deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-27388
Published: 2024-05-01
Description: In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: fix some memleaks in gssx_dec_option_array

The creds and oa->data need to be freed in the error-handling paths after
their allocation. So this patch add these deallocations in the
corresponding paths.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/3cfcfc102a5e57b021b786a755a38935e357797d; https://git.kernel.org/stable/c/5e6013ae2c8d420faea553d363935f65badd32c3; https://git.kernel.org/stable/c/934212a623cbab851848b6de377eb476718c3e4c
CVE: CVE-2024-27389
Published: 2024-05-01
Description: In the Linux kernel, the following vulnerability has been resolved:

pstore: inode: Only d_invalidate() is needed

Unloading a modular pstore backend with records in pstorefs would
trigger the dput() double-drop warning:

  WARNING: CPU: 0 PID: 2569 at fs/dcache.c:762 dput.part.0+0x3f3/0x410

Using the combo of d_drop()/dput() (as mentioned in
Documentation/filesystems/vfs.rst) isn't the right approach here, and
leads to the reference counting problem seen above. Use d_invalidate()
and update the code to not bother checking for error codes that can
never happen.

---
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-415
References: https://git.kernel.org/stable/c/340682ed1932b8e3bd0bfc6c31a0c6354eb57cc6; https://git.kernel.org/stable/c/4cdf9006fc095af71da80e9b5f48a32e991b9ed3; https://git.kernel.org/stable/c/a43e0fc5e9134a46515de2f2f8d4100b74e50de3
CVE: CVE-2024-27390
Published: 2024-05-01
Description: In the Linux kernel, the following vulnerability has been resolved:

ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()

As discussed in the past (commit 2d3916f31891 ("ipv6: fix skb drops
in igmp6_event_query() and igmp6_event_report()")) I think the
synchronize_net() call in ipv6_mc_down() is not needed.

Under load, synchronize_net() can last between 200 usec and 5 ms.

KASAN seems to agree as well.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/17ef8efc00b34918b966388b2af[PII_REDACTED]a8c; https://git.kernel.org/stable/c/26d4bac55750d535f1f0b8790dc26daf6089e373; https://git.kernel.org/stable/c/5da9a218340a2bc804dc4327e5804392e24a0b88
CVE: CVE-2024-27391
Published: 2024-05-01
Description: In the Linux kernel, the following vulnerability has been resolved:

wifi: wilc1000: do not realloc workqueue everytime an interface is added

Commit 09ed8bfc5215 ("wilc1000: Rename workqueue from "WILC_wq" to
"NETDEV-wq"") moved workqueue creation in wilc_netdev_ifc_init in order to
set the interface name in the workqueue name. However, while the driver
needs only one workqueue, the wilc_netdev_ifc_init is called each time we
add an interface over a phy, which in turns overwrite the workqueue with a
new one. This can be observed with the following commands:

for i in $(seq 0 10)
do
  iw phy phy0 interface add wlan1 type managed
  iw dev wlan1 del
done
ps -eo pid,comm|grep wlan

 39 kworker/R-wlan0
 98 kworker/R-wlan1
102 kworker/R-wlan1
105 kworker/R-wlan1
108 kworker/R-wlan1
111 kworker/R-wlan1
114 kworker/R-wlan1
117 kworker/R-wlan1
120 kworker/R-wlan1
123 kworker/R-wlan1
126 kworker/R-wlan1
129 kworker/R-wlan1

Fix this leakage by putting back hif_workqueue allocation in
wilc_cfg80211_init. Regarding the workqueue name, it is indeed relevant to
set it lowercase, however it is not  attached to a specific netdev, so
enforcing netdev name in the name is not so relevant. Still, enrich the
name with the wiphy name to make it clear which phy is using the workqueue.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/328efda22af81130c2ad981c110518cb29ff2f1d; https://git.kernel.org/stable/c/4041c60a9d543b3ad50225385b072ba68e96166e; https://git.kernel.org/stable/c/515cc676dfbce40d93c92b1ff3c1070e917f4e52
CVE: CVE-2024-27392
Published: 2024-05-01
Description: In the Linux kernel, the following vulnerability has been resolved:

nvme: host: fix double-free of struct nvme_id_ns in ns_update_nuse()

