deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-52323
Published: 2024-11-27
Description: Zohocorp ManageEngine Analytics Plus versions below 6100 are vulnerable to authenticated sensitive data exposure which allows the users to retrieve sensitive tokens associated to the org-admin account.
CVSS Score: 8.1 (HIGH)
CWE: CWE-200
References: https://www.manageengine.com/analytics-plus/CVE-2024-52323.html
CVE: CVE-2024-10521
Published: 2024-11-27
Description: The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.2. This is due to missing or incorrect nonce validation on the process_bulk_action function. This makes it possible for unauthenticated attackers to delete forms via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/contact-forms/trunk/accua-forms-list-page.php#L154; https://plugins.trac.wordpress.org/browser/contact-forms/trunk/accua-forms-submissions-page.php#L348; https://plugins.trac.wordpress.org/changeset/3196728/
CVE: CVE-2024-11025
Published: 2024-11-27
Description: An authenticated attacker with low privileges may use a SQL Injection vulnerability in the affected products administration panel to gain read and write access to a specific log file of the device.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://certvde.com/en/advisories/VDE-2024-074
CVE: CVE-2024-11009
Published: 2024-11-27
Description: The Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘post_id’ parameter in all versions up to, and including, 1.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/3197510/; https://wordpress.org/plugins/automatic-internal-links-for-seo/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/35a690c5-dc7e-4bb7-be5b-c70bd0ea7d10?source=cve
CVE: CVE-2024-36468
Published: 2024-11-27
Description: The reported vulnerability is a stack buffer overflow in the zbx_snmp_cache_handle_engineid function within the Zabbix server/proxy code. This issue occurs when copying data from session->securityEngineID to local_record.engineid without proper bounds checking.
CVSS Score: 3.0 (LOW)
CWE: CWE-121
References: https://support.zabbix.com/browse/ZBX-25621
CVE: CVE-2024-42326
Published: 2024-11-27
Description: There was discovered a use after free bug in browser.c in the es_browser_get_variant function
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-416
References: https://support.zabbix.com/browse/ZBX-25622
CVE: CVE-2024-42327
Published: 2024-11-27
Description: A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the CUser.get function which is available for every user who has API access.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-89
References: https://support.zabbix.com/browse/ZBX-25623
CVE: CVE-2024-42328
Published: 2024-11-27
Description: When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curl_write_cb when receiving data. If the server's response is an empty document, then wd->data in the code below will remain NULL and an attempt to read from it will result in a crash.
CVSS Score: 3.3 (LOW)
CWE: CWE-476, CWE-690
References: https://support.zabbix.com/browse/ZBX-25624
CVE: CVE-2024-42329
Published: 2024-11-27
Description: The webdriver for the Browser object expects an error object to be initialized when the webdriver_session_query function fails. But this function can fail for various reasons without an error description and then the wd->error will be NULL and trying to read from it will result in a crash.
CVSS Score: 3.3 (LOW)
CWE: CWE-476, CWE-690
References: https://support.zabbix.com/browse/ZBX-25625
CVE: CVE-2024-42330
Published: 2024-11-27
Description: The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-134
References: https://support.zabbix.com/browse/ZBX-25626; https://lists.debian.org/debian-lts-announce/2024/12/msg00005.html
CVE: CVE-2024-42331
Published: 2024-11-27
Description: In the src/libs/zbxembed/browser.c file, the es_browser_ctor method retrieves a heap pointer from the Duktape JavaScript engine. This heap pointer is subsequently utilized by the browser_push_error method in the src/libs/zbxembed/browser_error.c file. A use-after-free bug can occur at this stage if the wd->browser heap pointer is freed by garbage collection.
CVSS Score: 3.3 (LOW)
CWE: CWE-416
References: https://support.zabbix.com/browse/ZBX-25627; https://lists.debian.org/debian-lts-announce/2024/12/msg00005.html
CVE: CVE-2024-42332
Published: 2024-11-27
Description: The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attack requires an SNMP item to be configured as text on the target host.
CVSS Score: 3.7 (LOW)
CWE: CWE-116
References: https://support.zabbix.com/browse/ZBX-25628; https://lists.debian.org/debian-lts-announce/2024/12/msg00005.html
CVE: CVE-2024-42333
Published: 2024-11-27
Description: The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c
CVSS Score: 2.7 (LOW)
CWE: CWE-126
References: https://support.zabbix.com/browse/ZBX-25629; https://lists.debian.org/debian-lts-announce/2024/12/msg00005.html
CVE: CVE-2024-36464
Published: 2024-11-27
Description: When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords.
