deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-20323
Published: 2024-07-17
Description: A vulnerability in Cisco Intelligent Node (iNode) Software could allow an unauthenticated, remote attacker to hijack the TLS connection between Cisco iNode Manager and associated intelligent nodes and send arbitrary traffic to an affected device.
 This vulnerability is due to the presence of hard-coded cryptographic material. An attacker in a man-in-the-middle position between Cisco iNode Manager and associated deployed nodes could exploit this vulnerability by using the static cryptographic key to generate a trusted certificate and impersonate an affected device. A successful exploit could allow the attacker to read data that is meant for a legitimate device, modify the startup configuration of an associated node, and, consequently, cause a denial of service (DoS) condition for downstream devices that are connected to the affected node.
CVSS Score: 7.5 (HIGH)
CWE: CWE-321
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-inode-static-key-VUVCeynn; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-inode-static-key-VUVCeynn
CVE: CVE-2024-20395
Published: 2024-07-17
Description: A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attacker to gain access to sensitive session information.
 This vulnerability is due to insecure transmission of requests to backend services when the app accesses embedded media, such as images. An attacker could exploit this vulnerability by sending a message with embedded media that is stored on a messaging server to a targeted user. If the attacker can observe transmitted traffic in a privileged network position, a successful exploit could allow the attacker to capture session token information from insecurely transmitted requests and possibly reuse the captured session information to take further actions as the targeted user.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-523
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-app-ZjNm8X8j; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-app-ZjNm8X8j
CVE: CVE-2024-20396
Published: 2024-07-17
Description: A vulnerability in the protocol handlers of Cisco Webex App could allow an unauthenticated, remote attacker to gain access to sensitive information.
 This vulnerability exists because the affected application does not safely handle file protocol handlers. An attacker could exploit this vulnerability by persuading a user to follow a link that is designed to cause the application to send requests. If the attacker can observe transmitted traffic in a privileged network position, a successful exploit could allow the attacker to capture sensitive information, including credential information, from the requests.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-app-ZjNm8X8j; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-app-ZjNm8X8j
CVE: CVE-2024-20400
Published: 2024-07-17
Description: A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.
 This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a malicious web page.
 Note: Cisco Expressway Series refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-601
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-redirect-KJsFuXgj; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-redirect-KJsFuXgj
CVE: CVE-2024-20401
Published: 2024-07-17
Description: A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to overwrite arbitrary files on the underlying operating system.
 This vulnerability is due to improper handling of email attachments when file analysis and content filters are enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to replace any file on the underlying file system. The attacker could then perform any of the following actions: add users with root privileges, modify the device configuration, execute arbitrary code, or cause a permanent denial of service (DoS) condition on the affected device.
 Note: Manual intervention is required to recover from the DoS condition. Customers are advised to contact the Cisco Technical Assistance Center (TAC) to help recover a device in this condition.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-36
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-bGG2UsjH; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-bGG2UsjH
CVE: CVE-2024-20416
Published: 2024-07-17
Description: A vulnerability in the upload module of Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device.
 This vulnerability is due to insufficient boundary checks when processing specific HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system of the device.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-130
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv34x-rce-7pqFU2e; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv34x-rce-7pqFU2e
CVE: CVE-2024-20419
Published: 2024-07-17
Description: A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users.
 This vulnerability is due to improper implementation of the password-change process. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow an attacker to access the web UI or API with the privileges of the compromised user.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-620
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-auth-sLw3uhUy; https://www.secpod.com/blog/critical-flaw-in-ciscos-secure-email-gateways-allows-attackers-to-control-the-device-completely/; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-auth-sLw3uhUy
CVE: CVE-2024-20429
Published: 2024-07-17
Description: A vulnerability in the web-based management interface of Cisco AsyncOS for Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary system commands on an affected device.
 This vulnerability is due to insufficient input validation in certain portions of the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges. To successfully exploit this vulnerability, an attacker would need at least valid Operator credentials.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-74
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-priv-esc-ssti-xNO2EOGZ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-priv-esc-ssti-xNO2EOGZ
CVE: CVE-2024-20435
Published: 2024-07-17
Description: A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root.