When nvme_identify_ns() fails, it frees the pointer to the struct
nvme_id_ns before it returns. However, ns_update_nuse() calls kfree()
for the pointer even when nvme_identify_ns() fails. This results in
KASAN double-free, which was observed with blktests nvme/045 with
proposed patches [1] on the kernel v6.8-rc7. Fix the double-free by
skipping kfree() when nvme_identify_ns() fails.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://git.kernel.org/stable/c/534f9dc7fe495b3f9cc84363898ac50c5a25fccb; https://git.kernel.org/stable/c/8d0d2447394b13fb22a069f0330f9c49b7fff9d3; https://git.kernel.org/stable/c/534f9dc7fe495b3f9cc84363898ac50c5a25fccb
CVE: CVE-2024-28775
Published: 2024-05-01
Description: IBM WebSphere Automation 1.7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  285648.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/285648; https://www.ibm.com/support/pages/node/7149856; https://exchange.xforce.ibmcloud.com/vulnerabilities/285648
CVE: CVE-2024-31412
Published: 2024-05-01
Description: Out-of-bounds read vulnerability exists in CX-Programmer included in CX-One CXONE-AL[][]D-V4 Ver. 9.81 or lower. Opening a specially crafted project file may lead to information disclosure and/or the product being crashed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://jvn.jp/en/vu/JVNVU98274902/; https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2024-003_en.pdf; https://jvn.jp/en/vu/JVNVU98274902/
CVE: CVE-2024-31413
Published: 2024-05-01
Description: Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-AL[][]D-V4 (The version which was installed with a DVD ver. 4.61.1 or lower, and was updated through CX-One V4 auto update in January 2024 or prior) and Sysmac Studio SYSMAC-SE2[][][] (The version which was installed with a DVD ver. 1.56 or lower, and was updated through Sysmac Studio V1 auto update in January 2024 or prior). Opening a specially crafted project file may lead to arbitrary code execution.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-761
References: https://jvn.jp/en/vu/JVNVU98274902/; https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2024-002_en.pdf; https://jvn.jp/en/vu/JVNVU98274902/
CVE: CVE-2024-33775
Published: 2024-05-01
Description: An issue with the Autodiscover component in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted Dashlet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://github.com/Neo-XeD/CVE-2024-33775; https://www.nagios.com/changelog/#nagios-xi; https://github.com/Neo-XeD/CVE-2024-33775
CVE: CVE-2024-4058
Published: 2024-05-01
Description: Type confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-843
References: https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_24.html; https://issues.chromium.org/issues/332546345; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRN/
CVE: CVE-2024-4059
Published: 2024-05-01
Description: Out of bounds read in V8 API in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to leak cross-site data via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_24.html; https://issues.chromium.org/issues/333182464; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRN/
CVE: CVE-2024-4060
Published: 2024-05-01
Description: Use after free in Dawn in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_24.html; https://issues.chromium.org/issues/333420620; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRN/
CVE: CVE-2024-4331
Published: 2024-05-01
Description: Use after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_30.html; https://issues.chromium.org/issues/335003891; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
CVE: CVE-2024-4368
Published: 2024-05-01
Description: Use after free in Dawn in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_30.html; https://issues.chromium.org/issues/333508731; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
CVE: CVE-2024-24912
Published: 2024-05-01
Description: A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target system.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-732
References: https://support.checkpoint.com/results/sk/sk182244; https://support.checkpoint.com/results/sk/sk182244
CVE: CVE-2024-26304
Published: 2024-05-01
Description: There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system. 


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt
CVE: CVE-2024-26305
Published: 2024-05-01
Description: There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system. 


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt
CVE: CVE-2024-33511
Published: 2024-05-01
Description: There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system. 


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt
CVE: CVE-2024-33512
Published: 2024-05-01
Description: There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt
CVE: CVE-2023-40533
Published: 2024-05-01
Description: Rejected reason: This CVE ID is a duplicate of CVE-2022-40468
CVE: CVE-2023-47166
Published: 2024-05-01
Description: A firmware update vulnerability exists in the luci2-io file-import functionality of Milesight UR32L v32.3.0.7-r2. A specially crafted network request can lead to arbitrary firmware update. An attacker can send a network request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285, CWE-306
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1852; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1852; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1852
CVE: CVE-2023-47212
Published: 2024-05-01
Description: A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-787
References: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHQQXX27ACLLYUQHWSL3DVCOGUK5ZA4/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2WRORYQ2Z2XXHPX36JHBUSDVY6IOMW2N/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LBIPXOBWUHPAH4QHMVP2AWWAPDDZDQ66/
CVE: CVE-2023-49606
Published: 2024-05-01
Description: A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, which leads to memory corruption and could lead to remote code execution. An attacker needs to make an unauthenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2024/05/07/1; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889; http://www.openwall.com/lists/oss-security/2024/05/07/1
CVE: CVE-2024-28893
Published: 2024-05-01
Description: Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been modified after extraction. HP has released updated software packages (SoftPaqs).
CVSS Score: 7.7 (HIGH)
CWE: CWE-94
References: https://support.hp.com/us-en/document/ish_10[PII_REDACTED]2508-16/hpsbhf03931; https://support.hp.com/us-en/document/ish_10[PII_REDACTED]2508-16/hpsbhf03931
CVE: CVE-2024-33820
Published: 2024-05-01
Description: Totolink AC1200 Wireless Dual Band Gigabit Router A3002R_V4 Firmware V4.0.0-B20[PII_REDACTED] is vulnerable to Buffer Overflow via the formWlEncrypt function of the boa server. Specifically, they exploit the length of the wlan_ssid field triggers the overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://gist.github.com/Swind1er/ee095fbfe13f77a5b45b39a5aa82bd17; https://gist.github.com/Swind1er/ee095fbfe13f77a5b45b39a5aa82bd17
CVE: CVE-2023-7241
Published: 2024-05-01
Description: Privilege Escalation in WRSA.EXE in Webroot Antivirus 8.0.1X- 9.0.35.12 on 

