deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-57430
Published: 2025-02-06
Description: An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this flaw can lead to unauthorized information disclosure, privilege escalation, or database manipulation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/ahrixia/CVE-2024-57430; https://www.phpjabbers.com/cinema-booking-system/
CVE: CVE-2024-57599
Published: 2025-02-06
Description: Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a crafted payload injected into the description parameter in /admin/article.php
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/Arykon/cve/blob/main/douphp.pdf; https://www.douphp.com/; https://github.com/Arykon/cve/blob/main/douphp.pdf
CVE: CVE-2025-1078
Published: 2025-02-06
Description: A vulnerability has been found in AppHouseKitchen AlDente Charge Limiter up to 1.29 on macOS and classified as critical. This vulnerability affects the function shouldAcceptNewConnection of the file com.apphousekitchen.aldente-pro.helper of the component XPC Service. The manipulation leads to improper authorization. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Upgrading to version 1.30 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early about this disclosure and acted very professional.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://vuldb.com/?ctiid.294844; https://vuldb.com/?id.294844; https://vuldb.com/?submit.492529
CVE: CVE-2025-22866
Published: 2025-02-06
Description: Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.
CVSS Score: 4.0 (MEDIUM)
References: https://go.dev/cl/643735; https://go.dev/issue/71383; https://groups.google.com/g/golang-announce/c/xU1ZCHUZw3k
CVE: CVE-2024-36553
Published: 2025-02-06
Description: Forever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h is vulnerable to MITM attack.
CVSS Score: 8.1 (HIGH)
CWE: CWE-300
References: https://www.diva-portal.org/smash/record.jsf?aq2=%5B%5B%5D%5D&c=1&af=%5B%5D&searchType=SIMPLE&sortOrder2=title_sort_asc&query=Exploiting+Vulnerabilities+to+Remotely+Hijack+Children%E2%80%99s+Smartwatches&language=en&pid=diva2%3A1933447&aq=%5B%5B%5D%5D&sf=undergraduate&aqe=%5B%5D&sortOrder=author_sort_asc&onlyFullText=false&noOfRows=50&dswid=-8296
CVE: CVE-2024-36554
Published: 2025-02-06
Description: Forever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h and Forever KidsWatch Call Me KW-60 R36CW_YDE_S4_A29_2_V1.0_2023.05.24_22.49.44_cob_b allow a malicious user to gain information about the device by sending an SMS to the device which returns sensitive information.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-497
References: https://www.diva-portal.org/smash/record.jsf?aq2=%5B%5B%5D%5D&c=1&af=%5B%5D&searchType=SIMPLE&sortOrder2=title_sort_asc&query=Exploiting+Vulnerabilities+to+Remotely+Hijack+Children%E2%80%99s+Smartwatches&language=en&pid=diva2%3A1933447&aq=%5B%5B%5D%5D&sf=undergraduate&aqe=%5B%5D&sortOrder=author_sort_asc&onlyFullText=false&noOfRows=50&dswid=-8296
CVE: CVE-2024-36555
Published: 2025-02-06
Description: Built-in SMS-configuration command in Forever KidsWatch Call Me KW50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h and Forever KidsWatch Call Me 2 KW-60 R36CW_YDE_S4_A29_2_V1.0_2023.05.24_22.49.44_cob_b allows malicious users to change the device IMEI-number which allows for forging the identity of the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.diva-portal.org/smash/record.jsf?aq2=%5B%5B%5D%5D&c=1&af=%5B%5D&searchType=SIMPLE&sortOrder2=title_sort_asc&query=Exploiting+Vulnerabilities+to+Remotely+Hijack+Children%E2%80%99s+Smartwatches&language=en&pid=diva2%3A1933447&aq=%5B%5B%5D%5D&sf=undergraduate&aqe=%5B%5D&sortOrder=author_sort_asc&onlyFullText=false&noOfRows=50&dswid=-8296
