deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-6085
Published: 2024-06-27
Description: A path traversal vulnerability exists in the XTTS server included in the lollms package, version v9.6. This vulnerability arises from the ability to perform an unauthenticated root folder settings change. Although the read file endpoint is protected against path traversals, this protection can be bypassed by changing the root folder to '/'. This allows attackers to read arbitrary files on the system. Additionally, the output folders can be changed to write arbitrary audio files to any location on the system.
CVSS Score: 8.6 (HIGH)
CWE: CWE-22
References: https://huntr.com/bounties/d2fb73d7-4b4f-451a-8763-484c189a27fe; https://huntr.com/bounties/d2fb73d7-4b4f-451a-8763-484c189a27fe
CVE: CVE-2024-6086
Published: 2024-06-27
Description: In version 1.2.7 of lunary-ai/lunary, any authenticated user, regardless of their role, can change the name of an organization due to improper access control. The function checkAccess() is not implemented, allowing users with the lowest privileges, such as the 'Prompt Editor' role, to modify organization attributes without proper authorization.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://github.com/lunary-ai/lunary/commit/3451fcd7b9d95e9091d62c515752f39f2faa6e54; https://huntr.com/bounties/9e83f63f-c5c1-422f-8010-95c353f0c643; https://huntr.com/bounties/9e83f63f-c5c1-422f-8010-95c353f0c643
CVE: CVE-2024-6090
Published: 2024-06-27
Description: A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This vulnerability can also be exploited to delete any files ending in `.json` on the target system, leading to a denial of service as users are unable to authenticate.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/gaizhenbiao/chuanhuchatgpt/commit/526c615c437377ee9c71f866fd0f19011910f705; https://huntr.com/bounties/bd0f8f89-5c8a-4662-89aa-a6861d84cf4c; https://huntr.com/bounties/bd0f8f89-5c8a-4662-89aa-a6861d84cf4c
CVE: CVE-2024-6139
Published: 2024-06-27
Description: A path traversal vulnerability exists in the XTTS server of the parisneo/lollms package version v9.6. This vulnerability allows an attacker to write audio files to arbitrary locations on the system and enumerate file paths. The issue arises from improper validation of user-provided file paths in the `tts_to_file` endpoint.
CVSS Score: 7.3 (HIGH)
CWE: CWE-29
References: https://huntr.com/bounties/fd00f112-efd0-40a1-8227-d6733716e4c0; https://huntr.com/bounties/fd00f112-efd0-40a1-8227-d6733716e4c0
CVE: CVE-2024-6250
Published: 2024-06-27
Description: An absolute path traversal vulnerability exists in parisneo/lollms-webui v9.6, specifically in the `open_file` endpoint of `lollms_advanced.py`. The `sanitize_path` function with `allow_absolute_path=True` allows an attacker to access arbitrary files and directories on a Windows system. This vulnerability can be exploited to read any file and list arbitrary directories on the affected system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-36
References: https://huntr.com/bounties/11a8bf9d-16f3-49b3-b5fc-ad36d8993c73; https://huntr.com/bounties/11a8bf9d-16f3-49b3-b5fc-ad36d8993c73
CVE: CVE-2024-31802
Published: 2024-06-27
Description: DESIGNA ABACUS v.18 and before allows an attacker to bypass the payment process via a crafted QR code.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-290
References: https://www.rodrigofavarini.com.br/cybersecurity/designa-abacus-v-18-and-before-allows-an-attacker-to-bypass-the-payment-process-via-a-crafted-qr-code/; https://www.rodrigofavarini.com.br/cybersecurity/designa-abacus-v-18-and-before-allows-an-attacker-to-bypass-the-payment-process-via-a-crafted-qr-code/
CVE: CVE-2024-38523
Published: 2024-06-27
Description: Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. The TOTP authentication flow has multiple issues that weakens its one-time nature. Specifically, the lack of 2FA for changing security settings allows attacker with CSRF or XSS primitives to change such settings without user interaction and credentials are required. This vulnerability has been patched in version 0.10.

CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://github.com/scidsg/hushline/pull/376; https://github.com/scidsg/hushline/security/advisories/GHSA-4c38-hhxx-9mhx; https://github.com/scidsg/hushline/pull/376
CVE: CVE-2024-39129
Published: 2024-06-27
Description: Heap Buffer Overflow vulnerability in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function PushTSBuf() at /src/PayloadBuf.cpp.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120
References: https://github.com/wangf1978/DumpTS/issues/19; https://github.com/wangf1978/DumpTS/issues/19
CVE: CVE-2024-39130
Published: 2024-06-27
Description: A NULL Pointer Dereference discovered in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function DumpOneStream() at /src/DumpStream.cpp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/wangf1978/DumpTS/issues/20; https://github.com/wangf1978/DumpTS/issues/20
CVE: CVE-2024-39133
Published: 2024-06-27
Description: Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the __zzip_parse_root_directory() function at /zzip/zip.c.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-122
References: https://github.com/gdraheim/zziplib/issues/164; https://github.com/gdraheim/zziplib/issues/164
CVE: CVE-2024-39207
Published: 2024-06-27
Description: lua-shmem v1.0-1 was discovered to contain a buffer overflow via the shmem_write function.
CVSS Score: 8.2 (HIGH)
CWE: CWE-120
References: https://gist.github.com/yanggao017/5ca24da711cf893bedac38518ec448f1; https://github.com/yanggao017/vuln/blob/main/lua-shmem.md; https://gist.github.com/yanggao017/5ca24da711cf893bedac38518ec448f1
CVE: CVE-2024-39208
Published: 2024-06-27
Description: luci-app-lucky v2.8.3 was discovered to contain hardcoded credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://gist.github.com/yanggao017/9e64b97f4de708360db08db01f0bb980; https://github.com/yanggao017/vuln/blob/main/luci-app-lucky.md; https://gist.github.com/yanggao017/9e64b97f4de708360db08db01f0bb980
CVE: CVE-2024-6127
Published: 2024-06-27
Description: BC Security Empire before 5.9.3 is vulnerable to a path traversal issue that can lead to remote code execution. A remote, unauthenticated attacker can exploit this vulnerability over HTTP by acting as a normal agent, completing all cryptographic handshakes, and then triggering an upload of payload data containing a malicious path.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-434
References: https://aceresponder.com/blog/exploiting-empire-c2-framework; https://github.com/ACE-Responder/Empire-C2-RCE-PoC; https://github.com/BC-SECURITY/Empire/blob/8283bbc77250232eb493bf1f9104fdd0d468962a/CHANGELOG.md?plain=1#L102
CVE: CVE-2024-22260
Published: 2024-06-27
Description: VMware Workspace One UEM update addresses an information exposure vulnerability. 
A malicious actor with network access to the Workspace One UEM may be 
able to perform an attack resulting in an information exposure.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-200
References: https://www.vmware.com/security/advisories/OMSA-2024-0001.html; https://www.vmware.com/security/advisories/OMSA-2024-0001.html
CVE: CVE-2024-22272
Published: 2024-06-27
Description: VMware Cloud Director contains an Improper Privilege Management vulnerability. 


An authenticated tenant administrator for a
 given organization within VMware Cloud Director may be able to 
accidentally disable their organization leading to a Denial of Service 
for active sessions within their own organization's scope.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-862
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24371; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24371
CVE: CVE-2024-22276
Published: 2024-06-27
Description: VMware Cloud Director Object Storage Extension contains an Insertion of Sensitive Information vulnerability.


A malicious actor with adjacent access to 
web/proxy server logging may be able to obtain sensitive information 
from URLs that are logged.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-532
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24372; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24372
CVE: CVE-2024-2973
Published: 2024-06-27
Description: An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device.
Only routers or conductors that are running in high-availability redundant configurations are affected by this vulnerability.




