deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-34675
Published: 2024-11-06
Description: Improper access control in Dex Mode prior to SMR Nov-2024 Release 1 allows physical attackers to temporarily access to unlocked screen.
CVSS Score: 2.4 (LOW)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE: CVE-2024-34676
Published: 2024-11-06
Description: Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption. User interaction is required for triggering this vulnerability.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE: CVE-2024-34677
Published: 2024-11-06
Description: Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious apps appear as legitimate.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-922
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE: CVE-2024-34678
Published: 2024-11-06
Description: Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE: CVE-2024-34679
Published: 2024-11-06
Description: Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-276
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE: CVE-2024-34680
Published: 2024-11-06
Description: Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information.
CVSS Score: 4.0 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE: CVE-2024-34681
Published: 2024-11-06
Description: Improper input validation in BluetoothAdapter prior to SMR Nov-2024 Release 1 allows local attackers to cause local permanent denial of service on Galaxy Watch.
CVSS Score: 6.6 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE: CVE-2024-34682
Published: 2024-11-06
Description: Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi password in Maintenance Mode.
CVSS Score: 2.4 (LOW)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE: CVE-2024-49401
Published: 2024-11-06
Description: Improper input validation in Settings Suggestions prior to SMR Nov-2024 Release 1 allows local attackers to launch privileged activities.
CVSS Score: 5.1 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE: CVE-2024-49402
Published: 2024-11-06
Description: Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across multiple user profiles.
CVSS Score: 4.6 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE: CVE-2024-49403
Published: 2024-11-06
Description: Improper access control in Samsung Voice Recorder prior to version 21.5.40.37 allows physical attackers to access recording files on the lock screen.
CVSS Score: 4.6 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=11
CVE: CVE-2024-49404
Published: 2024-11-06
Description: Improper Access Control in Samsung Video Player prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows physical attackers to access video file of other users.
CVSS Score: 5.5 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=11
CVE: CVE-2024-49405
Published: 2024-11-06
Description: Improper authentication in Private Info in Samsung Pass in prior to version 4.4.04.7 allows physical attackers to access sensitive information in a specific scenario.
CVSS Score: 5.3 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=11
CVE: CVE-2024-49406
Published: 2024-11-06
Description: Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privilege is required for triggering this vulnerability.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-354
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=11
CVE: CVE-2024-49407
Published: 2024-11-06
Description: Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multiple user profiles.
CVSS Score: 4.6 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=11
CVE: CVE-2024-49408
Published: 2024-11-06
Description: Out-of-bounds write in usb driver prior to Firmware update Sep-2024 Release on Galaxy S24 allows local attackers to write out-of-bounds memory. System privilege is required for triggering this vulnerability.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=09
CVE: CVE-2024-49409
Published: 2024-11-06
Description: Out-of-bounds write in Battery Full Capacity node prior to Firmware update Sep-2024 Release on Galaxy S24 allows local attackers to write out-of-bounds memory. System privilege is required for triggering this vulnerability.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=09
CVE: CVE-2024-7879
Published: 2024-11-06
Description: The WP ULike  WordPress plugin before 4.7.5 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/5ad1c40a-5e13-40b6-8652-c23a1f39abc2/
CVE: CVE-2024-9934
Published: 2024-11-06
Description: The Wp-ImageZoom WordPress plugin through 1.1.0 does not sanitise and escape some parameters before outputting them back in a page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/53e640a7-833e-40de-93d4-acea28aff5a5/
CVE: CVE-2024-10020
Published: 2024-11-06
Description: The Heateor Social Login WordPress plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.1.35. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthenticated attackers to log in as any existing user on the site, if they have access to the email and the user does not have an already-existing account for the service returning the token. An attacker cannot authenticate as an administrator by default, but these accounts are also at risk if authentication for administrators has explicitly been allowed via the social login.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://plugins.trac.wordpress.org/changeset/3177729/; https://www.wordfence.com/threat-intel/vulnerabilities/id/6b1d212b-75fe-4285-9c22-62b040e5a36c?source=cve
CVE: CVE-2024-10535
Published: 2024-11-06
Description: The Video Gallery for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the remove_unused_thumbnails() function in all versions up to, and including, 1.31. This makes it possible for unauthenticated attackers to delete thumbnails in the video-wc-gallery-thumb directory.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/video-wc-gallery/trunk/admin/admin-ui-setup.php#L545; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3182174%40video-wc-gallery&new=3182174%40video-wc-gallery&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/50259040-a984-42a8-8d58-cc94e349ca45?source=cve
CVE: CVE-2024-10543
Published: 2024-11-06
Description: The Tumult Hype Animations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the hypeanimations_getcontent function in all versions up to, and including, 1.9.14. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve animation information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3182537%40tumult-hype-animations&new=3182537%40tumult-hype-animations&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/7273526e-bb51-418f-9ac8-8832f2de1cd6?source=cve
CVE: CVE-2024-6626
Published: 2024-11-06
Description: The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on several functions in all versions up to, and including, 2.9.9.9. This makes it possible for unauthenticated attackers to view form submissions.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/all-contact-form-integration-for-elementor/trunk/includes/export_csv.php#L20; https://plugins.trac.wordpress.org/browser/all-contact-form-integration-for-elementor/trunk/includes/wp-ajax.php#L147; https://plugins.trac.wordpress.org/browser/all-contact-form-integration-for-elementor/trunk/includes/wp-ajax.php#L7
CVE: CVE-2024-9307
Published: 2024-11-06
Description: The mFolio Lite plugin for WordPress is vulnerable to file uploads due to a missing capability check in all versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file or upload arbitrary EXE files on the affected site's server which may make remote code execution possible if the attacker can also gain access to run the .exe file, or trick a site visitor into downloading and running the .exe file.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-434
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3195835%40mfolio-lite%2Ftrunk&old=2792814%40mfolio-lite%2Ftrunk; https://wordpress.org/plugins/mfolio-lite/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/3b4012dd-7c0a-45f1-8ada-8f9dc6867e1e?source=cve
CVE: CVE-2024-9946
Published: 2024-11-06
Description: The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.13.68. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthenticated attackers to log in as any existing user on the site, if they have access to the email and the user does not have an already-existing account for the service returning the token. An attacker cannot authenticate as an administrator by default, but these accounts are also at risk if authentication for administrators has explicitly been allowed via the social login. The vulnerability was partially patched in version 7.13.68.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://plugins.trac.wordpress.org/changeset/3172935/; https://plugins.trac.wordpress.org/changeset/3180581/; https://www.wordfence.com/threat-intel/vulnerabilities/id/c394b8b6-b7f6-4ba7-8a2b-98160cc286a8?source=cve
CVE: CVE-2024-52043
Published: 2024-11-06
Description: Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavation (user enumeration).This issue affects all released HumHub versions: through 1.16.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209, CWE-209
References: https://github.com/advisories/GHSA-3q4w-rf2j-fx5x; https://https://github.com/humhub/humhub; https://www.vulsec.org/advisories
CVE: CVE-2024-9681
Published: 2024-11-06
Description: When curl is asked to use HSTS, the expiry time for a subdomain might
overwrite a parent domain's cache entry, making it end sooner or later than
otherwise intended.

