deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-29159
Published: 2024-05-14
Description: HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_scaleoffset, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/; https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/
CVE: CVE-2024-29160
Published: 2024-05-14
Description: HDF5 through 1.14.3 contains a heap buffer overflow in H5HG__cache_heap_deserialize, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.
CVSS Score: 7.4 (HIGH)
CWE: CWE-122
References: https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/; https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/
CVE: CVE-2024-29161
Published: 2024-05-14
Description: HDF5 through 1.14.3 contains a heap buffer overflow in H5A__attr_release_table, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/; https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/
CVE: CVE-2024-29162
Published: 2024-05-14
Description: HDF5 through 1.13.3 and/or 1.14.2 contains a stack buffer overflow in H5HG_read, resulting in denial of service or potential code execution.
CVSS Score: 7.4 (HIGH)
CWE: CWE-122
References: https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/; https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/
CVE: CVE-2024-29163
Published: 2024-05-14
Description: HDF5 through 1.14.3 contains a heap buffer overflow in H5T__bit_find, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.
CVSS Score: 7.4 (HIGH)
CWE: CWE-122
References: https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/; https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/
CVE: CVE-2024-29164
Published: 2024-05-14
Description: HDF5 through 1.14.3 contains a stack buffer overflow in H5R__decode_heap, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/; https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/
CVE: CVE-2024-29165
Published: 2024-05-14
Description: HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_fletcher32, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.
CVSS Score: 7.4 (HIGH)
CWE: CWE-122
References: https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/; https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/
CVE: CVE-2024-29166
Published: 2024-05-14
Description: HDF5 through 1.14.3 contains a buffer overflow in H5O__linfo_decode, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-120
References: https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/; https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/
CVE: CVE-2024-29212
Published: 2024-05-14
Description: Due to an  unsafe de-serialization method used by the Veeam Service Provider Console(VSPC) server in communication between the management agent and its components, under certain conditions, it is possible to perform Remote Code Execution (RCE) on the VSPC server machine.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-502
References: https://www.veeam.com/kb4575; https://www.veeam.com/kb4575
CVE: CVE-2024-29513
Published: 2024-05-14
Description: An issue in briscKernelDriver.sys in BlueRiSC WindowsSCOPE Cyber Forensics before 3.3 allows a local attacker to execute arbitrary code within the driver and create a local denial-of-service condition due to an improper DACL being applied to the device the driver creates.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://github.com/dru1d-foofus/briscKernelDriver; https://github.com/dru1d-foofus/briscKernelDriver
CVE: CVE-2024-29800
Published: 2024-05-14
Description: Deserialization of Untrusted Data vulnerability in Timber Team & Contributors Timber.This issue affects Timber: from n/a through 1.23.0.
CVSS Score: 8.0 (HIGH)
CWE: CWE-502
References: https://patchstack.com/database/vulnerability/timber-library/wordpress-timber-plugin-1-23-0-deserialization-of-untrusted-data-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/timber-library/wordpress-timber-plugin-1-23-0-deserialization-of-untrusted-data-vulnerability?_s_id=cve
CVE: CVE-2024-29857
Published: 2024-05-14
Description: An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9029857; https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9029857; https://www.bouncycastle.org/latest_releases.html
CVE: CVE-2024-29894
Published: 2024-05-14
Description: Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 contain a residual cross-site scripting vulnerability caused by an incomplete fix for CVE-2023-50250. `raise_message_javascript` from `lib/functions.php` now uses purify.js to fix CVE-2023-50250 (among others). However, it still generates the code out of unescaped PHP variables `$title` and `$header`. If those variables contain single quotes, they can be used to inject JavaScript code. An attacker exploiting this vulnerability could execute actions on behalf of other users. This ability to impersonate users could lead to unauthorized changes to settings. Version 1.2.27 fixes this issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-116, CWE-79