Windows64 bit and 32 bit allows malicious software to abuse WRSA.EXE to delete arbitrary and protected files.

CVSS Score: 7.9 (HIGH)
CWE: CWE-269
References: https://answers.webroot.com/Webroot/ukp.aspx?&app=vw&vw=1&login=1&solutionid=4258; https://www.webroot.com/us/en/business/support/release-notes#heading-endpoint; https://www.webroot.com/us/en/support/support-consumer-release-notes
CVE: CVE-2024-20357
Published: 2024-05-01
Description: A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device.  
 This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could exploit this vulnerability by sending a crafted XML request to an affected device. A successful exploit could allow the attacker to initiate calls or play sounds on the device.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-787
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS
CVE: CVE-2024-20376
Published: 2024-05-01
Description: A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition.  
 This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS
CVE: CVE-2024-20378
Published: 2024-05-01
Description: A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device.  
 This vulnerability is due to a lack of authentication for specific endpoints of the web-based management interface on an affected device. An attacker could exploit this vulnerability by connecting to the affected device. A successful exploit could allow the attacker to gain unauthorized access to the device, enabling the recording of user credentials and traffic to and from the affected device, including VoIP calls that could be replayed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-305
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS
CVE: CVE-2024-23457
Published: 2024-05-01
Description: The anti-tampering functionality of the Zscaler Client Connector can be disabled under certain conditions when an uninstall password is enforced. This affects Zscaler Client Connector on Windows prior to 4.2.0.209


CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023; https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023
CVE: CVE-2024-23480
Published: 2024-05-01
Description: A fallback mechanism in code sign checking on macOS may allow arbitrary code execution. This issue affects Zscaler Client Connector on MacOS prior to 4.2.

CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=macos&applicable_version=4.2; https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=macos&applicable_version=4.2
CVE: CVE-2024-25015
Published: 2024-05-01
Description: IBM MQ 9.2 LTS, 9.3 LTS, and 9.3 CD Internet Pass-Thru could allow a remote user to cause a denial of service by sending HTTP requests that would consume all available resources.  IBM X-Force ID:  281278.
CVSS Score: 7.5 (HIGH)
CWE: CWE-406
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/281278; https://www.ibm.com/support/pages/node/7149583; https://exchange.xforce.ibmcloud.com/vulnerabilities/281278
CVE: CVE-2024-28764
Published: 2024-05-01
Description: IBM WebSphere Automation 1.7.0 could allow an attacker with privileged access to the network to conduct a CSV injection.  An attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents.  IBM X-Force ID:  285623.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1236, CWE-1236
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/285623; https://www.ibm.com/support/pages/node/7149857; https://exchange.xforce.ibmcloud.com/vulnerabilities/285623
CVE: CVE-2024-33513
Published: 2024-05-01
Description: Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected service.


CVSS Score: 5.9 (MEDIUM)
CWE: CWE-121
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt
CVE: CVE-2024-33514
Published: 2024-05-01
Description: Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected service.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-121
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt
CVE: CVE-2024-33515
Published: 2024-05-01
Description: Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected service.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-121
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt
CVE: CVE-2024-33516
Published: 2024-05-01
Description: An unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via the PAPI protocol provided  by ArubaOS. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the controller.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-121
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt
CVE: CVE-2024-33517
Published: 2024-05-01
Description: An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-121
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt
CVE: CVE-2024-33518
Published: 2024-05-01
Description: An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-121
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt
CVE: CVE-2024-29010
Published: 2024-05-01
Description: The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity (XXE) injection, potentially resulting in the disclosure of sensitive information.

This issue affects GMS: 9.3.4 and earlier versions.


CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0007; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0007