deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-24837
Published: 2024-02-21
Description: Cross-Site Request Forgery (CSRF) vulnerability in Frédéric GILLES FG PrestaShop to WooCommerce, Frédéric GILLES FG Drupal to WordPress, Frédéric GILLES FG Joomla to WordPress.This issue affects FG PrestaShop to WooCommerce: from n/a through 4.44.3; FG Drupal to WordPress: from n/a through 3.67.0; FG Joomla to WordPress: from n/a through 4.15.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/fg-drupal-to-wp/wordpress-fg-drupal-to-wordpress-plugin-3-67-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/fg-joomla-to-wordpress/wordpress-fg-joomla-to-wordpress-plugin-4-15-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/fg-prestashop-to-woocommerce/wordpress-fg-prestashop-to-woocommerce-plugin-4-44-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-7235
Published: 2024-02-21
Description: The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using a non-standard installation path, which allows an attacker to replace binaries to run arbitrary executables.
CVSS Score: 8.4 (HIGH)
CWE: CWE-276, CWE-276
References: https://community.openvpn.net/openvpn/wiki/CVE-2023-7235; https://community.openvpn.net/openvpn/wiki/CVE-2023-7235
CVE: CVE-2023-47795
Published: 2024-02-21
Description: Stored cross-site scripting (XSS) vulnerability in the Document and Media widget in Liferay Portal 7.4.3.18 through 7.4.3.101, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 18 through 92 allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into a document's “Title” text field.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-47795; https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-47795
CVE: CVE-2023-33843
Published: 2024-02-21
Description: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  256544.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/256544; https://www.ibm.com/support/pages/node/7116607; https://exchange.xforce.ibmcloud.com/vulnerabilities/256544
CVE: CVE-2023-50955
Published: 2024-02-21
Description: IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system.  IBM X-Force ID:  275777.
CVSS Score: 2.4 (LOW)
CWE: CWE-36, CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/275777; https://www.ibm.com/support/pages/node/7116610; https://exchange.xforce.ibmcloud.com/vulnerabilities/275777
CVE: CVE-2024-22778
Published: 2024-02-21
Description: HackMD CodiMD <2.5.2 is vulnerable to Denial of Service.
CVSS Score: 7.5 (HIGH)
References: https://github.com/hackmdio/codimd/issues/1846; https://github.com/hackmdio/codimd/issues/1846
CVE: CVE-2024-26582
Published: 2024-02-21
Description: In the Linux kernel, the following vulnerability has been resolved:

net: tls: fix use-after-free with partial reads and async decrypt

tls_decrypt_sg doesn't take a reference on the pages from clear_skb,
so the put_page() in tls_decrypt_done releases them, and we trigger
a use-after-free in process_rx_list when we try to read from the
partially-read skb.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/20b4ed034872b4d024b26e2bc1092c3f80e5db96; https://git.kernel.org/stable/c/32b55c5ff9103b8508c1e04bfa5a08c64e7a925f; https://git.kernel.org/stable/c/754c9bab77a1b895b97bd99d754403c505bc79df
CVE: CVE-2024-26583
Published: 2024-02-21
Description: In the Linux kernel, the following vulnerability has been resolved:

tls: fix race between async notify and socket close

The submitting thread (one which called recvmsg/sendmsg)
may exit as soon as the async crypto handler calls complete()
so any code past that point risks touching already freed data.

Try to avoid the locking and extra flags altogether.
Have the main thread hold an extra reference, this way
we can depend solely on the atomic ref counter for
synchronization.

Don't futz with reiniting the completion, either, we are now
tightly controlling when completion fires.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: https://git.kernel.org/stable/c/6209319b2efdd[PII_REDACTED]ee99c40637558fa33; https://git.kernel.org/stable/c/7a3ca06d04d589deec81f56229a9a9d62352ce01; https://git.kernel.org/stable/c/86dc27ee36f558fe223dbdfbfcb[PII_REDACTED]f4a
CVE: CVE-2024-26584
Published: 2024-02-21
Description: In the Linux kernel, the following vulnerability has been resolved:

net: tls: handle backlogging of crypto requests

Since we're setting the CRYPTO_TFM_REQ_MAY_BACKLOG flag on our
requests to the crypto API, crypto_aead_{encrypt,decrypt} can return
 -EBUSY instead of -EINPROGRESS in valid situations. For example, when
the cryptd queue for AESNI is full (easy to trigger with an
artificially low cryptd.cryptd_max_cpu_qlen), requests will be enqueued
to the backlog but still processed. In that case, the async callback
will also be called twice: first with err == -EINPROGRESS, which it
seems we can just ignore, then with err == 0.

