deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-42151
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable

Test case dummy_st_ops/dummy_init_ret_value passes NULL as the first
parameter of the test_1() function. Mark this parameter as nullable to
make verifier aware of such possibility.
Otherwise, NULL check in the test_1() code:

      SEC("struct_ops/test_1")
      int BPF_PROG(test_1, struct bpf_dummy_ops_state *state)
      {
            if (!state)
                    return ...;

            ... access state ...
      }

Might be removed by verifier, thus triggering NULL pointer dereference
under certain conditions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/1479eaff1f16983d8fda7c5a08a586c21891087d; https://git.kernel.org/stable/c/7f79097b0de97a486b137b750d7dd7b20b519d23; https://git.kernel.org/stable/c/1479eaff1f16983d8fda7c5a08a586c21891087d
CVE: CVE-2024-42152
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

nvmet: fix a possible leak when destroy a ctrl during qp establishment

In nvmet_sq_destroy we capture sq->ctrl early and if it is non-NULL we
know that a ctrl was allocated (in the admin connect request handler)
and we need to release pending AERs, clear ctrl->sqs and sq->ctrl
(for nvme-loop primarily), and drop the final reference on the ctrl.

However, a small window is possible where nvmet_sq_destroy starts (as
a result of the client giving up and disconnecting) concurrently with
the nvme admin connect cmd (which may be in an early stage). But *before*
kill_and_confirm of sq->ref (i.e. the admin connect managed to get an sq
live reference). In this case, sq->ctrl was allocated however after it was
captured in a local variable in nvmet_sq_destroy.
This prevented the final reference drop on the ctrl.

Solve this by re-capturing the sq->ctrl after all inflight request has
completed, where for sure sq->ctrl reference is final, and move forward
based on that.

This issue was observed in an environment with many hosts connecting
multiple ctrls simoutanuosly, creating a delay in allocating a ctrl
leading up to this race window.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/2f3c22b1d3d7e[PII_REDACTED]4797a651998c141fa; https://git.kernel.org/stable/c/5502c1f1d0d7472706cc1f201aecf1c935d302d1; https://git.kernel.org/stable/c/818004f2a380420c19872171be716174d4985e33
CVE: CVE-2024-42153
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr

When del_timer_sync() is called in an interrupt context it throws a warning
because of potential deadlock. The timer is used only to exit from
wait_for_completion() after a timeout so replacing the call with
wait_for_completion_timeout() allows to remove the problematic timer and
its related functions altogether.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-667
References: https://git.kernel.org/stable/c/27cd3873fa76ebeb9f948baae40cb9a6d8692289; https://git.kernel.org/stable/c/2849a1b747cf37aa5b684527104d3a53f1e296d2; https://git.kernel.org/stable/c/3503372d0bf7b324ec0bd6b[PII_REDACTED]1426176
CVE: CVE-2024-42154
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp_metrics: validate source addr length

I don't see anything checking that TCP_METRICS_ATTR_SADDR_IPV4
is at least 4 bytes long, and the policy doesn't have an entry
for this attribute at all (neither does it for IPv6 but v6 is
manually validated).
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-754
References: https://git.kernel.org/stable/c/19d997b59fa1fd7a02e770ee0881c0652b9c32c9; https://git.kernel.org/stable/c/2a2e79dbe2236a1289412d2044994f7ab419b44c; https://git.kernel.org/stable/c/31f03bb04146c1c6df6c03e9f45401f5f5a985d3
CVE: CVE-2024-42155
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

s390/pkey: Wipe copies of protected- and secure-keys

Although the clear-key of neither protected- nor secure-keys is
accessible, this key material should only be visible to the calling
process. So wipe all copies of protected- or secure-keys from stack,
even in case of an error.
CVSS Score: 1.9 (LOW)
References: https://git.kernel.org/stable/c/c746f7ced4ad88ee48d0b6c92710e[PII_REDACTED]b; https://git.kernel.org/stable/c/f2ebdadd85af4f4d0cae1e5d009c70eccc78c207; https://git.kernel.org/stable/c/c746f7ced4ad88ee48d0b6c92710e[PII_REDACTED]b
CVE: CVE-2024-42156
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