 This vulnerability is due to insufficient validation of user-supplied input for the CLI. An attacker could exploit this vulnerability by authenticating to the system and executing a crafted command on the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root. To successfully exploit this vulnerability, an attacker would need at least guest credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-250
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-swa-priv-esc-7uHpZsCC; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-swa-priv-esc-7uHpZsCC
CVE: CVE-2024-38446
Published: 2024-07-17
Description: NATO NCI ANET 3.4.1 mishandles report ownership. A user can create a report and, despite the restrictions imposed by the UI, change the author of that report to an arbitrary user (without their consent or knowledge) via a modified UUID in a POST request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://www.linkedin.com/pulse/idors-ncia-anet-v341-visionspace-technologies-hepxe; https://www.linkedin.com/pulse/idors-ncia-anet-v341-visionspace-technologies-hepxe
CVE: CVE-2024-38870
Published: 2024-07-17
Description: Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and OpManager Enterprise Edition versions before 128104, from 128151 before 128238, from 128247 before 128250 are vulnerable to Stored XSS vulnerability in reports module.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://www.manageengine.com/network-monitoring/security-updates/cve-2024-38870.html; https://www.manageengine.com/network-monitoring/security-updates/cve-2024-38870.html
CVE: CVE-2023-42010
Published: 2024-07-17
Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 could disclose sensitive information in the HTTP response using man in the middle techniques.  IBM X-Force ID:  265507.
CVSS Score: 3.1 (LOW)
CWE: CWE-497
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/265507; https://www.ibm.com/support/pages/node/7160433; https://exchange.xforce.ibmcloud.com/vulnerabilities/265507
CVE: CVE-2024-38447
Published: 2024-07-17
Description: NATO NCI ANET 3.4.1 allows Insecure Direct Object Reference via a modified ID field in a request for a private draft report (that belongs to an arbitrary user).
CVSS Score: 8.1 (HIGH)
CWE: CWE-639
References: https://www.linkedin.com/pulse/idors-ncia-anet-v341-visionspace-technologies-hepxe; https://www.linkedin.com/pulse/idors-ncia-anet-v341-visionspace-technologies-hepxe
CVE: CVE-2024-40633
Published: 2024-07-17
Description: Sylius is an Open Source eCommerce Framework on Symfony. A security vulnerability was discovered in the `/api/v2/shop/adjustments/{id}` endpoint, which retrieves order adjustments based on incremental integer IDs. The vulnerability allows an attacker to enumerate valid adjustment IDs and retrieve order tokens. Using these tokens, an attacker can access guest customer order details - sensitive guest customer information.  The issue is fixed in versions: 1.12.19, 1.13.4 and above. The `/api/v2/shop/adjustments/{id}` will always return `404` status. Users are advised to upgrade. Users unable to upgrade may alter their config to mitigate this issue. Please see the linked GHSA for details.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/Sylius/Sylius/security/advisories/GHSA-55rf-8q29-4g43; https://github.com/Sylius/Sylius/security/advisories/GHSA-55rf-8q29-4g43
CVE: CVE-2024-40636
Published: 2024-07-17
Description: Steeltoe is an open source project that provides a collection of libraries that helps users build production-grade cloud-native applications using externalized configuration, service discovery, distributed tracing, application management, and more. When utilizing multiple Eureka server service URLs with basic auth and encountering an issue with fetching the service registry, an error is logged with the Eureka server service URLs but only the first URL is masked. The code in question is  `_logger.LogError(e, "FetchRegistry Failed for Eureka service urls: {EurekaServerServiceUrls}", new Uri(ClientConfig.EurekaServerServiceUrls).ToMaskedString());` in the `DiscoveryClient.cs` file which may leak credentials into logs. This issue has been addressed in version 3.2.8 of the Steeltoe.Discovery.Eureka nuget package.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-532
References: https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-vmcp-66r5-3pcp; https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-vmcp-66r5-3pcp
CVE: CVE-2024-40639
Published: 2024-07-17
Description: Rejected reason: This CVE is a duplicate of another CVE.