References: https://github.com/Cacti/cacti/security/advisories/GHSA-grj5-8fcj-34gh; https://github.com/Cacti/cacti/security/advisories/GHSA-xwqc-7jc4-xm73; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RBEOAFKRARQHTDIYSL723XAFJ2Q6624X/
CVE: CVE-2024-29895
Published: 2024-05-14
Description: Cacti provides an operational monitoring and fault management framework. A command injection vulnerability on the 1.3.x DEV branch allows any unauthenticated user to execute arbitrary command on the server when `register_argc_argv` option of PHP is `On`. In `cmd_realtime.php` line 119, the `$poller_id` used as part of the command execution is sourced from `$_SERVER['argv']`, which can be controlled by URL when `register_argc_argv` option of PHP is `On`. And this option is `On` by default in many environments such as the main PHP Docker image for PHP. Commit 53e8014d1f082034e0646edc6286cde3800c683d contains a patch for the issue, but this commit was reverted in commit 99633903cad0de5ace636249de16f77e57a3c8fc.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-77
References: https://github.com/Cacti/cacti/blob/[PII_REDACTED]89763d411a68d35e3cda98fd9cfd18/cmd_realtime.php#L119; https://github.com/Cacti/cacti/commit/53e8014d1f082034e0646edc6286cde3800c683d; https://github.com/Cacti/cacti/commit/99633903cad0de5ace636249de16f77e57a3c8fc
CVE: CVE-2024-2257
Published: 2024-05-14
Description: This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L;  Firmware version : v3.2.02) due to improper implementation of password policies. An attacker with physical access could exploit this by creating password that do not adhere to the defined security standards/policy on the vulnerable system.

Successful exploitation of this vulnerability could allow the attacker to expose the router to potential security threats.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0158; https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0158
CVE: CVE-2024-2290
Published: 2024-05-14
Description: The Advanced Ads plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.52.1 via deserialization of untrusted input in the 'placement_slug' parameter. This makes it possible for authenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: https://plugins.trac.wordpress.org/browser/advanced-ads/trunk/modules/import-export/classes/import.php#L155; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3081914%40advanced-ads&new=3081914%40advanced-ads&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/f64336f7-ab2a-4e22-a76f-d077c51f9c57?source=cve
CVE: CVE-2024-2299
Published: 2024-05-14
Description: A stored Cross-Site Scripting (XSS) vulnerability exists in the parisneo/lollms-webui application due to improper validation of uploaded files in the profile picture upload functionality. Attackers can exploit this vulnerability by uploading malicious HTML files containing JavaScript code, which is executed when the file is accessed. This vulnerability is remotely exploitable via Cross-Site Request Forgery (CSRF), allowing attackers to perform actions on behalf of authenticated users and potentially leading to unauthorized access to sensitive information within the Lollms-webui application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://huntr.com/bounties/f1adaac0-b9ed-4093-a0f3-2d0a4ecba398; https://huntr.com/bounties/f1adaac0-b9ed-4093-a0f3-2d0a4ecba398
CVE: CVE-2024-2441
Published: 2024-05-14
Description: The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8 allows direct access to menus, allowing an authenticated user with subscriber privileges or above, to bypass authorization and access settings of the VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8's they shouldn't be allowed to.
CVSS Score: 8.1 (HIGH)
CWE: CWE-285
References: https://wpscan.com/vulnerability/9647e273-5724-4a02-868d-9b79f4bb2b79/; https://wpscan.com/vulnerability/9647e273-5724-4a02-868d-9b79f4bb2b79/
CVE: CVE-2024-2454
Published: 2024-05-14
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.11 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. The pins endpoint is susceptible to DoS through a crafted request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770, CWE-770
References: https://gitlab.com/gitlab-org/gitlab/-/issues/450405; https://hackerone.com/reports/2408226; https://gitlab.com/gitlab-org/gitlab/-/issues/450405
CVE: CVE-2024-2651
Published: 2024-05-14
Description: An issue has been discovered in GitLab CE/EE affecting all versions before 16.9.7, all versions starting from 16.10 before 16.10.5, all versions starting from 16.11 before 16.11.2. It was possible for an attacker to cause a denial of service using maliciously crafted markdown content.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1333, CWE-1333
References: https://gitlab.com/gitlab-org/gitlab/-/issues/450830; https://hackerone.com/reports/2408619; https://gitlab.com/gitlab-org/gitlab/-/issues/450830
CVE: CVE-2024-2662
Published: 2024-05-14
