deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-6769
Published: 2024-09-26
Description: A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medium integrity process to a high integrity process without the intervention of a UAC prompt.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-426, CWE-427
References: https://www.fortra.com/security/advisories/research/fr-2024-002; https://github.com/fortra/CVE-2024-6769
CVE: CVE-2024-40506
Published: 2024-09-26
Description: Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMHospitality.asmx function.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: https://github.com/Jansen-C-Moreira/CVE-2024-40506
CVE: CVE-2024-40507
Published: 2024-09-26
Description: Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMPersonnel.asmx function.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: https://github.com/Jansen-C-Moreira/CVE-2024-40507; https://github.com/openpetra/openpetra
CVE: CVE-2024-40508
Published: 2024-09-26
Description: Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMConference.asmx function.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: https://github.com/Jansen-C-Moreira/CVE-2024-40508; https://github.com/openpetra/openpetra
CVE: CVE-2024-47076
Published: 2024-09-26
Description: CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. The `cfGetPrinterAttributes5` function in `libcupsfilters` does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS system.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20
References: https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8; https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47; https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5
CVE: CVE-2024-47175
Published: 2024-09-26
Description: CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20
References: https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8; https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47; https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5
CVE: CVE-2024-47176
Published: 2024-09-26
Description: CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL. When combined with other vulnerabilities, such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker can execute arbitrary commands remotely on the target machine without authentication when a malicious printer is printed to.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1327
References: https://github.com/OpenPrinting/cups-browsed/blob/master/daemon/cups-browsed.c#L13992; https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8; https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47
CVE: CVE-2024-47177
Published: 2024-09-26
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-47076, CVE-2024-47175, CVE-2024-47176. Reason: This candidate is a duplicate of CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. Notes: All CVE users should reference CVE-2024-47076, CVE-2024-47175, and/or CVE-2024-47176 instead of this candidate. This CVE was issued to a vulnerability that is dependent on CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. According to rule 4.2.15 of the CVE CNA rules, \"CNAs MUST NOT assign a different CVE ID to a Vulnerability that is fully interdependent with another Vulnerability. The Vulnerabilities are effectively the same single Vulnerability and MUST use one CVE ID.
CVE: CVE-2024-4099
Published: 2024-09-26
Description: An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. An AI feature was found to read unsanitized content in a way that could have allowed an attacker to hide prompt injection.
CVSS Score: 3.1 (LOW)
CWE: CWE-116, CWE-116
References: https://gitlab.com/gitlab-org/gitlab/-/issues/457798; https://hackerone.com/reports/2459597
CVE: CVE-2024-8974
Published: 2024-09-26
Description: Information disclosure in Gitlab EE/CE affecting all versions from 15.6 prior to 17.2.8, 17.3 prior to 17.3.4, and 17.4 prior to 17.4.1 in specific conditions it was possible to disclose to an unauthorised user the path of a private project."
CVSS Score: 2.6 (LOW)
CWE: CWE-684, CWE-863
References: https://gitlab.com/gitlab-org/gitlab/-/issues/482843
CVE: CVE-2024-7011
Published: 2024-09-27