Compared to Sabrina's original patch this version uses the new
tls_*crypt_async_wait() helpers and converts the EBUSY to
EINPROGRESS to avoid having to modify all the error handling
paths. The handling is identical.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-755
References: https://git.kernel.org/stable/c/13eca403876bbea3716e82cdfe6f1e6febb38754; https://git.kernel.org/stable/c/3ade391adc584f17b5570fd205de3ad029090368; https://git.kernel.org/stable/c/[PII_REDACTED]188741055d27b955db[PII_REDACTED]e3
CVE: CVE-2024-26585
Published: 2024-02-21
Description: In the Linux kernel, the following vulnerability has been resolved:

tls: fix race between tx work scheduling and socket close

Similarly to previous commit, the submitting thread (recvmsg/sendmsg)
may exit as soon as the async crypto handler calls complete().
Reorder scheduling the work before calling complete().
This seems more logical in the first place, as it's
the inverse order of what the submitting thread will do.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: https://git.kernel.org/stable/c/196f198ca6fce04ba6ce262f5a0e4d567d7d219d; https://git.kernel.org/stable/c/6db22d6c7a6dc914b12c0469b94eb639b6a8a146; https://git.kernel.org/stable/c/dd32621f19243f89ce830919496a5dcc2158aa33
CVE: CVE-2022-45169
Published: 2024-02-21
Description: An issue was discovered in LIVEBOX Collaboration vDesk through v031. A URL Redirection to an Untrusted Site (Open Redirect) can occur under the /api/v1/notification/createnotification endpoint, allowing an authenticated user to send an arbitrary push notification to any other user of the system. This push notification can include an (invisible) clickable link.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2022-45177
Published: 2024-02-21
Description: An issue was discovered in LIVEBOX Collaboration vDesk through v031. An Observable Response Discrepancy can occur under the /api/v1/vdeskintegration/user/isenableuser endpoint, the /api/v1/sharedsearch?search={NAME]+{SURNAME] endpoint, and the /login endpoint. The web application provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.
CVSS Score: 7.5 (HIGH)
CWE: CWE-203, CWE-94
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2022-45179
Published: 2024-02-21
Description: An issue was discovered in LIVEBOX Collaboration vDesk through v031. A basic XSS vulnerability exists under the /api/v1/vdeskintegration/todo/createorupdate endpoint via the title parameter and /dashboard/reminders. A remote user (authenticated to the product) can store arbitrary HTML code in the reminder section title in order to corrupt the web page (for example, by creating phishing sections to exfiltrate victims' credentials).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2023-46241
Published: 2024-02-21
Description: `discourse-microsoft-auth` is a plugin that enables authentication via Microsoft. On sites with the `discourse-microsoft-auth` plugin enabled, an attack can potentially take control of a victim's Discourse account. Sites that have configured their application's account type to any options other than `Accounts in this organizational directory only (O365 only - Single tenant)` are vulnerable. This vulnerability has been patched in commit c40665f44509724b64938c85def9fb2e79f62ec8 of `discourse-microsoft-auth`. A `microsoft_auth:revoke` rake task has also been added which will deactivate and log out all users that have connected their accounts to Microsoft. User API keys as well as API keys created by those users will also be revoked. The rake task will also remove the connection records to Microsoft for those users. This will allow affected users to re-verify their account emails as well as reconnect their Discourse account to Microsoft for authentication. As a workaround, disable the `discourse-microsoft-auth` plugin by setting the `microsoft_auth_enabled` site setting to `false`. Run the `microsoft_auth:log_out_users` rake task to log out all users with associated Microsoft accounts.

