
Published: 2024-06-13
Description: HPE Cray Parallel Application Launch Service (PALS) is subject to an authentication bypass.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbcr04653en_us&docLocale=en_US; https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbcr04653en_us&docLocale=en_US
CVE: CVE-2024-29169
Published: 2024-06-13
Description: Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal audit REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing potential unauthorized access and modification of application data.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://www.dell.com/support/kbdoc/en-us/000225910/dsa-2024-181-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000225910/dsa-2024-181-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities
CVE: CVE-2024-35328
Published: 2024-06-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2024-37307
Published: 2024-06-13
Description: Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.13.0 and prior to versions 1.13.7, 1.14.12, and 1.15.6, the output of `cilium-bugtool` can contain sensitive data when the tool is run (with the `--envoy-dump` flag set) against Cilium deployments with the Envoy proxy enabled. Users of the TLS inspection, Ingress with TLS termination, Gateway API with TLS termination, and Kafka network policies with API key filtering features are affected. The sensitive data includes the CA certificate, certificate chain, and private key used by Cilium HTTP Network Policies, and when using Ingress/Gateway API and the API keys used in Kafka-related network policy. `cilium-bugtool` is a debugging tool that is typically invoked manually and does not run during the normal operation of a Cilium cluster. This issue has been patched in Cilium v1.15.6, v1.14.12, and v1.13.17. There is no workaround to this issue.
CVSS Score: 7.9 (HIGH)
CWE: CWE-200
References: https://github.com/cilium/cilium/commit/0191b1ebcfdd61cefd06da0315a0e7d504167407; https://github.com/cilium/cilium/commit/224e288a5bf40d0bb0f16c9413693b319633431a; https://github.com/cilium/cilium/commit/9299c0fd0024e33397cffc666ff851e82af28741
CVE: CVE-2024-37877
Published: 2024-06-13
Description: UERANSIM before 3.2.6 allows out-of-bounds read when a RLS packet is sent to gNodeB with malformed PDU length. This occurs in function readOctetString in src/utils/octet_view.cpp and in function DecodeRlsMessage in src/lib/rls/rls_pdu.cpp
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/f4rs1ght/vuln-research/tree/main/CVE-2024-37877; https://github.com/f4rs1ght/vuln-research/tree/main/CVE-2024-37877
CVE: CVE-2024-31956
Published: 2024-06-13
Description: An issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400. It lacks proper buffer length checking, which can result in an Out-of-Bounds Write.
CVSS Score: 8.4 (HIGH)
CWE: CWE-787, CWE-787
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE: CVE-2024-32504
Published: 2024-06-13
Description: An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, Exynos W930. The mobile processor lacks proper length checking, which can result in an OOB (Out-of-Bounds) Write vulnerability.
CVSS Score: 8.4 (HIGH)
CWE: CWE-787, CWE-787
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE: CVE-2024-35325
Published: 2024-06-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2024-35326
Published: 2024-06-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2024-37279
Published: 2024-06-13
Description: A flaw was discovered in Kibana, allowing view-only users of alerting to use the run_soon API making the alerting rule run continuously, potentially affecting the system availability if the alerting rule is running complex queries.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://discuss.elastic.co/t/kibana-8-14-0-security-update-esa-2024-15/360887; https://discuss.elastic.co/t/kibana-8-14-0-security-update-esa-2024-15/360887
CVE: CVE-2024-37280
Published: 2024-06-13
Description: A flaw was discovered in Elasticsearch, affecting document ingestion when an index template contains a dynamic field mapping of “passthrough” type. Under certain circumstances, ingesting documents in this index would cause a StackOverflow exception to be thrown and ultimately lead to a Denial of Service. Note that passthrough fields is an experimental feature.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://discuss.elastic.co/t/elasticsearch-8-14-0-security-update-esa-2024-14/361007; https://discuss.elastic.co/t/elasticsearch-8-14-0-security-update-esa-2024-14/361007; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-38279
Published: 2024-06-13
Description: The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentication and gain access to the file system and obtain password hashes.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-288, CWE-306
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19; https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19
CVE: CVE-2024-38280
Published: 2024-06-13
Description: An unauthorized user is able to gain access to sensitive data, including credentials, by physically retrieving the hard disk of the product as the data is stored in clear text.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-313, CWE-312
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19; https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19
CVE: CVE-2024-38281
Published: 2024-06-13
Description: An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19; https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19
CVE: CVE-2024-36760
Published: 2024-06-13
Description: A stack overflow vulnerability was found in version 1.18.0 of rhai. The flaw position is: (/ SRC/rhai/SRC/eval/STMT. Rs in rhai: : eval: : STMT: : _ $LT $impl $u20 $rhai.. engine.. Engine$GT$::eval_stmt::h3f1d68ce37fc6e96). Due to the stack overflow is a recursive call/SRC/rhai/SRC/eval/STMT. Rs file eval_stmt_block function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/MageWeiG/VulnerabilityCollection/blob/main/CVE-2024-36760/info.md; https://github.com/MageWeiG/VulnerabilityCollection/blob/main/CVE-2024-36760/info.md
CVE: CVE-2024-37022
Published: 2024-06-13
Description: Fuji Electric Tellus Lite V-Simulator  is vulnerable to an out-of-bounds write, which could allow an attacker to manipulate memory, resulting in execution of arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-14; https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-14
CVE: CVE-2024-37029
Published: 2024-06-13
Description: Fuji Electric Tellus Lite V-Simulator 
is vulnerable to a stack-based buffer overflow, which could allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-14; https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-14
CVE: CVE-2024-37630
Published: 2024-06-13
Description: D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attackers to log in as root.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/D-link/DIR-605L/README.md; https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/D-link/DIR-605L/README.md
CVE: CVE-2024-38282
Published: 2024-06-13
Description: Utilizing default credentials, an attacker is able to log into the camera's operating system which could allow changes to be made to the operations or shutdown the camera requiring a physical reboot of the system.