CVE: CVE-2024-36556
Published: 2025-02-06
Description: Forever KidsWatch Call Me KW50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h, and Forever KidsWatch Call Me 2 KW60 R36CW_YDE_S4_A29_2_V1.0_2023.05.24_22.49.44_cob_b have a Hardcoded password vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-798
References: https://www.diva-portal.org/smash/record.jsf?aq2=%5B%5B%5D%5D&c=1&af=%5B%5D&searchType=SIMPLE&sortOrder2=title_sort_asc&query=Exploiting+Vulnerabilities+to+Remotely+Hijack+Children%E2%80%99s+Smartwatches&language=en&pid=diva2%3A1933447&aq=%5B%5B%5D%5D&sf=undergraduate&aqe=%5B%5D&sortOrder=author_sort_asc&onlyFullText=false&noOfRows=50&dswid=-8296
CVE: CVE-2024-36557
Published: 2025-02-06
Description: The device ID is based on IMEI in Forever KidsWatch Call Me KW50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h and Forever KidsWatch Call Me 2 KW60 R36CW_YDE_S4_A29_2_V1.0_2023.05.24_22.49.44_cob_b. If a malicious user changes the IMEI to the IMEI of a unit they registered in the mobile app, it is possible to hijack the device and control it from the app.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-290
References: https://www.diva-portal.org/smash/record.jsf?aq2=%5B%5B%5D%5D&c=1&af=%5B%5D&searchType=SIMPLE&sortOrder2=title_sort_asc&query=Exploiting+Vulnerabilities+to+Remotely+Hijack+Children%E2%80%99s+Smartwatches&language=en&pid=diva2%3A1933447&aq=%5B%5B%5D%5D&sf=undergraduate&aqe=%5B%5D&sortOrder=author_sort_asc&onlyFullText=false&noOfRows=50&dswid=-8296
CVE: CVE-2024-36558
Published: 2025-02-06
Description: Forever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h suffers from Cleartext Transmission of Sensitive Information due to lack of encryption in device-server communication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://www.diva-portal.org/smash/record.jsf?aq2=%5B%5B%5D%5D&c=1&af=%5B%5D&searchType=SIMPLE&sortOrder2=title_sort_asc&query=Exploiting+Vulnerabilities+to+Remotely+Hijack+Children%E2%80%99s+Smartwatches&language=en&pid=diva2%3A1933447&aq=%5B%5B%5D%5D&sf=undergraduate&aqe=%5B%5D&sortOrder=author_sort_asc&onlyFullText=false&noOfRows=50&dswid=-8296
CVE: CVE-2024-57610
Published: 2025-02-06
Description: A rate limiting issue in Sylius v2.0.2 allows a remote attacker to perform unrestricted brute-force attacks on user accounts, significantly increasing the risk of account compromise and denial of service for legitimate users. The Supplier's position is that the Sylius core software is not intended to address brute-force attacks; instead, customers deploying a Sylius-based system are supposed to use "firewalls, rate-limiting middleware, or authentication providers" for that functionality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-307
References: https://github.com/Sylius/Sylius; https://github.com/nca785/CVE-2024-57610; https://sylius.com/
CVE: CVE-2025-22867
Published: 2025-02-06
Description: On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the @executable_path, @loader_path, or @rpath special values in a "#cgo LDFLAGS" directive. This issue only affected go1.24rc2.