CVSS Score: 9.0 (CRITICAL)
CWE: CWE-863
References: https://github.com/discourse/discourse-microsoft-auth/commit/c40665f44509724b64938c85def9fb2e79f62ec8; https://github.com/discourse/discourse-microsoft-auth/security/advisories/GHSA-2w32-w539-3m7r; https://learn.microsoft.com/en-us/security/zero-trust/develop/identity-supported-account-types
CVE: CVE-2023-49100
Published: 2024-02-21
Description: Trusted Firmware-A (TF-A) before 2.10 has a potential read out-of-bounds in the SDEI service. The input parameter passed in register x1 is not validated well enough in the function sdei_interrupt_bind. The parameter is passed to a call to plat_ic_get_interrupt_type. It can be any arbitrary value passing checks in the function plat_ic_is_sgi. A compromised Normal World (Linux kernel) can enable a root-privileged attacker to issue arbitrary SMC calls. Using this primitive, he can control the content of registers x0 through x6, which are used to send parameters to TF-A. Out-of-bounds addresses can be read in the context of TF-A (EL3). Because the read value is never returned to non-secure memory or in registers, no leak is possible. An attacker can still crash TF-A, however.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://github.com/ARM-software/arm-trusted-firmware/blob/a05414bedc9b1cc35cf0795ce641b6b4db5bc97e/services/std_svc/sdei/sdei_main.c#L708; https://github.com/ARM-software/arm-trusted-firmware/blob/a05414bedc9b1cc35cf0795ce641b6b4db5bc97e/services/std_svc/sdei/sdei_main.c#L714; https://trustedfirmware-a.readthedocs.io/en/latest/security_advisories/security-advisory-tfv-11.html
CVE: CVE-2024-1474
Published: 2024-02-21
Description: In WS_FTP Server versions before 8.8.5, reflected cross-site scripting issues have been identified on various user supplied inputs on the WS_FTP Server administrative interface.
CVSS Score: 7.5 (HIGH)
CWE: CWE-79, CWE-79
References: https://community.progress.com/s/article/WS-FTP-Server-Service-Pack-February-2024; https://www.progress.com/ws_ftp; https://community.progress.com/s/article/WS-FTP-Server-Service-Pack-February-2024
CVE: CVE-2024-1700
Published: 2024-02-21
Description: A vulnerability, which was classified as problematic, was found in keerti1924 PHP-MYSQL-User-Login-System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument username with the input <script>alert("xss")</script> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-254388. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://github.com/omarexala/PHP-MYSQL-User-Login-System---Stored-XSS; https://vuldb.com/?ctiid.254388; https://vuldb.com/?id.254388
CVE: CVE-2024-1701
Published: 2024-02-21
Description: A vulnerability has been found in keerti1924 PHP-MYSQL-User-Login-System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /edit.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-254389 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://github.com/omarexala/PHP-MYSQL-User-Login-System---Broken-Access-Control; https://vuldb.com/?ctiid.254389; https://vuldb.com/?id.254389
CVE: CVE-2024-1708
Published: 2024-02-21
Description: ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker 

the ability to execute remote code or directly impact confidential data or critical systems.


CVSS Score: 8.4 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8; https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass; https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8
CVE: CVE-2024-1709
Published: 2024-02-21
Description: ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel

 vulnerability, which may allow an attacker direct access to confidential information or 