s390/pkey: Wipe copies of clear-key structures on failure

Wipe all sensitive data from stack for all IOCTLs, which convert a
clear-key into a protected- or secure-key.
CVSS Score: 4.1 (MEDIUM)
References: https://git.kernel.org/stable/c/7f6243edd901b75aaece326c90a1cc0dcb60cc3d; https://git.kernel.org/stable/c/a891938947f4427f98cb1ce54f27223501efe750; https://git.kernel.org/stable/c/d65d76a44ffe74c73298ada25b0f[PII_REDACTED]73
CVE: CVE-2024-42157
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

s390/pkey: Wipe sensitive data on failure

Wipe sensitive data from stack also if the copy_to_user() fails.
CVSS Score: 4.1 (MEDIUM)
References: https://git.kernel.org/stable/c/1d8c270de5eb74245d72325d285894a577a945d9; https://git.kernel.org/stable/c/4889f117755b2f18c23045a0f57977f3ec130581; https://git.kernel.org/stable/c/6e2e374403bf73140d0efc9541cb1b3bea55ac02
CVE: CVE-2024-42158
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings

Replace memzero_explicit() and kfree() with kfree_sensitive() to fix
warnings reported by Coccinelle:

WARNING opportunity for kfree_sensitive/kvfree_sensitive (line 1506)
WARNING opportunity for kfree_sensitive/kvfree_sensitive (line 1643)
WARNING opportunity for kfree_sensitive/kvfree_sensitive (line 1770)
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-669
References: https://git.kernel.org/stable/c/22e6824622e8a8889df0f8fc4ed5aea0e702a694; https://git.kernel.org/stable/c/62151a0acde90823bdfa991d598c85cf4b1d387d; https://git.kernel.org/stable/c/22e6824622e8a8889df0f8fc4ed5aea0e702a694
CVE: CVE-2024-42159
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

scsi: mpi3mr: Sanitise num_phys

Information is stored in mr_sas_port->phy_mask, values larger then size of
this field shouldn't be allowed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-754
References: https://git.kernel.org/stable/c/3668651def2c1622904e58b0280ee93121f2b10b; https://git.kernel.org/stable/c/586b41060113ae43032ec6c4a16d518cef5da6e0; https://git.kernel.org/stable/c/b869ec89d2ee923d46608b76e54c006680c9b4df
CVE: CVE-2024-42160
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

f2fs: check validation of fault attrs in f2fs_build_fault_attr()

- It missed to check validation of fault attrs in parse_options(),
let's fix to add check condition in f2fs_build_fault_attr().
- Use f2fs_build_fault_attr() in __sbi_store() to clean up code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-754
References: https://git.kernel.org/stable/c/44958ca9e400f57bd[PII_REDACTED]ffc350fcee61e; https://git.kernel.org/stable/c/4ed886b187f47447ad559619c48c086f432d2b77; https://git.kernel.org/stable/c/6e5b601706ce05d94338cad598736d96bb8096c8
CVE: CVE-2024-42161
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD

[Changes from V1:
 - Use a default branch in the switch statement to initialize `val'.]

GCC warns that `val' may be used uninitialized in the
BPF_CRE_READ_BITFIELD macro, defined in bpf_core_read.h as:

	[...]
	unsigned long long val;						      \
	[...]								      \
	switch (__CORE_RELO(s, field, BYTE_SIZE)) {			      \
	case 1: val = *(const unsigned char *)p; break;			      \
	case 2: val = *(const unsigned short *)p; break;		      \
	case 4: val = *(const unsigned int *)p; break;			      \
	case 8: val = *(const unsigned long long *)p; break;		      \
        }       							      \
	[...]
	val;								      \
	}								      \

This patch adds a default entry in the switch statement that sets
`val' to zero in order to avoid the warning, and random values to be
used in case __builtin_preserve_field_info returns unexpected values
for BPF_FIELD_BYTE_SIZE.