CVSS Score: 7.5 (HIGH)
References: https://go.dev/cl/646996; https://go.dev/issue/71476; https://groups.google.com/g/golang-dev/c/TYzikTgHK6Y
CVE: CVE-2025-23217
Published: 2025-02-06
Description: mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malicious client can use mitmweb's proxy server (bound to `*:8080` by default) to access mitmweb's internal API (bound to `127.0.0.1:8081` by default). In other words, while the cannot access the API directly, they can access the API through the proxy. An attacker may be able to escalate this SSRF-style access to remote code execution. The mitmproxy and mitmdump tools are unaffected. Only mitmweb is affected. This vulnerability has been fixed in mitmproxy 11.1.2 and above. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CWE: CWE-288, CWE-441
References: https://en.wikipedia.org/wiki/Server-side_request_forgery; https://github.com/mitmproxy/mitmproxy/blob/main/CHANGELOG.md#06-february-2025-mitmproxy-1112; https://github.com/mitmproxy/mitmproxy/security/advisories/GHSA-wg33-5h85-7q5p
CVE: CVE-2025-24981
Published: 2025-02-06
Description: MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. In affected versions unsafe parsing logic of the URL from markdown can lead to arbitrary JavaScript code due to a bypass to the existing guards around the `javascript:` protocol scheme in the URL. The parsing logic implement in `props.ts` maintains a deny-list approach to filtering potential malicious payload. It does so by matching protocol schemes like `javascript:` and others. These security guards can be bypassed by an adversarial that provides JavaScript URLs with HTML entities encoded via hex string. Users who consume this library and perform markdown parsing from unvalidated sources could result in rendering vulnerable XSS anchor links. This vulnerability has been addressed in version 0.13.3 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-79
References: https://github.com/nuxt-modules/mdc/blob/main/src/runtime/parser/utils/props.ts#L16; https://github.com/nuxt-modules/mdc/commit/99097738b5561639e9bf247c55d[PII_REDACTED]bf3; https://github.com/nuxt-modules/mdc/security/advisories/GHSA-j82m-pc2v-2484
CVE: CVE-2024-13416
Published: 2025-02-06
Description: Using API in the 2N OS device, authorized user can enable logging, which discloses valid authentication tokens in system log.




2N has released an updated version 2.46 of 2N OS, where this vulnerability is mitigated. It is recommended that all customers update their devices to the latest 2N OS.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-532
References: https://www.2n.com/en-GB/download/cve_2024_1341x_2nos_2_46_v1pdf
CVE: CVE-2024-57523
Published: 2025-02-06
Description: Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attackers to create unauthorized admin accounts via crafted requests sent to an authenticated admin user.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-352
References: http://sourcecodester.com; https://github.com/HackWidMaddy/CVE-2024-57523.; https://github.com/HackWidMaddy/CVE-2024-57523.
CVE: CVE-2024-57668
Published: 2025-02-06
Description: In Code-projects Shopping Portal v1.0, the insert-product.php page has an arbitrary file upload vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://code-projects.org/shopping-portal-using-php-source-code/; https://github.com/passevery/vul/issues/1
CVE: CVE-2025-22992
Published: 2025-02-06
Description: A SQL Injection vulnerability exists in the /feed/insert.json endpoint of the Emoncms project >= 11.6.9. The vulnerability is caused by improper handling of user-supplied input in the data query parameter, allowing attackers to execute arbitrary SQL commands under specific conditions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/emoncms/emoncms/issues/1916; https://github.com/emoncms/emoncms/issues/1916
CVE: CVE-2025-24786
Published: 2025-02-06
Description: WhoDB is an open source database management tool. While the application only displays Sqlite3 databases present in the directory `/db`, there is no path traversal prevention in place. This allows an unauthenticated attacker to open any Sqlite3 database present on the host machine that the application is running on. Affected versions of WhoDB allow users to connect to Sqlite3 databases. By default, the databases must be present in `/db/` (or alternatively `./tmp/` if development mode is enabled).  If no databases are present in the default directory, the UI indicates that the user is unable to open any databases. The database file is an user-controlled value. This value is used in `.Join()` with the default directory, in order to get the full path of the database file to open. No checks are performed whether the database file that is eventually opened actually resides in the default directory `/db`. This allows an attacker to use path traversal (`../../`) in order to open any Sqlite3 database present on the system. This issue has been addressed in version 0.45.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-22, CWE-35
References: https://github.com/clidey/whodb/blob/ba6eb81d0ca40baead74bca58b[PII_REDACTED]d6a6/core/src/plugins/sqlite3/db.go#L14-L20; https://github.com/clidey/whodb/blob/ba6eb81d0ca40baead74bca58b[PII_REDACTED]d6a6/core/src/plugins/sqlite3/db.go#L26; https://github.com/clidey/whodb/security/advisories/GHSA-9r4c-jwx3-3j76
CVE: CVE-2025-24787
Published: 2025-02-06
Description: WhoDB is an open source database management tool. In affected versions the application is vulnerable to parameter injection in database connection strings, which allows an attacker to read local files on the machine the application is running on. The application uses string concatenation to build database connection URIs which are then passed to corresponding libraries responsible for setting up the database connections. This string concatenation is done unsafely and without escaping or encoding the user input. This allows an user, in many cases, to inject arbitrary parameters into the URI string. These parameters can be potentially dangerous depending on the libraries used. One of these dangerous parameters is `allowAllFiles` in the library `github.com/go-sql-driver/mysql`. Should this be set to `true`, the library enables running the `LOAD DATA LOCAL INFILE` query on any file on the host machine (in this case, the machine that WhoDB is running on). By injecting `&allowAllFiles=true` into the connection URI and connecting to any MySQL server (such as an attacker-controlled one), the attacker is able to read local files. This issue has been addressed in version 0.45.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.6 (HIGH)
CWE: CWE-943
References: https://github.com/clidey/whodb/security/advisories/GHSA-c7w4-9wv8-7x7c; https://github.com/go-sql-driver/mysql/blob/[PII_REDACTED]ca112af503b4612568c3096fecb466/infile.go#L128; https://github.com/clidey/whodb/security/advisories/GHSA-c7w4-9wv8-7x7c
CVE: CVE-2024-13417
Published: 2025-02-06
Description: Specifically crafted payloads sent to the RFID reader could cause DoS of RFID reader. After the device is restarted, it gets back to fully working state.