critical systems.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-288
References: https://github.com/rapid7/metasploit-framework/pull/18870; https://github.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-poc; https://techcrunch.com/2024/02/21/researchers-warn-high-risk-connectwise-flaw-under-attack-is-embarrassingly-easy-to-exploit/
CVE: CVE-2024-22220
Published: 2024-02-21
Description: An issue was discovered in Terminalfour 7.4 through 7.4.0004 QP3 and 8 through 8.3.19, and Formbank through 2.1.10-FINAL. Unauthenticated Stored Cross-Site Scripting can occur, with resultant Admin Session Hijacking. The attack vectors are Form Builder and Form Preview.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://docs.terminalfour.com/articles/release-notes-highlights/; https://docs.terminalfour.com/release-notes/security-notices/cve-2024-22220/; https://docs.terminalfour.com/articles/release-notes-highlights/
CVE: CVE-2024-27215
Published: 2024-02-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-1709. Reason: This candidate is a duplicate of CVE-2024-1709. Notes: All CVE users should reference CVE-2024-1709 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-1702
Published: 2024-02-21
Description: A vulnerability was found in keerti1924 PHP-MYSQL-User-Login-System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /edit.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-254390 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/omarexala/PHP-MYSQL-User-Login-System---SQL-Injection; https://vuldb.com/?ctiid.254390; https://vuldb.com/?id.254390
CVE: CVE-2024-1703
Published: 2024-02-21
Description: A vulnerability was found in ZhongBangKeJi CRMEB 5.2.2. It has been classified as problematic. This affects the function openfile of the file /adminapi/system/file/openfile. The manipulation leads to absolute path traversal. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254391. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-36, CWE-22
References: https://github.com/Echosssy/-CRMEB-Mall-commercial-version-of-any-file-read-vulnerability/blob/main/README.md; https://vuldb.com/?ctiid.254391; https://vuldb.com/?id.254391
CVE: CVE-2024-1714
Published: 2024-02-21
Description: An issue exists in all supported versions of IdentityIQ Lifecycle Manager that can result if an entitlement with a value containing leading or trailing whitespace is requested by an authenticated user in an access request.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: https://www.sailpoint.com/security-advisories/sailpoint-identityiq-access-request-for-entitlement-values-with-leading-trailing-whitespace-cve-2024-1714/; https://www.sailpoint.com/security-advisories/sailpoint-identityiq-access-request-for-entitlement-values-with-leading-trailing-whitespace-cve-2024-1714/
CVE: CVE-2024-20325
Published: 2024-02-21
Description: A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attacker to read and modify data in a repository that belongs to an internal service on an affected device.
 This vulnerability is due to insufficient access control implementations on cluster configuration CLI requests. An attacker could exploit this vulnerability by sending a cluster configuration CLI request to specific directories on an affected device. A successful exploit could allow the attacker to read and modify data that is handled by an internal service on the affected device.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-284
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-access-control-jJsZQMjj; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-access-control-jJsZQMjj
CVE: CVE-2024-23346
Published: 2024-02-21
Description: Pymatgen (Python Materials Genomics) is an open-source Python library for materials analysis. A critical security vulnerability exists in the `JonesFaithfulTransformation.from_transformation_str()` method within the `pymatgen` library prior to version 2024.2.20. This method insecurely utilizes `eval()` for processing input, enabling execution of arbitrary code when parsing untrusted input. Version 2024.2.20 fixes this issue.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/materialsproject/pymatgen/blob/master/pymatgen/symmetry/settings.py#L97C1-L111C108; https://github.com/materialsproject/pymatgen/commit/c231cbd3d5147ee920a37b6ee9dd236b376bcf5a; https://github.com/materialsproject/pymatgen/security/advisories/GHSA-vgv8-5cpj-qj2f
CVE: CVE-2024-24478
Published: 2024-02-21
Description: An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-680
References: https://gist.github.com/[PII_REDACTED]/e82c55147cd3cb62ef20cbdb0ec83694; https://github.com/wireshark/wireshark/commit/80a4dc55f4d2fa33c2b36a[PII_REDACTED]6d3faaef; https://gitlab.com/wireshark/wireshark/-/issues/19347
CVE: CVE-2024-25117
Published: 2024-02-21
Description: php-svg-lib is a scalable vector graphics (SVG) file parsing/rendering library. Prior to version 0.5.2, php-svg-lib fails to validate that font-family doesn't contain a PHAR url, which might leads to RCE on PHP < 8.0, and doesn't validate if external references are allowed. This might leads to bypass of restrictions or RCE on projects that are using it, if they do not strictly revalidate the fontName that is passed by php-svg-lib. The `Style::fromAttributes(`), or the `Style::parseCssStyle()` should check the content of the `font-family` and prevents it to use a PHAR url, to avoid passing an invalid and dangerous `fontName` value to other libraries. The same check as done in the `Style::fromStyleSheets` might be reused. Libraries using this library as a dependency might be vulnerable to some bypass of restrictions, or even remote code execution, if they do not double check the value of the `fontName` that is passed by php-svg-lib. Version 0.5.2 contains a fix for this issue.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-73, CWE-502, CWE-610
References: https://github.com/dompdf/php-svg-lib/commit/732faa9fb4309221e2bd9b2fda5de44f947133aa; https://github.com/dompdf/php-svg-lib/commit/8ffcc41bbde39f09f94b[PII_REDACTED]f12bbdce42; https://github.com/dompdf/php-svg-lib/security/advisories/GHSA-f3qr-qr4x-j273
CVE: CVE-2024-25288
Published: 2024-02-21
Description: SLIMS (Senayan Library Management Systems) 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://github.com/Vuln0wned/slims_owned/blob/main/slims/slims9-bulian-9.6.1-SQLI-pop_scope_vocabolary.md; https://github.com/slims/slims9_bulian/issues/229; https://github.com/Vuln0wned/slims_owned/blob/main/slims/slims9-bulian-9.6.1-SQLI-pop_scope_vocabolary.md
CVE: CVE-2024-26130
Published: 2024-02-21
Description: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to version 42.0.4, if `pkcs12.serialize_key_and_certificates` is called with both a certificate whose public key did not match the provided private key and an `encryption_algorithm` with `hmac_hash` set (via `PrivateFormat.PKCS12.encryption_builder().hmac_hash(...)`, then a NULL pointer dereference would occur, crashing the Python process. This has been resolved in version 42.0.4, the first version in which a `ValueError` is properly raised.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://github.com/pyca/cryptography/commit/97d231672763cdb5959a3b191e692a362f1b9e55; https://github.com/pyca/cryptography/pull/10423; https://github.com/pyca/cryptography/security/advisories/GHSA-6vqw-3v5j-54x4