deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-37396
Published: 2024-04-19
Description: IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to improper encryption of certain data.  IBM X-Force ID:  259671.
CVSS Score: 2.5 (LOW)
CWE: CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/259671; https://www.ibm.com/support/pages/node/7148632; https://exchange.xforce.ibmcloud.com/vulnerabilities/259671
CVE: CVE-2024-22640
Published: 2024-04-19
Description: TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/tecnickcom/TCPDF; https://github.com/zunak/CVE-2024-22640; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LIB3R2WB7XPW2I4PGVMZ3VLFLRHOK4RB/
CVE: CVE-2024-27752
Published: 2024-04-19
Description: Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the Default Keyword field in the settings function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/flyhha/cms/blob/main/1.md; https://github.com/flyhha/cms/blob/main/1.md
CVE: CVE-2024-29029
Published: 2024-04-19
Description: memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/image that allows unauthenticated users to enumerate the internal network and retrieve images. The response from the image request is then copied into the response of the current server request, causing a reflected XSS vulnerability. Version 0.22.0 of memos removes the vulnerable file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-918, CWE-79, CWE-918
References: https://github.com/usememos/memos/blob/06dbd[PII_REDACTED]444f4b50f4f9ed267f7c3cf63/api/v1/http_getter.go#L29; https://github.com/usememos/memos/commit/bbd206e8930281eb040cc8c[PII_REDACTED]92b9eb5; https://securitylab.github.com/advisories/GHSL-2023-154_GHSL-2023-156_memos/
CVE: CVE-2024-29183
Published: 2024-04-19
Description: OpenRASP is a RASP solution that directly integrates its protection engine into the application server by instrumentation. There exists a reflected XSS in the /login page due to a reflection of the redirect parameter. This allows an attacker to execute arbitrary javascript with the permissions of a user after the user logins with their account.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/baidu/openrasp/commit/240fde3901c7a36aaade3683ffd5c89140a535fb; https://securitylab.github.com/advisories/GHSL-2023-253_openrasp; https://github.com/baidu/openrasp/commit/240fde3901c7a36aaade3683ffd5c89140a535fb
CVE: CVE-2024-31587
Published: 2024-04-19
Description: SecuSTATION Camera V2.5.5.3116-S50-SMA-B20160811A and lower allows an unauthenticated attacker to download device configuration files via a crafted request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-312
References: https://github.com/kklzzcun/kklzzcun.github.io/blob/main/Camera.md; https://github.com/kklzzcun/kklzzcun.github.io/blob/main/Camera.md
CVE: CVE-2024-31841
Published: 2024-04-19
Description: An issue was discovered in Italtel Embrace 1.6.4. The web server fails to sanitize input data, allowing remote unauthenticated attackers to read arbitrary files on the filesystem.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2024-31846
Published: 2024-04-19
Description: An issue was discovered in Italtel Embrace 1.6.4. The web application does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2024-32206
Published: 2024-04-19
Description: A stored cross-site scripting (XSS) vulnerability in the component \affiche\admin\index.php of WUZHICMS v4.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $formdata parameter.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: http://wuzhicms.com; https://github.com/majic-banana/vulnerability/blob/main/POC/WUZHICMS4.1.0%20Stored%20Xss%20In%20Affiche%20Model.md; https://github.com/wuzhicms/wuzhicms
CVE: CVE-2024-32409
Published: 2024-04-19
Description: An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: http://semcms.com; http://www.sem-cms.com/; https://gitee.com/whats-the-bad-idea/cve
CVE: CVE-2024-32650
Published: 2024-04-19
Description: Rustls is a modern TLS library written in Rust. `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input. When using a blocking rustls server, if a client send a `close_notify` message immediately after `client_hello`, the server's `complete_io` will get in an infinite loop. This vulnerability is fixed in 0.23.5, 0.22.4, and 0.21.11.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://github.com/rustls/rustls/commit/[PII_REDACTED]aa31043a31b0770e6572136fbe0c2d; https://github.com/rustls/rustls/commit/6e938bcfe82a9da7a2e1cbf10b928c7eca26426e; https://github.com/rustls/rustls/commit/f45664fbded03d833dffd806503d3c8becd1b71e
CVE: CVE-2022-40745
Published: 2024-04-19
Description: IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to weaker than expected security.  IBM X-Force ID:  236452.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-326
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/236452; https://www.ibm.com/support/pages/node/7148632; https://exchange.xforce.ibmcloud.com/vulnerabilities/236452
CVE: CVE-2023-27279
Published: 2024-04-19
Description: IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a user to cause a denial of service due to missing API rate limiting.  IBM X-Force ID:  248533.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-799
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/248533; https://www.ibm.com/support/pages/node/7148632; https://exchange.xforce.ibmcloud.com/vulnerabilities/248533
CVE: CVE-2023-37397
Published: 2024-04-19
Description: IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain or modify sensitive information due to improper encryption of certain data.  IBM X-Force ID:  259672.
CVSS Score: 3.6 (LOW)
CWE: CWE-326, CWE-326
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/259672; https://www.ibm.com/support/pages/node/7148632; https://exchange.xforce.ibmcloud.com/vulnerabilities/259672
CVE: CVE-2023-49501
Published: 2024-04-19
Description: Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the config_eq_output function in the libavfilter/asrc_afirsrc.c:495:30 component.
CVSS Score: 8.0 (HIGH)
CWE: CWE-122
References: https://github.com/FFmpeg/FFmpeg; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
CVE: CVE-2023-49502
Published: 2024-04-19
Description: Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ff_bwdif_filter_intra_c function in the libavfilter/bwdifdsp.c:125:5 component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://github.com/FFmpeg/FFmpeg; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
CVE: CVE-2023-49963
Published: 2024-04-19
Description: DYMO LabelWriter Print Server through 2.366 contains a backdoor hard-coded password that could allow an attacker to take control.
CVSS Score: 8.8 (HIGH)
CWE: CWE-259
References: https://gitlab.com/loudmouth-security/vulnerability-disclosures/cve-2023-49963; https://loudmouth.io; https://gitlab.com/loudmouth-security/vulnerability-disclosures/cve-2023-49963
CVE: CVE-2023-50007
Published: 2024-04-19
Description: FFmpeg v.n6.1-3-g466799d4f5 allows an attacker to trigger use of a parameter of negative size in the av_samples_set_silence function in thelibavutil/samplefmt.c:260:9 component.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-121
References: https://github.com/FFmpeg/FFmpeg/commit/b1942734c7cbcdc[PII_REDACTED]abcc9ecb9644c47; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
CVE: CVE-2023-50008
Published: 2024-04-19
Description: FFmpeg v.n6.1-3-g466799d4f5 allows memory consumption when using the colorcorrect filter, in the av_malloc function in libavutil/mem.c:105:9 component.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://github.com/FFmpeg/FFmpeg/commit/5f87a68cf70dafeab2fb89b42e41a4c29053b89b; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
CVE: CVE-2023-50009
Published: 2024-04-19
Description: FFmpeg v.n6.1-3-g466799d4f5 allows a heap-based buffer overflow via the ff_gaussian_blur_8 function in libavfilter/edge_template.c:116:5 component.
CVSS Score: 8.0 (HIGH)
CWE: CWE-122
References: https://ffmpeg.org/; https://github.com/FFmpeg/FFmpeg; https://github.com/FFmpeg/FFmpeg/commit/162b4c60c8f72be2e93b759f3b1e14652b70b3ba
CVE: CVE-2023-50010
Published: 2024-04-19
Description: FFmpeg v.n6.1-3-g466799d4f5 allows a buffer over-read at ff_gradfun_blur_line_movdqa_sse2, as demonstrated by a call to the set_encoder_id function in /fftools/ffmpeg_enc.c component.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://ffmpeg.org/; https://git.ffmpeg.org/gitweb/ffmpeg.git/blobdiff/ab0fdaedd1e7224f7e84ea22fcbfaa4ca75a6c06..e4d2666bdc3dbd177a81bbf428654a5f2fa3787a:/libavfilter/vf_gradfun.c; https://github.com/FFmpeg/FFmpeg/commit/e4d2666bdc3dbd177a81bbf428654a5f2fa3787a
CVE: CVE-2023-51791
Published: 2024-04-19
Description: Buffer Overflow vulenrability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavcodec/jpegxl_parser.c in gen_alias_map.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://ffmpeg.org/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
CVE: CVE-2023-51792
Published: 2024-04-19
Description: Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the maximum supported size of 0x[PII_REDACTED].
CVSS Score: 3.3 (LOW)
CWE: CWE-121
References: https://github.com/strukturag/libde265; https://github.com/strukturag/libde265/issues/427; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
CVE: CVE-2023-51793
Published: 2024-04-19
Description: Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavutil/imgutils.c:353:9 in image_copy_plane.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://ffmpeg.org/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
CVE: CVE-2023-51795
Published: 2024-04-19
Description: Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/avf_showspectrum.c:1789:52 component in showspectrumpic_request_frame
CVSS Score: 8.0 (HIGH)
CWE: CWE-122
References: https://ffmpeg.org/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
CVE: CVE-2023-51796
Published: 2024-04-19
Description: Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/f_reverse.c:269:26 in areverse_request_frame.