Tested in bpf-next master.
No regressions.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-908
References: https://git.kernel.org/stable/c/009367099eb61a4fc2af44d4eb06b6b4de7de6db; https://git.kernel.org/stable/c/3364c2ed1c241989847f19cf83e3db903ce689e3; https://git.kernel.org/stable/c/7e5471b5efebc30dd0bc035cda86693a5c73d45f
CVE: CVE-2024-42162
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

gve: Account for stopped queues when reading NIC stats

We now account for the fact that the NIC might send us stats for a
subset of queues. Without this change, gve_get_ethtool_stats might make
an invalid access on the priv->stats_report->stats array.
CVSS Score: 7.0 (HIGH)
CWE: CWE-754
References: https://git.kernel.org/stable/c/32675d828c8a392e20d5b42375ed112c407e4b62; https://git.kernel.org/stable/c/af9bcf910b1f86244f39e15e701b2dc564b469a6; https://git.kernel.org/stable/c/32675d828c8a392e20d5b42375ed112c407e4b62
CVE: CVE-2024-42223
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

media: dvb-frontends: tda10048: Fix integer overflow

state->xtal_hz can be up to 16M, so it can overflow a 32 bit integer
when multiplied by pll_mfactor.

Create a new 64 bit variable to hold the calculations.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://git.kernel.org/stable/c/1121d8a5c6ed6b8fad492e43b63b386cb6a3a9d8; https://git.kernel.org/stable/c/1663e2474e4d777187d749a5c90ae83232db32bd; https://git.kernel.org/stable/c/1aa1329a67cc214c3b7bd2a14d1301a795760b07
CVE: CVE-2024-42224
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

net: dsa: mv88e6xxx: Correct check for empty list

Since commit a3c53be55c95 ("net: dsa: mv88e6xxx: Support multiple MDIO
busses") mv88e6xxx_default_mdio_bus() has checked that the
return value of list_first_entry() is non-NULL.

This appears to be intended to guard against the list chip->mdios being
empty.  However, it is not the correct check as the implementation of
list_first_entry is not designed to return NULL for empty lists.

Instead, use list_first_entry_or_null() which does return NULL if the
list is empty.

Flagged by Smatch.
Compile tested only.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-754
References: https://git.kernel.org/stable/c/2a2fe25a103cef73cde356e6d09da10f607e93f5; https://git.kernel.org/stable/c/3bf8d70e1455f87856640c3433b3660a31001618; https://git.kernel.org/stable/c/3f25b5f[PII_REDACTED]92a44b771f39f772190c1d
CVE: CVE-2024-42225
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: replace skb_put with skb_put_zero

Avoid potentially reusing uninitialized data
CVSS Score: 7.5 (HIGH)
CWE: CWE-908
References: https://git.kernel.org/stable/c/22ea2a7f0b64d[PII_REDACTED]14a4496520fb33657; https://git.kernel.org/stable/c/64f86337ccfe77fe3be5a9356b0dabde23fbb074; https://git.kernel.org/stable/c/7f819a2f4fbc510e088b49c79addcf[PII_REDACTED]
CVE: CVE-2024-42226
Published: 2024-07-30
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-42227
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix overlapping copy within dml_core_mode_programming

[WHY]
&mode_lib->mp.Watermark and &locals->Watermark are
the same address. memcpy may lead to unexpected behavior.