Description: Sharp NEC Projectors (NP-CB4500UL, NP-CB4500WL, NP-CB4700UL, NP-P525UL, NP-P525UL+, NP-P525ULG, NP-P525ULJL, NP-P525WL, NP-P525WL+, NP-P525WLG, NP-P525WLJL, NP-CG6500UL, NP-CG6500WL, NP-CG6700UL, NP-P605UL, NP-P605UL+, NP-P605ULG, NP-P605ULJL, NP-CA4120X, NP-CA4160W, NP-CA4160X, NP-CA4200U, NP-CA4200W, NP-CA4202W, NP-CA4260X, NP-CA4300X, NP-CA4355X, NP-CD2100U, NP-CD2120X, NP-CD2300X, NP-CR2100X, NP-CR2170W, NP-CR2170X, NP-CR2200U, NP-CR2200W, NP-CR2280X, NP-CR2310X, NP-CR2350X, NP-MC302XG, NP-MC332WG, NP-MC332WJL, NP-MC342XG, NP-MC372X, NP-MC372XG, NP-MC382W, NP-MC382WG, NP-MC422XG, NP-ME342UG, NP-ME372W, NP-ME372WG, NP-ME372WJL, NP-ME382U, NP-ME382UG, NP-ME382UJL, NP-ME402X, NP-ME402XG, NP-ME402XJL, NP-CB4500XL, NP-CG6400UL, NP-CG6400WL, NP-CG6500XL, NP-PE455UL, NP-PE455ULG, NP-PE455WL, NP-PE455WLG, NP-PE505XLG, NP-CB4600U, NP-CF6600U, NP-P474U, NP-P554U, NP-P554U+, NP-P554UG, NP-P554UJL, NP-CG6600UL, NP-P547UL, NP-P547ULG, NP-P547ULJL, NP-P607UL+, NP-P627UL, NP-P627UL+, NP-P627ULG, NP-P627ULJL, NP-PV710UL-B, NP-PV710UL-B1, NP-PV710UL-W, NP-PV710UL-W+, NP-PV710UL-W1, NP-PV730UL-BJL, NP-PV730UL-WJL, NP-PV800UL-B, NP-PV800UL-B+, NP-PV800UL-B1, NP-PV800UL-BJL, NP-PV800UL-W, NP-PV800UL-W+, NP-PV800UL-W1, NP-PV800UL-WJL, NP-CA4200X, NP-CA4265X, NP-CA4300U, NP-CA4300W, NP-CA4305X, NP-CA4400X, NP-CD2125X, NP-CD2200W, NP-CD2300U, NP-CD2310X, NP-CR2105X, NP-CR2200X, NP-CR2205W, NP-CR2300U, NP-CR2300W, NP-CR2315X, NP-CR2400X, NP-MC333XG, NP-MC363XG, NP-MC393WJL, NP-MC423W, NP-MC423WG, NP-MC453X, NP-MC453X, NP-MC453XG, NP-MC453XJL, NP-ME383WG, NP-ME403U, NP-ME403UG, NP-ME403UJL, NP-ME423W, NP-ME423WG, NP-ME423WJL, NP-ME453X, NP-ME453XG, NP-CB4400USL, NP-CB4400WSL, NP-CB4510UL, NP-CB4510WL, NP-CB4510XL, NP-CB4550USL, NP-CB6700UL, NP-CG6510UL, NP-PE456USL, NP-PE456USLG, NP-PE456USLJL, NP-PE456WSLG, NP-PE506UL, NP-PE506ULG, NP-PE506ULJL, NP-PE506WL, NP-PE506WLG, NP-PE506WLJL) allows an attacker to cause a denial-of-service (DoS) condition via SNMP service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1242
References: https://sharp-displays.jp.sharp/global/support/info/Projector_vulnerability_202408.html
CVE: CVE-2024-7713
Published: 2024-09-27
Description: The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 discloses the Open AI API Key, allowing unauthenticated users to obtain it
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://wpscan.com/vulnerability/061eab97-4a84-4738-a1e8-ef9a1261ff73/
CVE: CVE-2024-7714
Published: 2024-09-27
Description: The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 lacks sufficient access controls allowing an unauthenticated user to disconnect the AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 from OpenAI, thereby disabling the AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0. Multiple actions are accessible: 'ays_chatgpt_disconnect', 'ays_chatgpt_connect', and  'ays_chatgpt_save_feedback'
CVSS Score: 7.5 (HIGH)
References: https://wpscan.com/vulnerability/04447c76-a61b-4091-a510-c76fc8ca5664/
CVE: CVE-2024-8922
Published: 2024-09-27
Description: The Product Enquiry for WooCommerce, WooCommerce product catalog plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.33.32 via deserialization of untrusted input in enquiry_detail.php. This makes it possible for authenticated attackers, with Author-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://plugins.trac.wordpress.org/changeset/3155863/enquiry-quotation-for-woocommerce; https://www.wordfence.com/threat-intel/vulnerabilities/id/9a485314-cd68-400c-b398-2f8529c6a3ab?source=cve
CVE: CVE-2024-8965
Published: 2024-09-27
Description: The Absolute Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Name' field of a custom post criteria in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/3156409/absolute-reviews; https://www.wordfence.com/threat-intel/vulnerabilities/id/12cfebb8-ae89-410b-a492-340f1553e83e?source=cve
CVE: CVE-2024-9130
Published: 2024-09-27
Description: The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up to, and including, 3.16.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with GiveWP Manager-level access and above, to append additional SQL queries into already existing queries within the Legacy View mode, that can be used to extract sensitive information from the database.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://givewp.com/documentation/core/give-user-roles/; https://plugins.trac.wordpress.org/browser/give/tags/3.16.1/includes/donors/class-give-donors-query.php#L453; https://plugins.trac.wordpress.org/changeset/3157829/
CVE: CVE-2024-7400
Published: 2024-09-27
Description: The vulnerability potentially allowed an attacker to misuse ESET’s file operations during the removal of a detected file on the Windows operating system to delete files without having proper permissions to do so.