CVSS Score: 2.7 (LOW)
CWE: CWE-256
References: https://support.zabbix.com/browse/ZBX-25630; https://lists.debian.org/debian-lts-announce/2024/12/msg00005.html
CVE: CVE-2024-53603
Published: 2024-11-27
Description: A SQL Injection vulnerability was found in /covid-tms/password-recovery.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the contactno POST request parameter.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/COVID19/SQL%20Injection%20vulnerability.pdf
CVE: CVE-2024-53604
Published: 2024-11-27
Description: A SQL Injection vulnerability was found in /covid-tms/check_availability.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the mobnumber POST request parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/COVID19/SQL%20Injection%20vulnerability%20mo.pdf
CVE: CVE-2024-53635
Published: 2024-11-27
Description: A Reflected Cross Site Scripting (XSS) vulnerability was found in /covid-tms/patient-search-report.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata POST request parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/COVID19/Reflected%20Cross%20Site%20Scripting.pdf
CVE: CVE-2024-11862
Published: 2024-11-27
Description: Non constant time cryptographic operation in Devolutions.XTS.NET 2024.11.19 and earlier allows an attacker to render half of the encryption key obsolete via a timing attacks
CWE: CWE-385
References: https://github.com/Devolutions/XTS.NET/security/advisories/GHSA-j6vm-4r7g-x4gr
CVE: CVE-2024-46054
Published: 2024-11-27
Description: OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://github.com/b1d0ws/CVEs/blob/main/CVE-2024-46054.md; https://github.com/davidguva/OpenVidReview; https://github.com/davidguva/OpenVidReview/blob/main/routes/upload.js
CVE: CVE-2024-46055
Published: 2024-11-27
Description: OpenVidReview 1.0 is vulnerable to Cross Site Scripting (XSS) in review names.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/b1d0ws/CVEs/blob/main/CVE-2024-46055.md; https://github.com/davidguva/OpenVidReview; https://github.com/davidguva/OpenVidReview/blob/main/views/admin.ejs
CVE: CVE-2024-52951
Published: 2024-11-27
Description: Stored Cross-Site Scripting in the Access Request History in Omada Identity before version 15 update 1 allows an authenticated attacker to execute arbitrary code in the browser of a victim via a specially crafted link or by viewing a manipulated Access Request History
CVSS Score: 8.0 (HIGH)
CWE: CWE-79
References: https://omadaidentity.com; https://r.sec-consult.com/omada; https://sec-consult.com/vulnerability-lab/advisory/stored-cross-site-scripting-in-omada-identity/
CVE: CVE-2024-53920
Published: 2024-11-27
Description: In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://eshelyaron.com/posts/2024-11-27-emacs-aritrary-code-execution-and-how-to-avoid-it.html; https://git.savannah.gnu.org/cgit/emacs.git/tag/?h=emacs-30.0.92; https://git.savannah.gnu.org/cgit/emacs.git/tree/ChangeLog.4
CVE: CVE-2024-11860
Published: 2024-11-27
Description: A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects an unknown part of the file /rental/ajax.php?action=delete_tenant of the component POST Request Handler. The manipulation of the argument id leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://drive.google.com/file/d/1CyjtknGVqn5QO_R1WZX-hoGH8ae5DjRq/view; https://github.com/YasserREED/YasserREED-CVEs/blob/main/Best%20house%20rental%20management%20system%20project%20in%20php/Unauthorized%20Tenant%20Deletion.md; https://vuldb.com/?ctiid.286245
CVE: CVE-2024-21703
Published: 2024-11-27
Description: This Medium severity Security Misconfiguration vulnerability was introduced in version 8.8.1 of Confluence Data Center and Server for Windows installations.



This Security Misconfiguration vulnerability, with a CVSS Score of 6.4 allows an authenticated attacker of the Windows host to read sensitive information about the Confluence Data Center configuration which has high impact to confidentiality, high impact to integrity,  high impact to availability, and no user interaction.



Atlassian recommends that Confluence Data Center and Server customers upgrade to the latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:

* Confluence Data Center and Server 7.19: Upgrade to a release greater than or equal to 7.19.18 
* Confluence Data Center and Server 8.5: Upgrade to a release greater than or equal to 8.5.5
* Confluence Data Center and Server 8.7: Upgrade to a release greater than or equal to 8.7.2
* Confluence Data Center and Server 8.8: Upgrade to a release greater than or equal to 8.8.0



See the release notes (https://confluence.atlassian.com/conf88/confluence-release-notes[PII_REDACTED].html ). You can download the latest version of Confluence Data Center and Server from the download center (https://www.atlassian.com/software/confluence/download-archives ). 