This affects curl using applications that enable HSTS and use URLs with the
insecure `HTTP://` scheme and perform transfers with hosts like
`x.example.com` as well as `example.com` where the first host is a subdomain
of the second host.

(The HSTS cache either needs to have been populated manually or there needs to
have been previous HTTPS accesses done as the cache needs to have entries for
the domains involved to trigger this problem.)

When `x.example.com` responds with `Strict-Transport-Security:` headers, this
bug can make the subdomain's expiry timeout *bleed over* and get set for the
parent domain `example.com` in curl's HSTS cache.

The result of a triggered bug is that HTTP accesses to `example.com` get
converted to HTTPS for a different period of time than what was asked for by
the origin server. If `example.com` for example stops supporting HTTPS at its
expiry time, curl might then fail to access `http://example.com` until the
(wrongly set) timeout expires. This bug can also expire the parent's entry
*earlier*, thus making curl inadvertently switch back to insecure HTTP earlier
than otherwise intended.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-697
References: https://curl.se/docs/CVE-2024-9681.html; https://curl.se/docs/CVE-2024-9681.json; https://hackerone.com/reports/2764830
CVE: CVE-2024-8614
Published: 2024-11-06
Description: The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jobsearch_wp_handle_upload() function in all versions up to, and including, 2.6.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-434
References: https://codecanyon.net/item/jobsearch-wp-job-board-wordpress-plugin/21066856; https://www.wordfence.com/threat-intel/vulnerabilities/id/7832f8fe-2b41-4cfb-a734-db4ec88d91a3?source=cve
CVE: CVE-2024-8615
Published: 2024-11-06
Description: The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jobsearch_location_load_excel_file_callback() function in all versions up to, and including, 2.6.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-434
References: https://codecanyon.net/item/jobsearch-wp-job-board-wordpress-plugin/21066856; https://www.wordfence.com/threat-intel/vulnerabilities/id/dd718d44-4921-4deb-af5a-43e5f3926914?source=cve
CVE: CVE-2024-9902
Published: 2024-11-06
Description: A flaw was found in Ansible. The ansible-core `user` module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the `user` module against the unprivileged user's home directory. If the unprivileged user has traversal permissions on the directory containing the exploited target file, they retain full control over the contents of the file as its owner.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-863
References: https://access.redhat.com/errata/RHSA-2024:10762; https://access.redhat.com/errata/RHSA-2024:8969; https://access.redhat.com/errata/RHSA-2024:9894
CVE: CVE-2024-10715
Published: 2024-11-06
Description: The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Map block in all versions up to, and including, 2.94.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3180900/mappress-google-maps-for-wordpress; https://www.wordfence.com/threat-intel/vulnerabilities/id/8d966924-aeab-4397-9555-78291af70efe?source=cve
CVE: CVE-2024-10168
Published: 2024-11-06
Description: The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's woot_button shortcode in all versions up to, and including, 1.0.6.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3182136/; https://wordpress.org/plugins/profit-products-tables-for-woocommerce/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/4a13b13e-72d3-43c9-b5ec-d499f3b22091?source=cve
CVE: CVE-2024-8323
Published: 2024-11-06
Description: The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘fontFamily’ attribute in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/easy-pricing-tables/trunk/includes/ept-block.php#L18; https://plugins.trac.wordpress.org/changeset/3181961/; https://wordpress.org/plugins/easy-pricing-tables/#developers
CVE: CVE-2024-10186
Published: 2024-11-06
Description: The Event post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's events_cal shortcode in all versions up to, and including, 5.9.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3182549/; https://wordpress.org/plugins/event-post/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/f3ae1c32-18a7-4109-a7ea-dfd18fa3a8e2?source=cve
CVE: CVE-2020-11859
Published: 2024-11-06
Description: Improper Input Validation vulnerability in OpenText iManager allows Cross-Site Scripting (XSS). This issue affects iManager before 3.2.3
CVSS Score: 7.6 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.netiq.com/documentation/imanager-32/imanager323_releasenotes/data/imanager323_releasenotes.html
CVE: CVE-2024-10914
Published: 2024-11-06
Description: A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgi_user_add of the file /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. The manipulation of the argument name leads to os command injection. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.1 (HIGH)
CWE: CWE-74, CWE-78, CWE-707
References: https://netsecfish.notion.site/Command-Injection-Vulnerability-in-name-parameter-for-D-Link-NAS-12d6b683e67c80c49ffcc9214c239a07?pvs=4; https://vuldb.com/?ctiid.283309; https://vuldb.com/?id.283309
CVE: CVE-2024-10915
Published: 2024-11-06
Description: A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgi_user_add of the file /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. The manipulation of the argument group leads to os command injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.1 (HIGH)
CWE: CWE-74, CWE-78, CWE-707, CWE-78
References: https://netsecfish.notion.site/Command-Injection-Vulnerability-in-group-parameter-for-D-Link-NAS-12d6b683e67c803fa1a0c0d236c9a4c5?pvs=4; https://vuldb.com/?ctiid.283310; https://vuldb.com/?id.283310
CVE: CVE-2024-10081
Published: 2024-11-06
Description: CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. 
Authentication bypass occurs when the API URL ends with Authentication. This bypass allows superuser access to all API endpoints other than Authentication. These endpoints include the ability to add, edit, and remove products, among others. All endpoints, apart from the /Authentication is affected by the vulnerability.

This issue affects CodeChecker: through 6.24.1.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-288, CWE-420
References: https://github.com/Ericsson/codechecker/security/advisories/GHSA-f3f8-vx3w-hp5q
CVE: CVE-2024-10082
Published: 2024-11-06
Description: CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. 
Authentication method confusion allows logging in as the built-in root user from an external service. The built-in root user up until 6.24.1 is generated in a weak manner, cannot be disabled, and has universal access.This vulnerability allows an attacker who can create an account on an enabled external authentication service, to log in as the root user, and access and control everything that can be controlled via the web interface. The attacker needs to acquire the username of the root user to be successful.

This issue affects CodeChecker: through 6.24.1.
CVSS Score: 8.7 (HIGH)
CWE: CWE-305, CWE-330, CWE-842
References: https://github.com/Ericsson/codechecker/security/advisories/GHSA-fpm5-2wcj-vfr7
CVE: CVE-2024-10916
Published: 2024-11-06
Description: A vulnerability classified as problematic has been found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. This affects an unknown part of the file /xml/info.xml of the component HTTP GET Request Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-284
References: https://netsecfish.notion.site/Information-Disclosure-Vulnerability-Report-in-xml-info-xml-for-D-Link-NAS-12d6b683e67c8019a311e699582f51b6?pvs=4; https://vuldb.com/?ctiid.283311; https://vuldb.com/?id.283311
CVE: CVE-2024-35146
Published: 2024-11-06
Description: IBM Maximo Application Suite - Monitor Component 8.10.11, 8.11.8, and 9.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7174946
CVE: CVE-2024-6861
Published: 2024-11-06
Description: A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the introspection feature is enabled, it is possible for attackers to retrieve sensitive admin authentication keys which could result in a compromise of the entire product's API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://access.redhat.com/errata/RHSA-2022:8506; https://access.redhat.com/security/cve/CVE-2024-6861; https://bugzilla.redhat.com/show_bug.cgi?id=2317450