deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-8298
Published: 2024-09-04
Description: Memory request vulnerability in the memory management module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-701
References: https://https://consumer.huawei.com/en/support/bulletin/2024/9/; https://consumer.huawei.com/en/support/bulletin/2024/9/
CVE: CVE-2024-34637
Published: 2024-09-04
Description: Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release 1 in Android 13 and Android 14 allows local attackers to bypass restrictions on starting services from the background.
CVSS Score: 6.2 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE: CVE-2024-34638
Published: 2024-09-04
Description: Improper handling of exceptional conditions in ThemeCenter prior to SMR Sep-2024 Release 1 allows local attackers to delete non-preloaded applications.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-755
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE: CVE-2024-34639
Published: 2024-09-04
Description: Improper handling of exceptional conditions in Setupwizard prior to SMR Aug-2024 Release 1 allows physical attackers to bypass proper validation.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-755
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08
CVE: CVE-2024-34640
Published: 2024-09-04
Description: Improper access control vulnerability in BGProtectManager prior to SMR Sep-2024 Release 1 allows local attackers to bypass restriction of process expiration.
CVSS Score: 3.3 (LOW)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE: CVE-2024-34641
Published: 2024-09-04
Description: Improper Export of Android Application Components in FeliCaTest prior to SMR Sep-2024 Release 1 allows local attackers to enable NFC configuration.
CVSS Score: 5.1 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE: CVE-2024-34642
Published: 2024-09-04
Description: Improper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access sensitive information.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-863
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE: CVE-2024-34643
Published: 2024-09-04
Description: Improper access control in key input related function in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected data. User interaction is required for triggering this vulnerability.
CVSS Score: 4.4 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE: CVE-2024-34644
Published: 2024-09-04
Description: Improper access control in item selection related in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected data. User interaction is required for triggering this vulnerability.
CVSS Score: 4.4 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE: CVE-2024-34645
Published: 2024-09-04
Description: Improper input validation in ThemeCenter prior to SMR Sep-2024 Release 1 allows physical attackers to install privileged applications.
CVSS Score: 6.1 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE: CVE-2024-34646
Published: 2024-09-04
Description: Improper access control in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to cause local permanent denial of service.
CVSS Score: 6.6 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE: CVE-2024-34647
Published: 2024-09-04
Description: Incorrect use of privileged API in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs related to knox without proper license.
CVSS Score: 4.0 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE: CVE-2024-34648
Published: 2024-09-04
Description: Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive data.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-276
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE: CVE-2024-34649
Published: 2024-09-04
Description: Improper access control in new Dex Mode in multitasking framework prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access an unlocked screen.
CVSS Score: 2.4 (LOW)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE: CVE-2024-34650
Published: 2024-09-04
Description: Incorrect authorization in CocktailbarService prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs related to Edge panel.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-863
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE: CVE-2024-34651
Published: 2024-09-04
Description: Improper authorization in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access restricted data in My Files.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-863
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE: CVE-2024-34652
Published: 2024-09-04
Description: Incorrect authorization in kperfmon prior to SMR Sep-2024 Release 1 allows local attackers to access information related to performance including app usage.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-863
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE: CVE-2024-34653
Published: 2024-09-04
Description: Path Traversal in My Files prior to SMR Sep-2024 Release 1 allows physical attackers to access directories with My Files' privilege.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-22
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE: CVE-2024-34654
Published: 2024-09-04
Description: Improper Export of android application component in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access files with My Files' privilege.
CVSS Score: 6.2 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE: CVE-2024-34655
Published: 2024-09-04
Description: Incorrect use of privileged API in UniversalCredentialManager prior to SMR Sep-2024 Release 1 allows local attackers to access privileged API related to UniversalCredentialManager.
CVSS Score: 6.2 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE: CVE-2024-34656
Published: 2024-09-04
Description: Path traversal in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code.
CVSS Score: 7.3 (HIGH)
CWE: CWE-22
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=09
CVE: CVE-2024-34657
Published: 2024-09-04
Description: Stack-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows remote attackers to execute arbitrary code.
CVSS Score: 8.6 (HIGH)
CWE: CWE-787
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=09
CVE: CVE-2024-34658
Published: 2024-09-04
Description: Out-of-bounds read in Samsung Notes allows local attackers to bypass ASLR.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-125
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=09
CVE: CVE-2024-34659
Published: 2024-09-04
Description: Exposure of sensitive information in GroupSharing prior to version 13.6.13.3 allows remote attackers can force the victim to join the group.
CVSS Score: 7.5 (HIGH)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=09
CVE: CVE-2024-34660
Published: 2024-09-04
Description: Heap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code.
CVSS Score: 7.3 (HIGH)
CWE: CWE-787
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=09
CVE: CVE-2024-34661
Published: 2024-09-04