No other Juniper Networks products or platforms are affected by this issue.





This issue affects:

Session Smart Router: 



  *  All versions before 5.6.15, 
  *  from 6.0 before 6.1.9-lts, 
  *  from 6.2 before 6.2.5-sts.



Session Smart Conductor: 



  *  All versions before 5.6.15, 
  *  from 6.0 before 6.1.9-lts, 
  *  from 6.2 before 6.2.5-sts. 



WAN Assurance Router: 



  *  6.0 versions before 6.1.9-lts, 
  *  6.2 versions before 6.2.5-sts.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-288
References: https://support.juniper.net/support/eol/software/ssr/; https://supportportal.juniper.net/JSA83126; https://support.juniper.net/support/eol/software/ssr/
CVE: CVE-2024-36072
Published: 2024-06-27
Description: Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the logging component of the Endpoint Protector and Unify server application which allows an unauthenticated remote attacker to send a malicious request, resulting in the ability to execute system commands with root privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-779
References: https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA0Qk0000001E5lKAE.html; https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA0Qk0000001E5lKAE.html
CVE: CVE-2024-36073
Published: 2024-06-27
Description: Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the shadowing component of the Endpoint Protector and Unify agent which allows an attacker with administrative access to the Endpoint Protector or Unify server to overwrite sensitive configuration and subsequently execute system commands with SYSTEM/root privileges on a chosen client endpoint.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA0Qk0000001E5lKAE.html; https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA0Qk0000001E5lKAE.html
CVE: CVE-2024-36074
Published: 2024-06-27
Description: Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the Endpoint Protector and Unify agent in the way that the EasyLock dependency is acquired from the server. An attacker with administrative access to the Endpoint Protector or Unify server can cause a client to acquire and execute a malicious file resulting in remote code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA0Qk0000001E5lKAE.html; https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA0Qk0000001E5lKAE.html
CVE: CVE-2024-36075
Published: 2024-06-27
Description: The CoSoSys Endpoint Protector through 5.9.3 and Unify agent through 7.0.6 is susceptible to an arbitrary code execution vulnerability due to the way an archive obtained from the Endpoint Protector or Unify server is extracted on the endpoint. An attacker who is able to modify the archive on the server could obtain remote code execution as an administrator on an endpoint.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA0Qk0000001E5lKAE.html; https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA0Qk0000001E5lKAE.html
CVE: CVE-2024-36755
Published: 2024-06-27
Description: D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL. This can allow attackers to downgrade the firmware version or change the downloading URL via a man-in-the-middle attack.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-599
References: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10401; https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10401
CVE: CVE-2024-39132
Published: 2024-06-27
Description: A NULL Pointer Dereference vulnerability in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function VerifyCommandLine() at /src/DumpTS.cpp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/wangf1978/DumpTS/issues/22; https://github.com/wangf1978/DumpTS/issues/22
CVE: CVE-2024-39134
Published: 2024-06-27
Description: A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function at /zzip/zip.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/gdraheim/zziplib/issues/165; https://github.com/gdraheim/zziplib/issues/165
CVE: CVE-2024-39209
Published: 2024-06-27
Description: luci-app-sms-tool v1.9-6 was discovered to contain a command injection vulnerability via the score parameter.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-94