CVE: CVE-2024-40640
Published: 2024-07-17
Description: vodozemac is an open source implementation of Olm and Megolm in pure Rust.  Versions before 0.7.0 of vodozemac use a non-constant time base64 implementation for importing key material for Megolm group sessions and `PkDecryption` Ed25519 secret keys. This flaw might allow an attacker to infer some information about the secret key material through a side-channel attack. The use of a non-constant time base64 implementation might allow an attacker to observe timing variations in the encoding and decoding operations of the secret key material. This could potentially provide insights into the underlying secret key material. The impact of this vulnerability is considered low because exploiting the attacker is required to have access to high precision timing measurements, as well as repeated access to the base64 encoding or decoding processes.  Additionally, the estimated leakage amount is bounded and low according to the referenced paper. This has been patched in commit 734b6c6948d4b2bdee3dd8b4efa591d93a61d272 which has been included in release version 0.7.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS Score: 2.9 (LOW)
CWE: CWE-208
References: https://arxiv.org/abs/2108.04600; https://github.com/matrix-org/vodozemac/commit/734b6c6948d4b2bdee3dd8b4efa591d93a61d272; https://github.com/matrix-org/vodozemac/security/advisories/GHSA-j8cm-g7r6-hfpq
CVE: CVE-2024-40641
Published: 2024-07-17
Description: Nuclei is a fast and customizable vulnerability scanner based on simple YAML based DSL.  In affected versions it a way to execute code template without -code option and signature has been discovered. Some web applications inherit from Nuclei and allow users to edit and execute workflow files. In this case, users can execute arbitrary commands. (Although, as far as I know, most web applications use -t to execute). This issue has been addressed in version 3.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.4 (HIGH)
CWE: CWE-78
References: https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-c3q9-c27p-cw9h; https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-c3q9-c27p-cw9h
CVE: CVE-2024-28796
Published: 2024-07-17
Description: IBM ClearQuest (CQ) 9.1 through 9.1.0.6 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  286833.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/286833; https://www.ibm.com/support/pages/node/7160390; https://exchange.xforce.ibmcloud.com/vulnerabilities/286833
CVE: CVE-2024-40420
Published: 2024-07-17
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2024-36694. Reason: This record is a duplicate of CVE-2024-36694. Notes: All CVE users should reference CVE-2024-36694 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2024-29885
Published: 2024-07-17
Description: silverstripe/reports is an API for creating backend reports in the Silverstripe Framework. In affected versions reports can be accessed by their direct URL by any user who has access to view the reports admin section, even if the `canView()` method for that report returns `false`. This issue has been addressed in version 5.2.3. All users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/silverstripe/silverstripe-reports/commit/0351106c18ad4246d983b5f4e082c09c382121f4; https://github.com/silverstripe/silverstripe-reports/security/advisories/GHSA-89q6-98xx-4ffw; https://www.silverstripe.org/download/security-releases/cve-2024-29885
CVE: CVE-2024-32981
Published: 2024-07-17
Description: Silverstripe framework is the PHP framework forming the base for the Silverstripe CMS. In affected versions a bad actor with access to edit content in the CMS could add send a specifically crafted encoded payload to the server, which could be used to inject a JavaScript payload on the front end of the site. The payload would be sanitised on the client-side, but server-side sanitisation doesn't catch it. The server-side sanitisation logic has been updated to sanitise against this type of attack in version 5.2.16. All users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/silverstripe/silverstripe-framework/commit/b8d20dc9d531550e06fd7da7a0eafa551922e2e1; https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-chx7-9x8h-r5mg; https://www.silverstripe.org/download/security-releases/cve-2024-32981
CVE: CVE-2024-39124
Published: 2024-07-17
Description: In Roundup before 2.4.0, classhelpers (_generic.help.html) allow XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.roundup-tracker.org/; https://www.roundup-tracker.org/docs/security.html#cve-announcements; https://www.roundup-tracker.org/