Description: Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers to access location data. User interaction is required for triggering this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-276
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=09
CVE: CVE-2024-6020
Published: 2024-09-04
Description: The Sign-up Sheets WordPress plugin before 2.2.13 does not escape some generated URLs, as well as the $_SERVER['REQUEST_URI'] parameter before outputting them back in attributes, which could lead to Reflected Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f3526320-3abd-4ddb-8f73-778741bd9c48/
CVE: CVE-2024-6722
Published: 2024-09-04
Description: The Chatbot Support AI: Free ChatGPT Chatbot, Woocommerce Chatbot WordPress plugin through 1.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ce909d3c-2ef2-4167-87c4-75b5effb2a4d/
CVE: CVE-2024-6888
Published: 2024-09-04
Description: The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f4df74c2-4c95-4d1c-97c1-ebfc225f6b93/
CVE: CVE-2024-6889
Published: 2024-09-04
Description: The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/9651abd1-0f66-418e-85a7-2de0c5e91bed/
CVE: CVE-2024-6926
Published: 2024-09-04
Description: The Viral Signup  WordPress plugin through 2.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/9ce96ce5-fcf0-4d7a-b562-f63ea3418d93/
CVE: CVE-2024-7786
Published: 2024-09-04
Description: The Sensei LMS  WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak email templates.
CVSS Score: 5.3 (MEDIUM)
References: https://wpscan.com/vulnerability/f44e6f8f-3ef2-45c9-ae9c-9403305a548a/
CVE: CVE-2024-8325
Published: 2024-09-04
Description: The Blockspare: Gutenberg Blocks & Patterns for Blogs, Magazines, Business Sites – Post Grids, Sliders, Carousels, Counters, Page Builder & Starter Site Imports, No Coding Needed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in the ‘blockspare_render_social_sharing_block’ function in all versions up to, and including, 3.2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3145729/; https://www.wordfence.com/threat-intel/vulnerabilities/id/c23995c6-989e-48d2-ba60-b0bf7b750245?source=cve
CVE: CVE-2024-8102
Published: 2024-09-04
Description: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the module_all_toggle_ajax() function in all versions up to, and including, 3.0.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/wpextended/trunk/admin/class-wp-extended-admin.php#L262; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3145430%40wpextended%2Ftrunk&old=3134345%40wpextended%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/9d47df99-cff5-4be7-ab8e-ef333cf3755b?source=cve
CVE: CVE-2024-8104
Published: 2024-09-04
Description: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.0.8 via the download_file_ajax function. This makes it possible for authenticated attackers, with subscriber access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/browser/wpextended/trunk/includes/libraries/wpext_export/wpext_export.php#L137; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3145430%40wpextended%2Ftrunk&old=3134345%40wpextended%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/0fad1834-0ee1-4542-a5a7-55a32861c81d?source=cve
CVE: CVE-2024-8106
Published: 2024-09-04
Description: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.8 via the download_user_ajax function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive data including usernames, hashed passwords, and emails.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/browser/wpextended/trunk/includes/modules/core_extensions/wpext_export_users/wpext_export_users.php#L54; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3145430%40wpextended%2Ftrunk&old=3134345%40wpextended%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/593eb5bc-59f9-4944-b147-4ba66d49abe6?source=cve
CVE: CVE-2024-8117
Published: 2024-09-04
Description: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘selected_option’ parameter in all versions up to, and including, 3.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wpextended/trunk/includes/modules/core_extensions/wpext_snippets/wpext_snippets.php#L293; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3145430%40wpextended%2Ftrunk&old=3134345%40wpextended%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/0f7f91f6-9fe6-4bbf-ba3c-380ba2e97dcd?source=cve
CVE: CVE-2024-8119
Published: 2024-09-04
Description: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the page parameter in all versions up to, and including, 3.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wpextended/trunk/includes/modules/core_extensions/wpext_snippets/wp-extend-module-listing.php#L216; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3145430%40wpextended%2Ftrunk&old=3134345%40wpextended%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/50798706-ad0d-431e-ac5f-57a0606c6f94?source=cve
CVE: CVE-2024-8121
Published: 2024-09-04
Description: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of user names due to a missing capability check on the wpext_change_admin_name() function in all versions up to, and including, 3.0.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change an admin's username to a username of their liking as long as the default 'admin' was used.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/wpextended/trunk/includes/modules/core_extensions/wpext_block_user_name_admin/wpext_block_user_name_admin.php#L49; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3145430%40wpextended%2Ftrunk&old=3134345%40wpextended%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/f3d08ac9-22f7-45f4-9896-05b90f5fce64?source=cve
CVE: CVE-2024-8123
Published: 2024-09-04
Description: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.0.8 via the duplicate_post function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-level access and above, to duplicate posts written by other authors including admins. This includes the ability to duplicate password-protected posts, which reveals their contents.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-639
References: https://plugins.trac.wordpress.org/browser/wpextended/trunk/includes/modules/core_extensions/wpext_duplicator/wpext_duplicator.php#L48; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3145430%40wpextended%2Ftrunk&old=3134345%40wpextended%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/b1e421fb-4839-4e2d-911f-e2fa8c756744?source=cve
CVE: CVE-2024-8318
Published: 2024-09-04
Description: The Attributes for Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘attributesForBlocks’ parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/attributes-for-blocks/trunk/attributes-for-blocks.php#L246; https://plugins.trac.wordpress.org/browser/attributes-for-blocks/trunk/attributes-for-blocks.php#L96; https://plugins.trac.wordpress.org/changeset?old_path=%2Fattributes-for-blocks&old=3066420&new_path=%2Fattributes-for-blocks&new=3144730&sfp_email=&sfph_mail=
CVE: CVE-2024-45195
Published: 2024-09-04
Description: Direct Request ('Forced Browsing') vulnerability in Apache OFBiz.