CWE: CWE-522
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19; https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19
CVE: CVE-2024-38283
Published: 2024-06-13
Description: Sensitive customer information is stored in the device without encryption.
CWE: CWE-311
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19; https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19
CVE: CVE-2024-38284
Published: 2024-06-13
Description: Transmitted data is logged between the device and the backend service. An attacker could use these logs to perform a replay attack to replicate calls.
CWE: CWE-294
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19; https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19
CVE: CVE-2024-38285
Published: 2024-06-13
Description: Logs storing credentials are insufficiently protected and can be decoded through the use of open source tools.
CWE: CWE-522
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19; https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19
CVE: CVE-2024-36586
Published: 2024-06-13
Description: An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://github.com/go-compile/security-advisories/blob/master/vulns/CVE-2024-36586.md; https://github.com/go-compile/security-advisories/blob/master/vulns/CVE-2024-36586.md
CVE: CVE-2024-36587
Published: 2024-06-13
Description: Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy.
CVSS Score: 7.8 (HIGH)
CWE: CWE-266
References: https://github.com/go-compile/security-advisories/blob/master/vulns/CVE-2024-36587.md; https://github.com/go-compile/security-advisories/blob/master/vulns/CVE-2024-36587.md
CVE: CVE-2024-36588
Published: 2024-06-13
Description: An issue in Annonshop.app DecentralizeJustice/ anonymousLocker commit 2b2b4 allows attackers to send messages erroneously attributed to arbitrary users via a crafted HTTP request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290
References: https://github.com/go-compile/security-advisories/blob/master/vulns/CVE-2024-36588.md; https://github.com/go-compile/security-advisories/blob/master/vulns/CVE-2024-36588.md
CVE: CVE-2024-36589
Published: 2024-06-13
Description: An issue in Annonshop.app DecentralizeJustice/anonymousLocker commit 2b2b4 to ba9fd and DecentralizeJustice/anonBackend commit 57837 to cd815 was discovered to store credentials in plaintext.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-312
References: https://github.com/go-compile/security-advisories/blob/master/vulns/CVE-2024-36589.md; https://github.com/go-compile/security-advisories/blob/master/vulns/CVE-2024-36589.md
CVE: CVE-2024-37631
Published: 2024-06-13
Description: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the File parameter in function UploadCustomModule.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK/A3700R/UploadCustomModule/README.md; https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK/A3700R/UploadCustomModule/README.md
CVE: CVE-2024-37632
Published: 2024-06-13
Description: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the password parameter in function loginAuth .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-121
References: https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK/A3700R/loginAuth/README.md; https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK/A3700R/loginAuth/README.md
CVE: CVE-2024-37633
Published: 2024-06-13
Description: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiGuestCfg
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK/A3700R/setWiFiGuestCfg/README.md; https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK/A3700R/setWiFiGuestCfg/README.md
CVE: CVE-2024-37634
Published: 2024-06-13
Description: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiEasyCfg.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK/A3700R/setWiFiEasyCfg/README.md; https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK/A3700R/setWiFiEasyCfg/README.md
CVE: CVE-2024-37635
Published: 2024-06-13
Description: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiBasicCfg
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-121
References: https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK/A3700R/setWiFiBasicCfg/README.md; https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK/A3700R/setWiFiBasicCfg/README.md
CVE: CVE-2024-30057
Published: 2024-06-13
Description: Microsoft Edge for iOS Spoofing Vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-356
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30057; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30057
CVE: CVE-2024-30058
Published: 2024-06-13
Description: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-357, CWE-290
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30058; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30058
CVE: CVE-2024-38083
Published: 2024-06-13
Description: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-449
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38083; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38083
CVE: CVE-2024-38312
Published: 2024-06-13
Description: When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS < 127.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-922
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1878578; https://www.mozilla.org/security/advisories/mfsa2024-27/; https://bugzilla.mozilla.org/show_bug.cgi?id=1878578
CVE: CVE-2024-38313
Published: 2024-06-13
Description: In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual website address This vulnerability affects Firefox for iOS < 127.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-451
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1878489; https://www.mozilla.org/security/advisories/mfsa2024-27/; https://bugzilla.mozilla.org/show_bug.cgi?id=1878489
CVE: CVE-2024-4696
Published: 2024-06-13
Description: A privilege escalation vulnerability was reported in Lenovo Service Bridge prior to version 5.0.2.17 that could allow operating system commands to be executed if a specially crafted link is visited.
CVSS Score: 7.5 (HIGH)
CWE: CWE-78
References: https://support.lenovo.com/us/en/product_security/LEN-163429; https://support.lenovo.com/us/en/product_security/LEN-163429
CVE: CVE-2024-5924
Published: 2024-06-13
Description: Dropbox Desktop Folder Sharing Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of Dropbox Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the handling of shared folders. When syncing files from a shared folder belonging to an untrusted account, the Dropbox desktop application does not apply the Mark-of-the-Web to the local files. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user. Was ZDI-CAN-23991.
CVSS Score: 8.8 (HIGH)
CWE: CWE-693
References: https://www.zerodayinitiative.com/advisories/ZDI-24-677/; https://www.zerodayinitiative.com/advisories/ZDI-24-677/