CVE: CVE-2024-39125
Published: 2024-07-17
Description: Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.roundup-tracker.org; https://www.roundup-tracker.org/docs/security.html#cve-announcements; https://www.roundup-tracker.org
CVE: CVE-2024-39126
Published: 2024-07-17
Description: Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, and SVG documents.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.roundup-tracker.org; https://www.roundup-tracker.org/docs/security.html#cve-announcements; https://www.roundup-tracker.org
CVE: CVE-2024-40119
Published: 2024-07-17
Description: Nepstech Wifi Router xpon (terminal) model NTPL-Xpon1GFEVN v.1.0 Firmware V2.0.1 contains a Cross-Site Request Forgery (CSRF) vulnerability in the password change function, which allows remote attackers to change the admin password without the user's consent, leading to a potential account takeover.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/sudo-subho/nepstech-xpon-router-CVE-2024-40119; https://github.com/sudo-subho/nepstech-xpon-router-CVE-2024-40119
CVE: CVE-2024-40402
Published: 2024-07-17
Description: A SQL injection vulnerability was found in 'ajax.php' of Sourcecodester Simple Library Management System 1.0. This vulnerability stems from insufficient user input validation of the 'username' parameter, allowing attackers to inject malicious SQL queries.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/CveSecLook/cve/issues/49; https://github.com/CveSecLook/cve/issues/49
CVE: CVE-2023-43971
Published: 2024-07-17
Description: Cross Site Scripting vulnerability in ACG-faka v1.1.7 allows a remote attacker to execute arbitrary code via the encode parameter in Index.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://gist.github.com/N0boy-0/7251856fed517eb6358d8cae03099b7b; https://github.com/lizhipay/acg-faka/issues/72; https://gist.github.com/N0boy-0/7251856fed517eb6358d8cae03099b7b
CVE: CVE-2024-40492
Published: 2024-07-17
Description: Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute arbitrary code via the setname function.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://github.com/minendie/POC_CVE-2024-40492; https://github.com/minendie/POC_CVE-2024-40492
CVE: CVE-2024-39678
Published: 2024-07-18
Description: Cooked is a recipe plugin for WordPress. The Cooked plugin is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1.7.15.4 due to missing or incorrect nonce validation on the AJAX action handler. This vulnerability could allow an attacker to trick users into performing an action they didn't intend to perform under their current authentication. This issue has been addressed in release version 1.8.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://github.com/XjSv/Cooked/security/advisories/GHSA-pp3h-ghxf-r9pc; https://github.com/XjSv/Cooked/security/advisories/GHSA-pp3h-ghxf-r9pc
CVE: CVE-2024-39679
Published: 2024-07-18
Description: Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1.7.15.4 due to missing or incorrect nonce validation on the AJAX action handler. This vulnerability could allow an attacker to trick users into performing an action they didn't intend to perform under their current authentication. This issue has been addressed in release version 1.8.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://github.com/XjSv/Cooked/security/advisories/GHSA-2jh3-9939-c4rc; https://github.com/XjSv/Cooked/security/advisories/GHSA-2jh3-9939-c4rc
CVE: CVE-2024-39680
Published: 2024-07-18
Description: Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1.7.15.4 due to missing or incorrect nonce validation on the AJAX action handler. This vulnerability could allow an attacker to trick users into performing an action they didn't intend to perform under their current authentication. This issue has been addressed in release version 1.8.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://github.com/XjSv/Cooked/security/advisories/GHSA-f2mc-hcp9-6xgr; https://github.com/XjSv/Cooked/security/advisories/GHSA-f2mc-hcp9-6xgr
CVE: CVE-2024-39681
Published: 2024-07-18
Description: Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1.7.15.4 due to missing or incorrect nonce validation on the AJAX action handler. This vulnerability could allow an attacker to trick users into performing an action they didn't intend to perform under their current authentication. This issue has been addressed in release version 1.8.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://github.com/XjSv/Cooked/security/advisories/GHSA-q7p9-2x5h-vxm7; https://github.com/XjSv/Cooked/security/advisories/GHSA-q7p9-2x5h-vxm7