This vulnerability was reported via our Atlassian Bug Bounty Program by Chris Elliot.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-732
References: https://jira.atlassian.com/browse/CONFSERVER-98413
CVE: CVE-2024-31976
Published: 2024-11-27
Description: EnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote attacker to execute arbitrary OS commands via the Controller connectivity parameter.
CVSS Score: 8.0 (HIGH)
CWE: CWE-78
References: https://github.com/actuator/cve/blob/main/Engenius/CVE-2024-31976; https://github.com/actuator/cve/tree/main/EnGenius/EWS356-FIT
CVE: CVE-2024-37816
Published: 2024-11-27
Description: Quectel EC25-EUX EC25EUXGAR08A05M1G was discovered to contain a stack overflow.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-120
References: http://quectel.com; https://github.com/quectel-official/Quectel-Security
CVE: CVE-2024-51228
Published: 2024-11-27
Description: An issue in TOTOLINK-CX-A3002RU V1.0.4-B20[PII_REDACTED] and TOTOLINK-CX-N150RT V2.1.6-B20[PII_REDACTED] and TOTOLINK-CX-N300RT V2.1.6-B20[PII_REDACTED] and TOTOLINK-CX-N300RT V2.1.8-B20[PII_REDACTED] and TOTOLINK-CX-N300RT V2.1.8-B20[PII_REDACTED] and TOTOLINK-CX-N302RE V2.0.2-B20[PII_REDACTED] allows a remote attacker to execute arbitrary code via the /boafrm/formSysCmd component.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78
References: https://github.com/yckuo-sdc/totolink-boa-api-vulnerabilities; https://totolink.tw/support_view/A3002RU; https://totolink.tw/support_view/N150RT
CVE: CVE-2024-54003
Published: 2024-11-27
Description: Jenkins Simple Queue Plugin 1.4.4 and earlier does not escape the view name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Create permission.
CVSS Score: 8.0 (HIGH)
CWE: CWE-79
References: https://www.jenkins.io/security/advisory/2024-11-27/#SECURITY-3467
CVE: CVE-2024-54004
Published: 2024-11-27
Description: Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier does not restrict the path used for the File system objects list Parameter, allowing attackers with Item/Configure permission to enumerate file names on the Jenkins controller file system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://www.jenkins.io/security/advisory/2024-11-27/#SECURITY-3367
CVE: CVE-2024-11160
Published: 2024-11-27
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-53254
Published: 2024-11-27
Description: Rejected reason: This CVE is a duplicate of another CVE.
CVE: CVE-2024-7025
Published: 2024-11-27
Description: Integer overflow in Layout in Google Chrome prior to 129.0.6668.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-472, CWE-190
References: https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop.html; https://issues.chromium.org/issues/367764861
CVE: CVE-2024-9369
Published: 2024-11-27
Description: Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-1284, CWE-1284
References: https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop.html; https://issues.chromium.org/issues/368208152
CVE: CVE-2023-29001
Published: 2024-11-27
Description: Contiki-NG is an open-source, cross-platform operating system for IoT devices. The Contiki-NG operating system processes source routing headers (SRH) in its two alternative RPL protocol implementations. The IPv6 implementation uses the results of this processing to determine whether an incoming packet should be forwarded to another host. Because of missing validation of the resulting next-hop address, an uncontrolled recursion may occur in the tcpip_ipv6_output function in the os/net/ipv6/tcpip.c module when receiving a packet with a next-hop address that is a local address. Attackers that have the possibility to send IPv6 packets to the Contiki-NG host can therefore trigger deeply nested recursive calls, which can cause a stack overflow. The vulnerability has not been patched in the current release of Contiki-NG, but is expected to be patched in the next release. The problem can be fixed by applying the patch in Contiki-NG pull request #2264. Users are advised to either apply the patch manually or to wait for the next release. There are no known workarounds for this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://github.com/contiki-ng/contiki-ng/pull/2264; https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-7p75-mf53-ffwm
CVE: CVE-2024-41125
Published: 2024-11-27
Description: Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The SNMP module is disabled in the default Contiki-NG configuration. The vulnerability exists in the os/net/app-layer/snmp/snmp-ber.c module, where the function snmp_ber_decode_string_len_buffer decodes the string length from a received SNMP packet. In one place, one byte is read from the buffer, without checking that the buffer has another byte available, leading to a possible out-of-bounds read. The problem has been patched in Contiki-NG pull request #2936. It will be included in the next release of Contiki-NG. Users are advised to apply the patch manually or to wait for the next release. A workaround is to disable the SNMP module in the Contiki-NG build configuration.