References: https://gist.github.com/yanggao017/e392a633b8cee6f42c514b125860081c; https://github.com/yanggao017/vuln/blob/main/luci-app-sms-tool.md; https://gist.github.com/yanggao017/e392a633b8cee6f42c514b125860081c
CVE: CVE-2024-5642
Published: 2024-06-27
Description: CPython 3.9 and earlier doesn't disallow configuring an empty list ("[]") for SSLContext.set_npn_protocols() which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used (see CVE-2024-5535 for OpenSSL). This vulnerability is of low severity due to NPN being not widely used and specifying an empty list likely being uncommon in-practice (typically a protocol name would be configured).
CVSS Score: 6.5 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2024/06/28/4; https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e; https://github.com/python/cpython/commit/a2cdbb6e8188ba9ba8b356b28d91bff60e86fe31
CVE: CVE-2023-52892
Published: 2024-06-27
Description: In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fields in TLS certificates are incorrectly allowed to have a special meaning in regular expressions (such as a + wildcard), leading to name confusion in X.509 certificate host verification.
CVSS Score: 7.5 (HIGH)
CWE: CWE-436
References: https://github.com/phpseclib/phpseclib/commit/6cd6e8ceab9f2b55c8cd81d2192bf98cbeaf4627; https://github.com/phpseclib/phpseclib/issues/1943; https://github.com/phpseclib/phpseclib/releases/tag/3.0.33
CVE: CVE-2024-36059
Published: 2024-06-27
Description: Directory Traversal vulnerability in Kalkitech ASE ASE61850 IEDSmart upto and including version 2.3.5 allows attackers to read/write arbitrary files via the IEC61850 File Transfer protocol.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-22
References: https://kalkitech.com/wp-content/uploads/2024/05/CYB_60704_Advisory_v1.0.pdf; https://kalkitech.com/wp-content/uploads/2024/05/CYB_60704_Advisory_v1.0.pdf
CVE: CVE-2024-39705
Published: 2024-06-27
Description: NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averaged_perceptron_tagger and punkt.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/nltk/nltk/issues/2522; https://github.com/nltk/nltk/issues/3266; https://www.vicarius.io/vsociety/posts/rce-in-python-nltk-cve-2024-39705-39706
CVE: CVE-2024-4395
Published: 2024-06-27
Description: The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://github.com/Jamf-Concepts/jamf-compliance-editor/raw/v1.3.1/Jamf%20Compliance%20Editor%20-%20User%20Guide.pdf; https://github.com/Jamf-Concepts/jamf-compliance-editor/releases/download/v1.3.1/JamfComplianceEditor.v1.3.1.pkg; https://khronokernel.com/macos/2024/05/01/CVE-2024-4395.html
CVE: CVE-2016-20022
Published: 2024-06-27
Description: In the Linux kernel before 4.8, usb_parse_endpoint in drivers/usb/core/config.c does not validate the wMaxPacketSize field of an endpoint descriptor. NOTE: This vulnerability only affects products that are no longer supported by the supplier.
CVSS Score: 8.4 (HIGH)
CWE: CWE-125
References: https://github.com/torvalds/linux/commit/aed9d65ac3278d4febd8665bd7db59ef53e825fe; https://lore.kernel.org/lkml/[PII_REDACTED]-8206-8-git-send-email-w%401wt.eu/; https://www.spinics.net/lists/linux-usb/msg144177.html
CVE: CVE-2024-6071
Published: 2024-06-27
Description: PTC Creo Elements/Direct License Server exposes a web interface which can be used by unauthenticated remote attackers to execute arbitrary OS commands on the server.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-862
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-177-02; https://www.ptc.com/en/support/article/CS417607; https://www.cisa.gov/news-events/ics-advisories/icsa-24-177-02
CVE: CVE-2024-39708
Published: 2024-06-28
Description: An issue was discovered in the Agent in Delinea Privilege Manager (formerly Thycotic Privilege Manager) before 12.0.1096 on Windows. Sometimes, a non-administrator user can copy a crafted DLL file to a temporary directory (used by .NET Shadow Copies) such that privilege escalation can occur if the core agent service loads that file.
CVSS Score: 7.0 (HIGH)
CWE: CWE-427
References: https://docs.delinea.com/online-help/privilege-manager/release-notes/12.0.1-combined.htm; https://www.cyberark.com/resources/threat-research-blog/identity-crisis-the-curious-case-of-a-delinea-local-privilege-escalation-vulnerability; https://docs.delinea.com/online-help/privilege-manager/release-notes/12.0.1-combined.htm