Description: The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to command injection in all versions up to, and including, 1.5.102. This is due to insufficient filtering of template attributes during the creation of HTML for custom widgets This makes it possible for authenticated attackers, with administrator-level access and above, to execute arbitrary commands on the server.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://plugins.trac.wordpress.org/changeset/3071404/unlimited-elements-for-elementor/trunk/inc_php/unitecreator_template_engine.class.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/58492dbb-b9e0-4477-b85d-ace06dba954c?source=cve; https://plugins.trac.wordpress.org/changeset/3071404/unlimited-elements-for-elementor/trunk/inc_php/unitecreator_template_engine.class.php
CVE: CVE-2024-2749
Published: 2024-05-14
Description: The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8's access control mechanism fails to properly restrict access to its settings, permitting any users that can access a menu to manipulate requests and perform unauthorized actions such as editing, renaming or deleting (categories for example) despite initial settings prohibiting such access. This vulnerability resembles broken access control, enabling unauthorized users to modify critical VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8 configurations.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-284
References: https://wpscan.com/vulnerability/c0640d3a-80b3-4cad-a3cf-fb5d86558e91/; https://wpscan.com/vulnerability/c0640d3a-80b3-4cad-a3cf-fb5d86558e91/
CVE: CVE-2024-2785
Published: 2024-05-14
Description: The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Age Gate widget in all versions up to, and including, 5.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/the-plus-addons-for-elementor-page-builder/tags/5.5.0/modules/widgets/tp_age_gate.php?annotate=blame#L2389; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3076733%40the-plus-addons-for-elementor-page-builder&new=3076733%40the-plus-addons-for-elementor-page-builder&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/d0117436-7a2a-42f3-8c05-75dfddfb9d09?source=cve
CVE: CVE-2024-2846
Published: 2024-05-14
Description: The Visual Footer Credit Remover plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'selector' parameter in all versions up to, and including, 2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3081401%40visual-footer-credit-remover&new=3081401%40visual-footer-credit-remover&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/9fcb65a0-4218-4728-9c29-0d1a03f438a6?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3081401%40visual-footer-credit-remover&new=3081401%40visual-footer-credit-remover&sfp_email=&sfph_mail=
CVE: CVE-2024-2923
Published: 2024-05-14
Description: The Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's text effect widget in all versions up to, and including, 1.1.37 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3078558%40magical-addons-for-elementor&new=3078558%40magical-addons-for-elementor&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/733f5ded-e8cb-4895-b938-889cea32f027?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3078558%40magical-addons-for-elementor&new=3078558%40magical-addons-for-elementor&sfp_email=&sfph_mail=
CVE: CVE-2024-30055
Published: 2024-05-14
Description: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-451
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30055; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30055
CVE: CVE-2024-30171
Published: 2024-05-14
Description: An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-203
References: https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030171; https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030171; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-30172
Published: 2024-05-14
Description: An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key.
CVSS Score: 7.5 (HIGH)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.bouncycastle.org/latest_releases.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-30258
Published: 2024-05-14
Description: FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves a malformed `RTPS` packet, the subscriber crashes when creating `pthread`. This can remotely crash any Fast-DDS process, potentially leading to a DOS attack. Versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8 contain a patch for the issue.

CVSS Score: 8.2 (HIGH)
CWE: CWE-20
References: https://drive.google.com/file/d/19W5UC52hPnAqVq_boZWO45d1TJ4WoCSh/view?usp=sharing; https://github.com/eProsima/Fast-DDS/commit/65236f93e9c4ea3ff9a49fba4dfd9e43eb94037b; https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-53xw-465j-rxfh
CVE: CVE-2024-30259
Published: 2024-05-14
Description: FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves malformed `RTPS` packet, heap buffer overflow occurs on the subscriber. This can remotely crash any Fast-DDS process, potentially leading to a DOS attack. Versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8 contain a patch for the issue.