CVSS Score: 3.6 (LOW)
CWE: CWE-120
References: https://ffmpeg.org/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
CVE: CVE-2023-51797
Published: 2024-04-19
Description: Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/avf_showwaves.c:722:24 in showwaves_filter_frame
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-94
References: https://ffmpeg.org/; https://github.com/FFmpeg/FFmpeg; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
CVE: CVE-2023-51798
Published: 2024-04-19
Description: Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via a floating point exception (FPE) error at libavfilter/vf_minterpolate.c:1078:60 in interpolate.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://ffmpeg.org/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
CVE: CVE-2024-29991
Published: 2024-04-19
Description: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29991; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29991
CVE: CVE-2024-2440
Published: 2024-04-19
Description: A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on a detached repository by making a GraphQL mutation to alter repository permissions while the repository is detached. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.13 and was fixed in versions 3.9.13, 3.10.10, 3.11.8 and 3.12.1. This vulnerability was reported via the GitHub Bug Bounty program. 
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-367
References: https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.10; https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.8; https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.2
CVE: CVE-2024-31552
Published: 2024-04-19
Description: CuteHttpFileServer v.3.1 version has an arbitrary file download vulnerability, which allows attackers to download arbitrary files on the server and obtain sensitive information.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22
References: https://www.yuque.com/sickle-ffnce/awixr8/gsu7nyi0gu9q1nl8; https://www.yuque.com/sickle-ffnce/awixr8/gsu7nyi0gu9q1nl8
CVE: CVE-2023-47435
Published: 2024-04-19
Description: An issue in the verifyPassword function of hexo-theme-matery v2.0.0 allows attackers to bypass authentication and access password protected pages.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-294
References: https://github.com/blinkfox/hexo-theme-matery/issues/897; https://github.com/blinkfox/hexo-theme-matery/issues/897
CVE: CVE-2024-31546
Published: 2024-04-19
Description: Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/damage/view_damage.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/emirhanmtl/vuln-research/blob/main/SQLi-2-Computer-Laboratory-Management-System-PoC.md; https://github.com/emirhanmtl/vuln-research/blob/main/SQLi-2-Computer-Laboratory-Management-System-PoC.md
CVE: CVE-2024-31547
Published: 2024-04-19
Description: Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/item/view_item.php.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: https://github.com/emirhanmtl/vuln-research/blob/main/SQLi-3-Computer-Laboratory-Management-System-PoC.md; https://github.com/emirhanmtl/vuln-research/blob/main/SQLi-3-Computer-Laboratory-Management-System-PoC.md
CVE: CVE-2024-3979
Published: 2024-04-19
Description: A vulnerability, which was classified as problematic, has been found in COVESA vsomeip up to 3.4.10. Affected by this issue is some unknown functionality. The manipulation leads to race condition. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-261596.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-362
References: https://github.com/COVESA/vsomeip/files/14904610/details.zip; https://github.com/COVESA/vsomeip/issues/663; https://vuldb.com/?ctiid.261596
CVE: CVE-2024-31450
Published: 2024-04-19
Description: Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server. The Owncast application exposes an administrator API at the URL /api/admin. The emoji/delete endpoint of said API allows administrators to delete custom emojis, which are saved on disk. The parameter name is taken from the JSON request and directly appended to the filepath that points to the emoji to delete. By using path traversal sequences (../), attackers with administrative privileges can exploit this endpoint to delete arbitrary files on the system, outside of the emoji directory. This vulnerability is fixed in 0.1.3.
CVSS Score: 2.7 (LOW)
CWE: CWE-22
References: https://github.com/owncast/owncast/blob/v0.1.2/controllers/admin/emoji.go#L63; https://github.com/owncast/owncast/commit/1b14800c7d7f54be14ed4d130bfe7f480645076e; https://github.com/owncast/owncast/releases/tag/v0.1.3
CVE: CVE-2024-32652
Published: 2024-04-19
Description: The adapter @hono/node-server allows you to run your Hono application on Node.js. Prior to 1.10.1, the application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those that cannot be parsed by the `URL` as a hostname such as an empty string, slashes `/`, and other strings. The version 1.10.1 includes the fix for this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755
References: https://github.com/honojs/node-server/commit/d847e60249fd8183ba0998bc379ba[PII_REDACTED]4; https://github.com/honojs/node-server/issues/159; https://github.com/honojs/node-server/security/advisories/GHSA-hgxw-5xg3-69jx
CVE: CVE-2024-1681
Published: 2024-04-19
Description: corydolphin/flask-cors is vulnerable to log injection when the log level is set to debug. An attacker can inject fake log entries into the log file by sending a specially crafted GET request containing a CRLF sequence in the request path. This vulnerability allows attackers to corrupt log files, potentially covering tracks of other attacks, confusing log post-processing tools, and forging log entries. The issue is due to improper output neutralization for logs.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-117
References: https://huntr.com/bounties/25a7a0ba-9fa2-4777-acb6-03e5539bb644; https://huntr.com/bounties/25a7a0ba-9fa2-4777-acb6-03e5539bb644; https://lists.debian.org/debian-lts-announce/2025/05/msg00049.html
CVE: CVE-2024-22905
Published: 2024-04-19
Description: Buffer Overflow vulnerability in ARM mbed-os v.6.17.0 allows a remote attacker to execute arbitrary code via a crafted script to the hciTrSerialRxIncoming function.
CVSS Score: 7.0 (HIGH)
CWE: CWE-120
References: https://github.com/ARMmbed/mbed-os/blob/7c7d20da[PII_REDACTED]094d9d50ce[PII_REDACTED]01/connectivity/FEATURE_BLE/source/cordio/stack_adaptation/hci_tr.c#L125; https://github.com/ARMmbed/mbed-os/blob/7c7d20da[PII_REDACTED]094d9d50ce[PII_REDACTED]01/connectivity/FEATURE_BLE/source/cordio/stack_adaptation/hci_tr.c#L173-L175; https://github.com/ARMmbed/mbed-os/issues/15462
CVE: CVE-2024-30974
Published: 2024-04-19
Description: SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/torchstar/autoexpress/blob/master/buginfodetail.md; https://github.com/torchstar/autoexpress/blob/master/buginfodetail.md
CVE: CVE-2024-31584
Published: 2024-04-19
Description: Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/pytorch/pytorch/blob/v2.1.2/torch/csrc/jit/mobile/flatbuffer_loader.cpp#L305; https://github.com/pytorch/pytorch/commit/7c35874ad664e74c8e4252d67521f3986eadb0e6; https://github.com/pytorch/pytorch/blob/v2.1.2/torch/csrc/jit/mobile/flatbuffer_loader.cpp#L305
CVE: CVE-2024-31991
Published: 2024-04-19
Description: Mealie is a self hosted recipe manager and meal planner. Prior to 1.4.0, the safe_scrape_html function utilizes a user-controlled URL to issue a request to a remote server. Based on the content of the response, it will either parse the content or disregard it. This function, nor those that call it, add any restrictions on the URL that can be provided, nor is it restricted to being an FQDN (i.e., an IP address can be provided). As this function’s return will be handled differently by its caller depending on the response, it is possible for an attacker to use this functionality to positively identify HTTP(s) servers on the local network with any IP/port combination. This issue can result in any authenticated user being able to map HTTP servers on a local network that the Mealie service has access to. Note that by default any user can create an account on a Mealie server, and that the default changeme@example.com user is available with its hard-coded password. This vulnerability is fixed in 1.4.0.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-918
References: https://github.com/mealie-recipes/mealie/blob/mealie-next/mealie/services/scraper/scraper_strategies.py#L27-L70; https://github.com/mealie-recipes/mealie/commit/2a3463b7466bc297aede50046da9550d919ec56f; https://github.com/mealie-recipes/mealie/pull/3368
CVE: CVE-2024-31992
Published: 2024-04-19
Description: Mealie is a self hosted recipe manager and meal planner. Prior to 1.4.0, the safe_scrape_html function utilizes a user-controlled URL to issue a request to a remote server, however these requests are not rate-limited. While there are efforts to prevent DDoS by implementing a timeout on requests, it is possible for an attacker to issue a large number of requests to the server which will be handled in batches based on the configuration of the Mealie server. The chunking of responses is helpful for mitigating memory exhaustion on the Mealie server, however a single request to an arbitrarily large external file (e.g. a Debian ISO) is often sufficient to completely saturate a CPU core assigned to the Mealie container. Without rate limiting in place, it is possible to not only sustain traffic against an external target indefinitely, but also to exhaust the CPU resources assigned to the Mealie container. This vulnerability is fixed in 1.4.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://github.com/mealie-recipes/mealie/blob/mealie-next/mealie/services/scraper/scraper_strategies.py#L27-L70; https://github.com/mealie-recipes/mealie/commit/2a3463b7466bc297aede50046da9550d919ec56f; https://github.com/mealie-recipes/mealie/pull/3368