[HOW]
memmove should be used.
CVSS Score: 4.7 (MEDIUM)
References: https://git.kernel.org/stable/c/9342da15f2491d8600eca89c8e0da08876fb969b; https://git.kernel.org/stable/c/f1fd8a0a54e6d23a6d16ee29159f247862460fd1; https://git.kernel.org/stable/c/9342da15f2491d8600eca89c8e0da08876fb969b
CVE: CVE-2024-42228
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

Initialize the size before calling amdgpu_vce_cs_reloc, such as case 0x03000001.
V2: To really improve the handling we would actually
   need to have a separate value of 0xffffffff.(Christian)
CVSS Score: 7.0 (HIGH)
CWE: CWE-908
References: https://git.kernel.org/stable/c/3b[PII_REDACTED]37dcccb50cbd98ec6f8d2a04fc46; https://git.kernel.org/stable/c/855ae72c20310e5402b2317fc537d911e87537ef; https://git.kernel.org/stable/c/88a9a467c548d0b3c7761b4fd54a68e70f9c0944
CVE: CVE-2024-42229
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

crypto: aead,cipher - zeroize key buffer after use

I.G 9.7.B for FIPS 140-3 specifies that variables temporarily holding
cryptographic information should be zeroized once they are no longer
needed. Accomplish this by using kfree_sensitive for buffers that
previously held the private key.
CVSS Score: 4.1 (MEDIUM)
References: https://git.kernel.org/stable/c/23e4099bdc3c8381992f9eb975c79196d6755210; https://git.kernel.org/stable/c/28c8d274848feba552e95c5c2a7e3cfe8f15c534; https://git.kernel.org/stable/c/71dd428615375e36523f4d4f7685ddd54113646d
CVE: CVE-2024-42230
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

powerpc/pseries: Fix scv instruction crash with kexec

kexec on pseries disables AIL (reloc_on_exc), required for scv
instruction support, before other CPUs have been shut down. This means
they can execute scv instructions after AIL is disabled, which causes an
interrupt at an unexpected entry location that crashes the kernel.

Change the kexec sequence to disable AIL after other CPUs have been
brought down.

As a refresher, the real-mode scv interrupt vector is 0x17000, and the
fixed-location head code probably couldn't easily deal with implementing
such high addresses so it was just decided not to support that interrupt
at all.
CVSS Score: 4.4 (MEDIUM)
References: https://git.kernel.org/stable/c/21a741eb75f80397e5f7d3739e24d7d75e619011; https://git.kernel.org/stable/c/8c[PII_REDACTED]ce37e59b2745fc481c6713fae4f3; https://git.kernel.org/stable/c/c550679d604798d9fed8a5b2bb5693448a25407c
CVE: CVE-2024-42231
Published: 2024-07-30
Description: In the Linux kernel, the following vulnerability has been resolved:

btrfs: zoned: fix calc_available_free_space() for zoned mode

calc_available_free_space() returns the total size of metadata (or
system) block groups, which can be allocated from unallocated disk
space. The logic is wrong on zoned mode in two places.

First, the calculation of data_chunk_size is wrong. We always allocate
one zone as one chunk, and no partial allocation of a zone. So, we
should use zone_size (= data_sinfo->chunk_size) as it is.

Second, the result "avail" may not be zone aligned. Since we always
allocate one zone as one chunk on zoned mode, returning non-zone size
aligned bytes will result in less pressure on the async metadata reclaim
process.

This is serious for the nearly full state with a large zone size device.
Allowing over-commit too much will result in less async reclaim work and
end up in ENOSPC. We can align down to the zone size to avoid that.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-682
References: https://git.kernel.org/stable/c/64d2c847ba380e07b9072d65a50aa6469d2aa43f; https://git.kernel.org/stable/c/8548903b1999bba02a2b894ad750ab8eb1f40307; https://git.kernel.org/stable/c/64d2c847ba380e07b9072d65a50aa6469d2aa43f
CVE: CVE-2024-7223
Published: 2024-07-30
Description: A vulnerability has been found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /view_model.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272803.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://gist.github.com/topsky979/4c[PII_REDACTED]9e73fe37007ed92cc1a7; https://vuldb.com/?ctiid.272803; https://vuldb.com/?id.272803
CVE: CVE-2024-7224
Published: 2024-07-30
Description: A vulnerability was found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /lot_details.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272804.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://gist.github.com/topsky979/76bc2c8ce4871ad8bb60c52e47c4fb5b; https://vuldb.com/?ctiid.272804; https://vuldb.com/?id.272804
CVE: CVE-2023-48396
Published: 2024-07-30
Description: Web Authentication vulnerability in Apache SeaTunnel. Since the jwt key is hardcoded in the application, an attacker can forge
any token to log in any user.