This issue affects Apache OFBiz: before 18.12.16.

Users are recommended to upgrade to version 18.12.16, which fixes the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-425
References: https://issues.apache.org/jira/browse/OFBIZ-13130; https://lists.apache.org/thread/o90dd9lbk1hh3t2557t2y2qvrh92p7wy; https://ofbiz.apache.org/download.html
CVE: CVE-2024-45507
Published: 2024-09-04
Description: Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz.

This issue affects Apache OFBiz: before 18.12.16.

Users are recommended to upgrade to version 18.12.16, which fixes the issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-918
References: https://issues.apache.org/jira/browse/OFBIZ-13132; https://lists.apache.org/thread/o90dd9lbk1hh3t2557t2y2qvrh92p7wy; https://ofbiz.apache.org/download.html
CVE: CVE-2024-7870
Published: 2024-09-04
Description: The PixelYourSite – Your smart PIXEL (TAG) & API Manager and the PixelYourSite PRO plugins for WordPress are vulnerable to Sensitive Information Exposure in all versions up to, and including, 9.7.1 and 10.4.2, respectively, through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files, and to delete log files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://github.com/WordpressPluginDirectory/pixelyoursite/blob/main/pixelyoursite/includes/logger/class-pys-logger.php#L126; https://plugins.trac.wordpress.org/browser/pixelyoursite/trunk/includes/class-pys.php#L114; https://plugins.trac.wordpress.org/changeset/3143047/
CVE: CVE-2024-8289
Published: 2024-09-04
Description: The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to privilege escalation/de-escalation and account takeover due to an insufficient capability check on the update_item_permissions_check and create_item_permissions_check functions in all versions up to, and including, 4.2.0. This makes it possible for unauthenticated attackers to change the password of any user with the vendor role, create new users with the vendor role, and demote other users like administrators to the vendor role.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/dc-woocommerce-multi-vendor/tags/4.2.0/api/class-mvx-rest-vendors-controller.php#L382; https://plugins.trac.wordpress.org/browser/dc-woocommerce-multi-vendor/tags/4.2.0/api/class-mvx-rest-vendors-controller.php#L641; https://plugins.trac.wordpress.org/browser/dc-woocommerce-multi-vendor/tags/4.2.0/api/class-mvx-rest-vendors-controller.php#L705
CVE: CVE-2024-7821
Published: 2024-09-04
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-8413
Published: 2024-09-04
Description: Cross Site Scripting (XSS) vulnerability through the action parameter in index.php. Affected product codebase  https://github.com/Bioshox/Raspcontrol  and forks such as  https://github.com/harmon25/raspcontrol . An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially hijacking their session details.

References list
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-raspcontrol
CVE: CVE-2024-44383
Published: 2024-09-04
Description: WAYOS FBM-291W v19.09.11 is vulnerable to Command Execution via msp_info_htm.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-77, CWE-77
References: https://github.com/GroundCTL2MajorTom/pocs/blob/main/wayos_%20FBM_291W.md
CVE: CVE-2024-44400
Published: 2024-09-04
Description: A vulnerability was discovered in DI_8400-16.07.26A1, which has been classified as critical. This issue affects the upgrade_filter_asp function in the upgrade_filter.asp file. Manipulation of the path parameter can lead to command injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/lonelylonglong/openfile-/blob/main/D-link_DI_8400-16.07.26A1_Command_Injection.md/CVE-2024-44400; https://github.com/lonelylonglong/openfile-/blob/main/D-link_DI_8400-16.07.26A1_Command_Injection.md/D-link_DI_8400-16.07.26A1_Command_Injection.md