CVSS Score: 8.3 (HIGH)
CWE: CWE-125
References: https://github.com/contiki-ng/contiki-ng/pull/2936; https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-qjj3-gqx7-438w
CVE: CVE-2024-41126
Published: 2024-11-27
Description: Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The SNMP module is disabled in the default Contiki-NG configuration. The vulnerability exists in the os/net/app-layer/snmp/snmp-message.c module, where the snmp_message_decode function fails to check the boundary of the message buffer when reading a byte from it immediately after decoding an object identifier (OID). The problem has been patched in Contiki-NG pull request 2937. It will be included in the next release of Contiki-NG. Users are advised to either apply the patch manually or to wait for the next release. A workaround is to disable the SNMP module in the Contiki-NG build configuration.
CVSS Score: 8.3 (HIGH)
CWE: CWE-125
References: https://github.com/contiki-ng/contiki-ng/pull/2937; https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-444j-93j3-5gj4
CVE: CVE-2024-47181
Published: 2024-11-27
Description: Contiki-NG is an open-source, cross-platform operating system for IoT devices. An unaligned memory access can be triggered in the two RPL implementations of the Contiki-NG operating system. The problem can occur when either one of these RPL implementations is enabled and connected to an RPL instance. If an IPv6 packet containing an odd number of padded bytes before the RPL option, it can cause the rpl_ext_header_hbh_update function to read a 16-bit integer from an odd address. The impact of this unaligned read is architecture-dependent, but can potentially cause the system to crash. The problem has not been patched as of release 4.9, but will be included in the next release. One can apply the changes in Contiki-NG pull request #2962 to patch the system or wait for the next release.
CVSS Score: 7.5 (HIGH)
CWE: CWE-704
References: https://github.com/contiki-ng/contiki-ng/pull/2962; https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-crjw-x84h-h6x3
CVE: CVE-2024-53264
Published: 2024-11-27
Description: bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). A open redirect vulnerability exists in the loading endpoint, allowing attackers to redirect authenticated users to arbitrary external URLs via the "next" parameter. The loading endpoint accepts and uses an unvalidated "next" parameter for redirects. Ex. visiting: `/loading?next=https://google.com` while authenticated will cause the page will redirect to google.com. This vulnerability could be used in phishing attacks by redirecting users from a legitimate application URL to malicious sites. This issue has been addressed in version 1.5.11. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CWE: CWE-601
References: https://github.com/bunkerity/bunkerweb/security/advisories/GHSA-q9rr-h3hx-m87g
CVE: CVE-2024-53855
Published: 2024-11-27
Description: Centurion ERP (Enterprise Rescource Planning) is a simple application developed to provide open source IT management with a large emphasis on the IT Service Management (ITSM) modules. A user who is authenticated and has view permissions for a ticket, can view the tickets of another organization they are not apart of. Users with following permissions are applicable: 1. `view_ticket_change` permission can view change tickets from organizations they are not apart of. 2. `view_ticket_incident` permission can view incident tickets from organizations they are not apart of. 3. `view_ticket_request` permission can view request tickets from organizations they are not apart of. 4. `view_ticket_problem` permission can view problem tickets from organizations they are not apart of. The access to view the tickets from different organizations is only applicable when browsing the API endpoints for the tickets in question. The Centurion UI is not affected. Project Tasks, although a "ticket type" are also **Not** affected. This issue has been addressed in release version 1.3.1 and users are advised to upgrade. Users unable to upgrade may remove the ticket view permissions from users which would alleviate this vulnerability, if this is deemed not-viable, Upgrading is recommended.
CVSS Score: 1.9 (LOW)
CWE: CWE-653
References: https://github.com/nofusscomputing/centurion_erp/pull/399; https://github.com/nofusscomputing/centurion_erp/pull/399/commits/61f34876ed0f8362f7185bd5eecfc830a9de5cb0; https://github.com/nofusscomputing/centurion_erp/releases/tag/1.3.1
CVE: CVE-2017-13316
Published: 2024-11-27
Description: In checkPermissions of RecognitionService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://source.android.com/security/bulletin/pixel/2018-05-01