Attacker can get secret key in /seatunnel-server/seatunnel-app/src/main/resources/application.yml and then create a token.
This issue affects Apache SeaTunnel: 1.0.0.

Users are recommended to upgrade to version 1.0.1, which fixes the issue.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-290
References: http://www.openwall.com/lists/oss-security/2024/07/30/1; https://lists.apache.org/thread/1tdxfjksx0vb9gtyt77wlr6rdcy1qwmw; http://www.openwall.com/lists/oss-security/2024/07/30/1
CVE: CVE-2024-38429
Published: 2024-07-30
Description: Matrix Tafnit v8

 -  CWE-552: Files or Directories Accessible to External Parties
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2024-38430
Published: 2024-07-30
Description: Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2024-38431
Published: 2024-07-30
Description: Matrix Tafnit v8

 - 

CWE-204: Observable Response Discrepancy
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204, CWE-203
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2024-38432
Published: 2024-07-30
Description: Matrix Tafnit v8

 - 



CWE-646: Reliance on File Name or Extension of Externally-Supplied File
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-646, CWE-345
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2024-40895
Published: 2024-07-30
Description: FFRI AMC versions 3.4.0 to 3.5.3 and some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3 allow a remote unauthenticated attacker to execute arbitrary OS commands when certain conditions are met in an environment where the notification program setting is enabled and the executable file path is set to a batch file (.bat) or command file (.cmd) extension.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-78
References: https://jvn.jp/en/jp/JVN26734798/; https://www.ffri.jp/assets/files/other_docs/20240729.pdf; https://www.skyseaclientview.net/news/240729_01/
CVE: CVE-2024-41141
Published: 2024-07-30
Description: Stored cross-site scripting vulnerability exists in EC-CUBE Web API Plugin. When there are multiple users using OAuth Management feature and one of them inputs some crafted value on the OAuth Management page, an arbitrary script may be executed on the web browser of the other user who accessed the management page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN26225832/; https://www.ec-cube.net/info/weakness/20240701/web_api_plugin.php; https://jvn.jp/en/jp/JVN26225832/
CVE: CVE-2024-41693
Published: 2024-07-30
Description: Mashov - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2024-41694
Published: 2024-07-30
Description: Cybonet - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2024-41695
Published: 2024-07-30
Description: Cybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2024-41696
Published: 2024-07-30
Description: Priority 

PRI WEB Portal Add-On for Priority ERP on prem

- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2024-41924
Published: 2024-07-30
Description: Acceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4 series. If this vulnerability is exploited, an attacker who obtained the administrative privilege may install an arbitrary PHP package. If the obsolete versions of PHP packages are installed, the product may be affected by some known vulnerabilities.
CVSS Score: 7.2 (HIGH)
CWE: CWE-349
References: https://jvn.jp/en/jp/JVN48324254/; https://www.ec-cube.net/info/weakness/20240701/index.php; https://jvn.jp/en/jp/JVN48324254/
CVE: CVE-2024-7225
Published: 2024-07-30
Description: A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /Script/admin/core/update_policy of the component Edit Insurance Policy Page. The manipulation of the argument pname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272805 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/Xu-Mingming/cve/blob/main/xss2.md; https://vuldb.com/?ctiid.272805; https://vuldb.com/?id.272805
CVE: CVE-2024-7226
Published: 2024-07-30
Description: A vulnerability was found in SourceCodester Medicine Tracker System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /classes/Users.php?f=save_user of the component Password Change Handler. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-272806 is the identifier assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/Xu-Mingming/cve/blob/main/CSRF2.md; https://vuldb.com/?ctiid.272806; https://vuldb.com/?id.272806
CVE: CVE-2024-41701
Published: 2024-07-30
Description: AccuPOS - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2024-41702
Published: 2024-07-30
Description: SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories