deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-4226
Published: 2023-11-28
Description: Unrestricted file upload in `/main/inc/ajax/work.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/chamilo/chamilo-lms/commit/6f32625a012d5de2dfe8edbccb4ed14a85e310d4; https://github.com/chamilo/chamilo-lms/commit/e864127a440c2cab0eb62c113a04e2e904543a1f; https://github.com/chamilo/chamilo-lms/commit/f3d62b65ad60d68096c2674d5695339f04de0b8a
CVE: CVE-2023-34053
Published: 2023-11-28
Description: In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.

Specifically, an application is vulnerable when all of the following are true:

  *  the application uses Spring MVC or Spring WebFlux
  *  io.micrometer:micrometer-core is on the classpath
  *  an ObservationRegistry is configured in the application to record observations


Typically, Spring Boot applications need the org.springframework.boot:spring-boot-actuator dependency to meet all conditions.
CVSS Score: 5.3 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://spring.io/security/cve-2023-34053; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-34054
Published: 2023-11-28
Description: 
In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.

Specifically, an application is vulnerable if Reactor Netty HTTP Server built-in integration with Micrometer is enabled.





CVSS Score: 5.3 (MEDIUM)
References: https://spring.io/security/cve-2023-34054; https://spring.io/security/cve-2023-34054
CVE: CVE-2023-34055
Published: 2023-11-28
Description: In Spring Boot versions 2.7.0 - 2.7.17, 3.0.0-3.0.12 and 3.1.0-3.1.5, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.

Specifically, an application is vulnerable when all of the following are true:

  *  the application uses Spring MVC or Spring WebFlux
  *  org.springframework.boot:spring-boot-actuator is on the classpath
CVSS Score: 5.3 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://spring.io/security/cve-2023-34055; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-4667
Published: 2023-11-28
Description: 
The web interface of the PAC Device allows the device administrator user profile to store malicious scripts in some fields. The stored malicious script is then executed when the GUI is opened by any users of the webserver administration interface. 



The root cause of the vulnerability is inadequate input validation and output encoding in the web administration interface component of the firmware.

This could lead to  unauthorized access and data leakage




CVSS Score: 8.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.idemia.com/vulnerability-information; https://www.idemia.com/vulnerability-information
CVE: CVE-2023-6150
Published: 2023-11-28
Description: Incorrect Use of Privileged APIs vulnerability in ESKOM Computer e-municipality module allows Collect Data as Provided by Users.This issue affects e-municipality module: before v.105.
CVSS Score: 7.5 (HIGH)
CWE: CWE-648
References: https://www.usom.gov.tr/bildirim/tr-23-0664; https://www.usom.gov.tr/bildirim/tr-23-0664
CVE: CVE-2023-6151
Published: 2023-11-28
Description: Incorrect Use of Privileged APIs vulnerability in ESKOM Computer e-municipality module allows Collect Data as Provided by Users.This issue affects e-municipality module: before v.105.
CVSS Score: 7.5 (HIGH)
CWE: CWE-648
References: https://www.usom.gov.tr/bildirim/tr-23-0664; https://www.usom.gov.tr/bildirim/tr-23-0664
CVE: CVE-2023-42004
Published: 2023-11-28
Description: IBM Security Guardium 11.3, 11.4, and 11.5 is potentially vulnerable to CSV injection.  A remote attacker could execute malicious commands due to improper validation of csv file contents.  IBM X-Force ID:  265262.
CVSS Score: 8.0 (HIGH)
CWE: CWE-1236
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/265262; https://www.ibm.com/support/pages/node/7069241; https://exchange.xforce.ibmcloud.com/vulnerabilities/265262
CVE: CVE-2023-5981
Published: 2023-11-28
Description: A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-208, CWE-203
References: https://access.redhat.com/errata/RHSA-2024:0155; https://access.redhat.com/errata/RHSA-2024:0319; https://access.redhat.com/errata/RHSA-2024:0399
CVE: CVE-2023-6201
Published: 2023-11-28
Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Univera Computer System Panorama allows Command Injection.This issue affects Panorama: before 8.0.


CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.usom.gov.tr/bildirim/tr-23-0665; https://www.usom.gov.tr/bildirim/tr-23-0665
CVE: CVE-2023-6359
Published: 2023-11-28
Description: A Cross-Site Scripting (XSS) vulnerability has been found in Alumne LMS affecting version 4.0.0.1.08. An attacker could exploit the 'localidad' parameter to inject a custom JavaScript payload and partially take over another user's browser session, due to the lack of proper sanitisation of the 'localidad' field on the /users/editmy page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-alumne-lms; https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-alumne-lms
CVE: CVE-2023-48042
Published: 2023-11-28
Description: Cross Site Scripting (XSS) in Search filters in Prestashop Amazzing filter version up to version 3.2.5, allows remote attackers to inject arbitrary JavaScript code.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://addons.prestashop.com/en/search-filters/18575-amazzing-filter.html; https://medium.com/%40nasir.synack/uncovering-a-cross-site-scripting-vulnerability-cve-2023-48042-in-amazzing-filters-prestashop-2e4a9f8b655e; https://addons.prestashop.com/en/search-filters/18575-amazzing-filter.html
CVE: CVE-2023-6239
Published: 2023-11-28
Description: Under rare conditions, the effective permissions of an object might be incorrectly calculated if the object has a specific configuration of metadata-driven permissions in M-Files Server versions 23.9, 23.10, and 23.11 before 23.11.13168.7, potentially enabling unauthorized access to the object.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-281, CWE-281
References: https://empower.m-files.com/security-advisories/CVE-2023-6239; https://product.m-files.com/security-advisories/cve-2023-6239/; https://www.m-files.com/about/trust-center/security-advisories/cve-2023-6239/
CVE: CVE-2023-49313
Published: 2023-11-28
Description: A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/horsicq/XMachOViewer; https://github.com/louiselalanne/CVE-2023-49313; https://github.com/horsicq/XMachOViewer
CVE: CVE-2023-49314
Published: 2023-11-28
Description: Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r can be used to perform an attack.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://asana.com/pt/download; https://github.com/electron/fuses; https://github.com/louiselalanne/CVE-2023-49314
CVE: CVE-2022-41678
Published: 2023-11-28
Description: Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. 

In details, in ActiveMQ configurations, jetty allows
org.jolokia.http.AgentServlet to handler request to /api/jolokia

org.jolokia.http.HttpRequestHandler#handlePostRequest is able to
create JmxRequest through JSONObject. And calls to
org.jolokia.http.HttpRequestHandler#executeRequest.

Into deeper calling stacks,
org.jolokia.handler.ExecHandler#doHandleRequest can be invoked
through refection. This could lead to RCE through via
various mbeans. One example is unrestricted deserialization in jdk.management.jfr.FlightRecorderMXBeanImpl which exists on Java version above 11.

1 Call newRecording.

2 Call setConfiguration. And a webshell data hides in it.

3 Call startRecording.

4 Call copyTo method. The webshell will be written to a .jsp file.

The mitigation is to restrict (by default) the actions authorized on Jolokia, or disable Jolokia.
A more restrictive Jolokia configuration has been defined in default ActiveMQ distribution. We encourage users to upgrade to ActiveMQ distributions version including updated Jolokia configuration: 5.16.6, 5.17.4, 5.18.0, 6.0.0.

CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://activemq.apache.org/security-advisories.data/CVE-2022-41678-announcement.txt; https://lists.apache.org/thread/7g17kwbtjl011mm4tr8bn1vnoq9wh4sl; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-46589
Published: 2023-11-28
Description: Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could cause Tomcat to treat a single 
request as multiple requests leading to the possibility of request 
smuggling when behind a reverse proxy.


Older, EOL versions may also be affected.


Users are recommended to upgrade to version 11.0.0-M11 onwards, 10.1.16 onwards, 9.0.83 onwards or 8.5.96 onwards, which fix the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444, CWE-444
References: https://lists.apache.org/thread/0rqq6ktozqc42ro8hhxdmmdjm1k1tpxr; https://www.openwall.com/lists/oss-security/2023/11/28/2; https://lists.apache.org/thread/0rqq6ktozqc42ro8hhxdmmdjm1k1tpxr
CVE: CVE-2023-49062
Published: 2023-11-28
Description: Katran could disclose non-initialized kernel memory as part of an IP header. The issue was present for IPv4 encapsulation and ICMP (v4) Too Big packet generation. After a bpf_xdp_adjust_head call, Katran code didn’t initialize the Identification field for the IPv4 header, resulting in writing content of kernel memory in that field of IP header. The issue affected all Katran versions prior to commit 6a03106ac1eab39d[PII_REDACTED]589ecb2374c97f
CVSS Score: 7.5 (HIGH)
CWE: CWE-665
References: https://github.com/facebookincubator/katran/commit/6a03106ac1eab39d[PII_REDACTED]589ecb2374c97f; https://www.facebook.com/security/advisories/cve-2023-49062; https://github.com/facebookincubator/katran/commit/6a03106ac1eab39d[PII_REDACTED]589ecb2374c97f
CVE: CVE-2023-41264
Published: 2023-11-28
Description: Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, leading to privilege escalation. This only occurs if the configuration omits the required restSettings.AuthorizedClientId and restSettings.AuthorizedSecret fields (for the POST /api/Deployment/ExportConfiguration and POST /api/Deployment endpoints).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://www.netwrix.com/identity_governance_and_administration_solution.html; https://www.synacktiv.com/advisories/usercube-netwrix-multiple-vulnerabilities; https://www.netwrix.com/identity_governance_and_administration_solution.html
CVE: CVE-2023-42502
Published: 2023-11-28
Description: An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset versions before 3.0.0.