CWE: CWE-1386
References: https://support.eset.com/en/ca8726-local-privilege-escalation-fixed-for-vulnerability-during-detected-file-removal-in-eset-products-for-windows
CVE: CVE-2024-8681
Published: 2024-09-27
Description: The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Media Grid widget in all versions up to, and including, 4.10.52 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/premium-addons-for-elementor/trunk/includes/compatibility/widgets/grid.php#L72; https://plugins.trac.wordpress.org/browser/premium-addons-for-elementor/trunk/widgets/premium-grid.php#L3033; https://plugins.trac.wordpress.org/browser/premium-addons-for-elementor/trunk/widgets/premium-grid.php#L3149
CVE: CVE-2024-8991
Published: 2024-09-27
Description: The OSM – OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's osm_map and osm_map_v3 shortcodes in all versions up to, and including, 6.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/osm/trunk/osm-metabox.php#L155; https://plugins.trac.wordpress.org/browser/osm/trunk/osm-metabox_v4.php#L139; https://plugins.trac.wordpress.org/browser/osm/trunk/osm.php#L1120
CVE: CVE-2024-9029
Published: 2024-09-27
Description: A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the read_iptc_profile function in the Source/Metadata/IPTC.cpp file because the size of the profile is not being sanitized, causing a crash in the application linked to the library, resulting in a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126
References: https://bugzilla.redhat.com/show_bug.cgi?id=2313704; https://sourceforge.net/p/freeimage/bugs/351/
CVE: CVE-2024-9049
Published: 2024-09-27
Description: The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button Group module in all versions up to, and including, 2.8.3.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3157026/beaver-builder-lite-version; https://www.wordfence.com/threat-intel/vulnerabilities/id/13517c2f-43ce-4e9a-81c4-d422b0e7273a?source=cve
CVE: CVE-2024-39431
Published: 2024-09-27
Description: In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed.
CVSS Score: 8.3 (HIGH)
CWE: CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]05610241
CVE: CVE-2024-39432
Published: 2024-09-27
Description: In UMTS RLC driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed.
CVSS Score: 8.3 (HIGH)
CWE: CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]05610241
CVE: CVE-2024-39433
Published: 2024-09-27
Description: In drm service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]05610241
CVE: CVE-2024-39434
Published: 2024-09-27
Description: In drm service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]05610241
CVE: CVE-2024-39435
Published: 2024-09-27
Description: In Logmanager service, there is a possible missing verification incorrect input. This could lead to local escalation of privilege with no additional execution privileges needed.
CVSS Score: 6.5 (MEDIUM)
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]05610241
CVE: CVE-2024-38861
Published: 2024-09-27
Description: Improper Certificate Validation in Checkmk Exchange plugin MikroTik allows attackers in MitM position to intercept traffic. This issue affects MikroTik: from 2.0.0 through 2.5.5, from 0.4a_mk through 2.0a.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295, CWE-295
References: https://exchange.checkmk.com/p/mikrotik
CVE: CVE-2024-41930
Published: 2024-09-27
Description: Cross-site scripting vulnerability exists in MF Teacher Performance Management System version 6. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN21176842/
CVE: CVE-2024-6654
Published: 2024-09-27
Description: Products for macOS enables a user logged on to the system to perform a denial-of-service attack, which could be misused to disable the protection of the ESET security product and cause general system slow-down.
CWE: CWE-377
References: https://support.eset.com/en/ca8725-denial-of-service-vulnerability-in-eset-products-for-macos-fixed
CVE: CVE-2024-6931
Published: 2024-09-27
Description: The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via RSVP name field in all versions up to, and including, 6.6.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3150170/; https://wordpress.org/plugins/the-events-calendar/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/a5f847d8-323f-47f9-ba10-df8173ff3018?source=cve
CVE: CVE-2024-9202
Published: 2024-09-27
Description: In Eclipse Dataspace Components versions 0.1.3 to 0.9.0, the Connector component filters which datasets (= data offers) another party can see in a requested catalog, to ensure that only authorized parties are able to view restricted offers.