2N has released an updated version 2.46 of 2N OS, where this vulnerability is mitigated. It is recommended that all customers update their devices to the latest 2N OS.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-248
References: https://www.2n.com/en-GB/download/cve_2024_1341x_2nos_2_46_v1pdf
CVE: CVE-2024-47256
Published: 2025-02-06
Description: Successful exploitation of this vulnerability could allow an attacker (who needs to have Admin access privileges) to read hardcoded AES passphrase, which may be used for decryption of certain data within backup files of 2N Access Commander version 1.14 and older.






2N has released an updated version 3.3 of 2N Access Commander, where this vulnerability is mitigated. It is recommended that all customers update 2N Access Commander to the latest version.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-321
References: https://www.2n.com/en-GB/download/cve_2024_47256_acom_3_3_v1pdf
CVE: CVE-2024-47258
Published: 2025-02-06
Description: 2N Access Commander version 2.1 and prior is vulnerable in default settings to Man In The Middle attack due to not verifying certificates of 2N edge devices. 





2N has currently released an updated version 3.3 of 2N Access Commander, with added Certificate Fingerprint Verification. Since version 2.2 of 2N Access Commander (released in February 2022) it is also possible to enforce TLS certificate validation.It is recommended that all customers update 2N Access Commander to the latest version and use one of two mentioned practices.
CVSS Score: 8.1 (HIGH)
CWE: CWE-295
References: https://www.2n.com/en-GB/download/cve_2024_47258_acom_3_3_v1pdf
CVE: CVE-2024-52892
Published: 2025-02-06
Description: IBM Jazz for Service Management 1.1.3 through 1.1.3.23 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7182508
CVE: CVE-2024-57426
Published: 2025-02-06
Description: NetMod VPN Client 5.3.1 is vulnerable to DLL injection, allowing an attacker to execute arbitrary code by placing a malicious DLL in a directory where the application loads dependencies. This vulnerability arises due to the improper validation of dynamically loaded libraries.
CVSS Score: 7.3 (HIGH)
CWE: CWE-427
References: https://github.com/iamsinghmanish/My-CVEs/tree/main/CVE-2024-57426; https://sourceforge.net/projects/netmodhttp/
CVE: CVE-2024-57672
Published: 2025-02-06
Description: An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module, Topologylnstance module, Routing module.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/floodlight/floodlight/issues/871
CVE: CVE-2024-57673
Published: 2025-02-06
Description: An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module and Linkdiscovery module
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/floodlight/floodlight/issues/872
CVE: CVE-2025-22936
Published: 2025-02-06
Description: An issue in Smartcom Bulgaria AD Smartcom Ralink CPE/WiFi router SAM-4G1G-TT-W-VC, SAM-4F1F-TT-W-A1 allows a remote attacker to obtain sensitive information via the Weak default WiFi password generation algorithm in WiFi routers.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-1391
References: http://smartcom.com; https://sec.stanev.org/advisories/Smartcom_default_WPA_password.txt
CVE: CVE-2025-23093
Published: 2025-02-06
Description: The Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager through V10 R1.54.1 and V11 through R0.22.1 could allow an authenticated attacker to conduct a privilege escalation attack due to the execution of a resource with unnecessary privileges. A successful exploit could allow an attacker to execute arbitrary commands with elevated privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2025-0001
CVE: CVE-2024-54171
Published: 2025-02-06
Description: IBM EntireX 11.1 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. An authenticated attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: https://www.ibm.com/support/pages/node/7182693
CVE: CVE-2024-56467
Published: 2025-02-06
Description: IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned.  This information could be used in further attacks against the system.