CVSS Score: 4.8 (MEDIUM)
CWE: CWE-601
References: https://lists.apache.org/thread/n8348f194d8o8mln3oxd0s8jdl5bxbmn; https://lists.apache.org/thread/n8348f194d8o8mln3oxd0s8jdl5bxbmn
CVE: CVE-2023-42505
Published: 2023-11-28
Description: An authenticated user with read permissions on database connections metadata could potentially access sensitive information such as the connection's username.

This issue affects Apache Superset before 3.0.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2023/11/28/5; https://lists.apache.org/thread/bd0fhtfzrtgo1q8x35tpm8ms144d1t2y; http://www.openwall.com/lists/oss-security/2023/11/28/5
CVE: CVE-2023-45286
Published: 2023-11-28
Description: A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same *bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buffer that hasn't had bytes.Buffer.Reset called on it. This dirty buffer will contain the HTTP request body from an unrelated request, and go-resty will append the current HTTP request body to it, sending two bodies in one request. The sync.Pool in question is defined at package level scope, so a completely unrelated server could receive the request body.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362
References: https://github.com/go-resty/resty/commit/577fed8730d79f583eb48dfc81674164e1fc471e; https://github.com/go-resty/resty/issues/739; https://github.com/go-resty/resty/issues/743
CVE: CVE-2023-48848
Published: 2023-11-28
Description: An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server by inserting a crafted path.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/h00klod0er/ureport2-vuln/; https://github.com/h00klod0er/ureport2-vuln/
CVE: CVE-2023-40056
Published: 2023-11-28
Description: 











SQL Injection Remote Code Vulnerability was found in the SolarWinds
Platform. This vulnerability can be exploited with a low privileged account.  






CVSS Score: 8.0 (HIGH)
CWE: CWE-89
References: https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-4-2_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-40056; https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-4-2_release_notes.htm
CVE: CVE-2023-42504
Published: 2023-11-28
Description: An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports, leading to a possible denial of service.

This issue affects Apache Superset: before 3.0.0
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-770
References: http://www.openwall.com/lists/oss-security/2023/11/28/6; https://lists.apache.org/thread/yzq5gk1y9lyw6nxwd3xdkxg1djqw1h6l; http://www.openwall.com/lists/oss-security/2023/11/28/6
CVE: CVE-2023-48121
Published: 2023-11-28
Description: An authentication bypass vulnerability in the Direct Connection Module in Ezviz CS-C6N-xxx prior to v5.3.x build 20230401, Ezviz CS-CV310-xxx prior to v5.3.x build 20230401, Ezviz CS-C6CN-xxx prior to v5.3.x build 20230401, Ezviz CS-C3N-xxx prior to v5.3.x build 20230401 allows remote attackers to obtain sensitive information by sending crafted messages to the affected devices.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://joerngermany.github.io/ezviz_vulnerability/; https://www.ezviz.com/data-security/security-notice/detail/911; https://www.hikvision.com/hk/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-products/
CVE: CVE-2023-49078
Published: 2023-11-28
Description: raptor-web is a CMS for game server communities that can be used to host information and keep track of players. In version 0.4.4 of raptor-web, it is possible to craft a malicious URL that will result in a reflected cross-site scripting vulnerability. A user controlled URL parameter is loaded into an internal template that has autoescape disabled. This is a cross-site scripting vulnerability that affects all deployments of `raptor-web` on version `0.4.4`. Any victim who clicks on a malicious crafted link will be affected. This issue has been patched 0.4.4.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/zediious/raptor-web/releases/tag/0.4.4.1; https://github.com/zediious/raptor-web/security/advisories/GHSA-8r6g-fhh4-xhmq; https://github.com/zediious/raptor-web/releases/tag/0.4.4.1
CVE: CVE-2023-29060
Published: 2023-11-28
Description: The FACSChorus workstation operating system does not restrict what devices can interact with its USB ports. If exploited, a threat actor with physical access to the workstation could gain access to system information and potentially exfiltrate data.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-1299, CWE-306
References: https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software; https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software
CVE: CVE-2023-30588
Published: 2023-11-28
Description: When an invalid public key is used to create an x509 certificate using the crypto.X509Certificate() API a non-expect termination occurs making it susceptible to DoS attacks when the attacker could force interruptions of application processing, as the process terminates when accessing public key info of provided certificates from user code. The current context of the users will be gone, and that will cause a DoS scenario. This vulnerability affects all active Node.js versions v16, v18, and, v20.
CVSS Score: 5.3 (MEDIUM)
References: https://nodejs.org/en/blog/vulnerability/june-2023-security-releases; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://nodejs.org/en/blog/vulnerability/june-2023-security-releases
CVE: CVE-2023-30590
Published: 2023-11-28
Description: The generateKeys() API function returned from crypto.createDiffieHellman() only generates missing (or outdated) keys, that is, it only generates a private key if none has been set yet, but the function is also needed to compute the corresponding public key after calling setPrivateKey(). However, the documentation says this API call: "Generates private and public Diffie-Hellman key values".