CVE: CVE-2024-37137
Published: 2024-06-28
Description: Dell Key Trust Platform, v3.0.6 and prior, contains Use of a Cryptographic Primitive with a Risky Implementation vulnerability. A local privileged attacker could potentially exploit this vulnerability, leading to privileged information disclosure.
CVSS Score: 3.8 (LOW)
CWE: CWE-1240, CWE-327
References: https://www.dell.com/support/kbdoc/en-us/000226476/dsa-2024-294-security-update-for-dell-cloudlink-vulnerability; https://www.dell.com/support/kbdoc/en-us/000226476/dsa-2024-294-security-update-for-dell-cloudlink-vulnerability
CVE: CVE-2024-5863
Published: 2024-06-28
Description: The Easy Image Collage plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the ajax_image_collage() function in all versions up to, and including, 1.13.5. This makes it possible for authenticated attackers, with Contributor-level access and above, to erase all of the content in arbitrary posts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset/3106714/easy-image-collage/tags/1.13.6/helpers/ajax.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/ceeefc3f-1cb7-48df-9978-258f015d93c7?source=cve; https://plugins.trac.wordpress.org/changeset/3106714/easy-image-collage/tags/1.13.6/helpers/ajax.php
CVE: CVE-2024-5864
Published: 2024-06-28
Description: The Easy Affiliate Links plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the eafl_reset_settings AJAX action in all versions up to, and including, 3.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset the plugin's settings.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset/3106718/easy-affiliate-links/trunk/includes/admin/class-eafl-tools-manager.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/e8a4c656-8df8-44ce-884f-dd502d17f594?source=cve; https://plugins.trac.wordpress.org/changeset/3106718/easy-affiliate-links/trunk/includes/admin/class-eafl-tools-manager.php
CVE: CVE-2024-6296
Published: 2024-06-28
Description: The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-caption’ parameter in all versions up to, and including, 3.13.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/stackable-ultimate-gutenberg-blocks/trunk/dist/frontend_image_lightbox.js; https://plugins.trac.wordpress.org/changeset/3108514/; https://www.wordfence.com/threat-intel/vulnerabilities/id/e55742de-9eaf-48e4-8d5d-ea980dfa17cf?source=cve
CVE: CVE-2024-37282
Published: 2024-06-28
Description: It was identified that under certain specific preconditions, an API key that was originally created with a specific privileges could be subsequently used to create new API keys that have elevated privileges.
CVSS Score: 8.1 (HIGH)
CWE: CWE-285
References: https://discuss.elastic.co/t/elastic-cloud-enterprise-3-7-2-security-update-esa-2024-18/362181; https://discuss.elastic.co/t/elastic-cloud-enterprise-3-7-2-security-update-esa-2024-18/362181
CVE: CVE-2023-47802
Published: 2024-06-28
Description: A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the IP block functionality. This allows remote authenticated users with administrator privileges to execute arbitrary commands via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.synology.com/en-global/security/advisory/Synology_SA_23_15; https://www.synology.com/en-global/security/advisory/Synology_SA_23_15
CVE: CVE-2023-47803
Published: 2024-06-28
Description: A vulnerability regarding improper limitation of a pathname to a restricted directory ('Path Traversal') is found in the Language Settings functionality. This allows remote attackers to read specific files containing non-sensitive information via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.synology.com/en-global/security/advisory/Synology_SA_23_15; https://www.synology.com/en-global/security/advisory/Synology_SA_23_15
CVE: CVE-2024-30109
Published: 2024-06-28
Description: HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application.  An attacker can use multiple transparent or opaque layers to trick a user into clicking on a button or link on another page than the one intended.
CVSS Score: 3.7 (LOW)
CWE: CWE-1021
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193