However, there is the possibility to request a single dataset, which should be subject to the same filtering process, but currently is missing the correct filtering.


This enables parties to potentially see datasets they should not have access to, thereby exposing sensitive information. Exploiting this vulnerability requires knowing the ID of a restricted dataset, but some IDs may be guessed by trying out many IDs in an automated way.


Affected code:
 DatasetResolverImpl, L76-79 https://github.com/eclipse-edc/Connector/blob/v0.9.0/core/control-plane/control-plane-catalog/src/main/java/org/eclipse/edc/connector/controlplane/catalog/DatasetResolverImpl.java
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://github.com/eclipse-edc/Connector/pull/4490; https://github.com/eclipse-edc/Connector/pull/4491; https://gitlab.eclipse.org/security/cve-assignement/-/issues/35
CVE: CVE-2024-47290
Published: 2024-09-27
Description: Input validation vulnerability in the USB service module
Impact: Successful exploitation of this vulnerability may affect availability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2024/10/
CVE: CVE-2024-47291
Published: 2024-09-27
Description: Permission vulnerability in the ActivityManagerService (AMS) module
Impact: Successful exploitation of this vulnerability may affect availability.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-16
References: https://consumer.huawei.com/en/support/bulletin/2024/10/
CVE: CVE-2024-47292
Published: 2024-09-27
Description: Path traversal vulnerability in the Bluetooth module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://consumer.huawei.com/en/support/bulletin/2024/10/
CVE: CVE-2024-47293
Published: 2024-09-27
Description: Out-of-bounds write vulnerability in the HAL-WIFI module
Impact: Successful exploitation of this vulnerability may affect availability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-130, CWE-787
References: https://consumer.huawei.com/en/support/bulletin/2024/10/
CVE: CVE-2024-47294
Published: 2024-09-27
Description: Access permission verification vulnerability in the input method framework module
Impact: Successful exploitation of this vulnerability may affect availability.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-16
References: https://consumer.huawei.com/en/support/bulletin/2024/10/
CVE: CVE-2024-9136
Published: 2024-09-27
Description: Access permission verification vulnerability in the App Multiplier module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-863
References: https://consumer.huawei.com/en/support/bulletin/2024/10/
CVE: CVE-2024-9275
Published: 2024-09-27
Description: A vulnerability was found in jeanmarc77 123solar up to 1.8.4.5. It has been rated as critical. This issue affects some unknown processing of the file /admin/admin_invt2.php. The manipulation of the argument PROTOCOLx leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-73
References: https://github.com/jeanmarc77/123solar/issues/75; https://vuldb.com/?ctiid.278657; https://vuldb.com/?id.278657
CVE: CVE-2024-9276
Published: 2024-09-27
Description: A vulnerability classified as problematic has been found in TMsoft MyAuth Gateway 3. Affected is an unknown function of the file /index.php. The manipulation of the argument console/nocache/cmd leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.278658; https://vuldb.com/?id.278658; https://vuldb.com/?submit.409126
CVE: CVE-2024-9277
Published: 2024-09-27
Description: A vulnerability classified as problematic was found in Langflow up to 1.0.18. Affected by this vulnerability is an unknown functionality of the file \src\backend\base\langflow\interface\utils.py of the component HTTP POST Request Handler. The manipulation of the argument remaining_text leads to inefficient regular expression complexity. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-1333
References: https://rumbling-slice-eb0.notion.site/Remote-Redos-in-https-github-com-langflow-ai-langflow-067159ced0d5494e91b[PII_REDACTED]9c4?pvs=4; https://vuldb.com/?ctiid.278659; https://vuldb.com/?id.278659
CVE: CVE-2024-9278
Published: 2024-09-27
Description: A vulnerability, which was classified as critical, has been found in HuankeMao SCRM up to 0.0.3. Affected by this issue is the function upload_domain_verification_file of the file WxkConfig.php of the component Administrator Backend. The manipulation of the argument domain_verification_file leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-434
References: https://vuldb.com/?ctiid.278660; https://vuldb.com/?id.278660; https://vuldb.com/?submit.410393