CVSS Score: 8.2 (HIGH)
CWE: CWE-120, CWE-122, CWE-787
References: https://drive.google.com/file/d/1Y2bGvP3UIOJCLh_XEURLdhrM2Sznlvlp/view?usp=sharing; https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-qcj9-939p-p662; https://vimeo.com/907641887?share=copy
CVE: CVE-2024-30268
Published: 2024-05-14
Description: Cacti provides an operational monitoring and fault management framework. A reflected cross-site scripting vulnerability on the 1.3.x DEV branch allows attackers to obtain cookies of administrator and other users and fake their login using obtained cookies. This issue is fixed in commit a38b9046e9772612fda847b46308f9391a49891e.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Cacti/cacti/blob/08497b8bcc6a6037f7b1aae303ad8f7dfaf7364e/settings.php#L66; https://github.com/Cacti/cacti/commit/a38b9046e9772612fda847b46308f9391a49891e; https://github.com/Cacti/cacti/security/advisories/GHSA-9m3v-whmr-pc2q
CVE: CVE-2024-30801
Published: 2024-05-14
Description: SQL Injection vulnerability in Cloud based customer service management platform v.1.0.0 allows a local attacker to execute arbitrary code via a crafted payload to Login.asp component.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: http://cloud.com; http://www.minipacs.com/ylqxrj; https://github.com/WarmBrew/web_vul/blob/main/Cloud%20based%20customer%20service/SQLi.md
CVE: CVE-2024-30802
Published: 2024-05-14
Description: An issue in Vehicle Management System 7.31.0.3_20230412 allows an attacker to escalate privileges via the login.html component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1393
References: https://github.com/WarmBrew/web_vul/blob/main/CVES/CVE-2024-30802.md; https://github.com/WarmBrew/web_vul/blob/main/TTX.md; https://github.com/WarmBrew/web_vul/blob/main/TTX.md
CVE: CVE-2024-31113
Published: 2024-05-14
Description: Cross-Site Request Forgery (CSRF) vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through 3.2.11.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/easy-digital-downloads/wordpress-easy-digital-downloads-plugin-3-2-11-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/easy-digital-downloads/wordpress-easy-digital-downloads-plugin-3-2-11-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2024-31377
Published: 2024-05-14
Description: Unrestricted Upload of File with Dangerous Type vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus.This issue affects WP Photo Album Plus: from n/a through 8.7.01.001.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-434
References: https://patchstack.com/database/vulnerability/wp-photo-album-plus/wordpress-wp-photo-album-plus-plugin-8-7-01-001-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-photo-album-plus/wordpress-wp-photo-album-plus-plugin-8-7-01-001-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve
CVE: CVE-2024-31441
Published: 2024-05-14
Description: DataEase is an open source data visualization analysis tool. Due to the lack of restrictions on the connection parameters for the ClickHouse data source, it is possible to exploit certain malicious parameters to achieve arbitrary file reading. The vulnerability has been fixed in v1.18.19.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863, CWE-863
References: https://github.com/dataease/dataease/security/advisories/GHSA-h7hj-7wg6-p5wh; https://github.com/dataease/dataease/security/advisories/GHSA-h7hj-7wg6-p5wh
CVE: CVE-2024-31443
Published: 2024-05-14
Description: Cacti provides an operational monitoring and fault management framework. Prior to 1.2.27, some of the data stored in `form_save()` function in `data_queries.php` is not thoroughly checked and is used to concatenate the HTML statement in `grow_right_pane_tree()` function from `lib/html.php` , finally resulting in cross-site scripting. Version 1.2.27 contains a patch for the issue.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Cacti/cacti/commit/f946fa537d19678f938ddbd784a10e3290d275cf; https://github.com/Cacti/cacti/security/advisories/GHSA-rqc8-78cm-85j3; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RBEOAFKRARQHTDIYSL723XAFJ2Q6624X/
CVE: CVE-2024-31444
Published: 2024-05-14
Description: Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data stored in `automation_tree_rules_form_save()` function in `automation_tree_rules.php` is not thoroughly checked and is used to concatenate the HTML statement in `form_confirm()` function from `lib/html.php` , finally resulting in cross-site scripting. Version 1.2.27 contains a patch for the issue.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Cacti/cacti/security/advisories/GHSA-p4ch-7hjw-6m87; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RBEOAFKRARQHTDIYSL723XAFJ2Q6624X/; https://github.com/Cacti/cacti/security/advisories/GHSA-p4ch-7hjw-6m87