CVSS Score: 3.3 (LOW)
CWE: CWE-209
References: https://www.ibm.com/support/pages/node/7182693
CVE: CVE-2025-0158
Published: 2025-02-06
Description: IBM EntireX 11.1 could allow a local user to cause a denial of service due to an unhandled error and fault isolation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-248
References: https://www.ibm.com/support/pages/node/7182693
CVE: CVE-2025-1004
Published: 2025-02-06
Description: Certain HP LaserJet Pro printers may potentially
experience a denial of service when a user sends a raw JPEG file to the printer
via IPP (Internet Printing Protocol).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-241
References: https://support.hp.com/au-en/document/ish_1[PII_REDACTED]7615-16/hpsbpi03998
CVE: CVE-2025-1081
Published: 2025-02-06
Description: A vulnerability was found in Bharti Airtel Xstream Fiber up to 20250123. It has been rated as problematic. This issue affects some unknown processing of the component WiFi Password Handler. The manipulation leads to use of weak credentials. The attack needs to be done within the local network. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.1 (LOW)
CWE: CWE-1391
References: https://packetstorm.news/files/id/188799/; https://vuldb.com/?ctiid.294857; https://vuldb.com/?id.294857
CVE: CVE-2025-23094
Published: 2025-02-06
Description: The Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager V11 R0.22.0 through V11 R0.22.1, V10 R1.54.0 through V10 R1.54.1, and V10 R1.42.6 and earlier could allow an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands within the same privilege level as the web access process.
CVSS Score: 7.3 (HIGH)
CWE: CWE-77
References: https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2025-0001
CVE: CVE-2020-36085
Published: 2025-02-06
Description: Stored Cross Site Scripting(XSS) vulnerability in Egavilan Media Resumes Management and Job Application Website 1.0 allows remote attackers to inject arbitrary code via First and Last Name in Apply For This Job Form.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://github.com/manitorpotterk/CVE/blob/main/Egavilan%20Media%20XSS.md
CVE: CVE-2024-25883
Published: 2025-02-06
Description: The mstatus register in RSD commit 3d13a updates incorrectly, leading to processing errors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-682
References: https://github.com/rsd-devel/rsd/issues/75
CVE: CVE-2024-48589
Published: 2025-02-06
Description: Cross Site Scripting vulnerability in Gilnei Moraes phpABook v.0.9 allows a remote attacker to execute arbitrary code via the rol parameter in index.php
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://github.com/Exek1el/CVE-2024-48589
CVE: CVE-2024-53586
Published: 2025-02-06
Description: An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a crafted HTTP request. By injecting traversal payloads into the parameter, attackers can manipulate file paths and gain unauthorized access to sensitive files, potentially exposing data outside the intended directory.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://packetstorm.news/files/id/189017
CVE: CVE-2024-54909
Published: 2025-02-06
Description: A vulnerability has been identified in GoldPanKit eva-server v4.1.0. It affects the path parameter of the /api/resource/local/download endpoint, where manipulation of this parameter can lead to arbitrary file download.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://github.com/goldpankit/eva-springboot2/issues/2
CVE: CVE-2024-55241
Published: 2025-02-06
Description: An issue in deep-diver LLM-As-Chatbot before commit 99c2c03 allows a remote attacker to execute arbitrary code via the modelsbyom.py component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://diamond-bath-fd4.notion.site/Remote-Code-Execution-vulnerability-in-load_model-in-deep-diver-LLM-As-Chatbot-14d4a5b4bb28806795e8e5e8ef9ae27b