The documented behavior is very different from the actual behavior, and this difference could easily lead to security issues in applications that use these APIs as the DiffieHellman may be used as the basis for application-level security, implications are consequently broad.
CVSS Score: 7.5 (HIGH)
References: https://lists.debian.org/debian-lts-announce/2024/03/msg00029.html; https://nodejs.org/en/blog/vulnerability/june-2023-security-releases; https://lists.debian.org/debian-lts-announce/2024/03/msg00029.html
CVE: CVE-2023-45539
Published: 2023-11-28
Description: HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a path_end rule, such as routing index.html#.png to a static server.
CVSS Score: 8.2 (HIGH)
CWE: CWE-116
References: https://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=2eab6d354322932cfec2ed54de261e4347eca9a6; https://lists.debian.org/debian-lts-announce/2023/12/msg00010.html; https://lists.w3.org/Archives/Public/ietf-http-wg/2023JulSep/0070.html
CVE: CVE-2023-29061
Published: 2023-11-28
Description: There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can potentially exploit this vulnerability to access the BIOS configuration and modify the drive boot order and BIOS pre-boot authentication.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software; https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software
CVE: CVE-2023-29062
Published: 2023-11-28
Description: The Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials upon user action without adequately validating the identity of the requested resource. This is possible through the use of LLMNR, MBT-NS, or MDNS and will result in NTLMv2 hashes being sent to a malicious entity position on the local network. These hashes can subsequently be attacked through brute force and cracked if a weak password is used. This attack would only apply to domain joined systems.
CVSS Score: 3.8 (LOW)
CWE: CWE-287, CWE-287
References: https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software; https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software
CVE: CVE-2023-29063
Published: 2023-11-28
Description: The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for memory capture. A threat actor can then isolate sensitive information such as a BitLocker encryption key from a dump of the workstation RAM during startup.
CVSS Score: 2.4 (LOW)
CWE: CWE-1299, CWE-306
References: https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software; https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software
CVE: CVE-2023-29064
Published: 2023-11-28
Description: The FACSChorus software contains sensitive information stored in plaintext. A threat actor could gain hardcoded secrets used by the application, which include tokens and passwords for administrative accounts.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-798, CWE-798
References: https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software; https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software
CVE: CVE-2023-29065
Published: 2023-11-28
Description: The FACSChorus software database can be accessed directly with the privileges of the currently logged-in user. A threat actor with physical access could potentially gain credentials, which could be used to alter or destroy data stored in the database.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-277, CWE-732
References: https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software; https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software
CVE: CVE-2023-29066
Published: 2023-11-28
Description: The FACSChorus software does not properly assign data access privileges for operating system user accounts. A non-administrative OS account can modify information stored in the local application data folders.
CVSS Score: 3.2 (LOW)
CWE: CWE-266, CWE-269
References: https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software; https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software
CVE: CVE-2023-48193
Published: 2023-11-28
Description: Insecure Permissions vulnerability in JumpServer GPLv3 v.3.8.0 allows a remote attacker to execute arbitrary code via bypassing the command filtering function. NOTE: this is disputed because command filtering is not intended to restrict what code can be run by authorized users who are allowed to execute files.
CVSS Score: 9.8 (CRITICAL)
References: http://jumpserver.com; https://blog.fit2cloud.com/?p=8cf83cd9-c23b-4625-9350-38926fb7f88e; https://github.com/296430468/lcc_test/blob/main/jumpserver_BUG.md