deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-43647
Published: 2024-09-10
Description: A vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0) (All versions), SIMATIC S7-200 SMART CPU CR60 (6ES7288-1CR60-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA1) (All versions), SIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA1) (All versions), SIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40-0AA1) (All versions), SIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA1) (All versions), SIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA0) (All versions), SIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA1) (All versions), SIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA0) (All versions), SIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA1) (All versions), SIMATIC S7-200 SMART CPU ST40 (6ES7288-1ST40-0AA0) (All versions), SIMATIC S7-200 SMART CPU ST40 (6ES7288-1ST40-0AA1) (All versions), SIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA0) (All versions), SIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA1) (All versions). Affected devices do not properly handle TCP packets with an incorrect structure. This could allow an unauthenticated remote attacker to cause a denial of service condition. To restore normal operations, the network cable of the device needs to be unplugged and re-plugged.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://cert-portal.siemens.com/productcert/html/ssa-969738.html
CVE: CVE-2024-43781
Published: 2024-09-10
Description: A vulnerability has been identified in SINUMERIK 828D V4 (All versions < V4.95 SP3), SINUMERIK 840D sl V4 (All versions < V4.95 SP3 in connection with using Create MyConfig (CMC) <= V4.8 SP1 HF6), SINUMERIK ONE (All versions < V6.23 in connection with using Create MyConfig (CMC) <= V6.6), SINUMERIK ONE (All versions < V6.15 SP4 in connection with using Create MyConfig (CMC) <= V6.6). Affected systems, that have been provisioned with Create MyConfig (CMC), contain a Insertion of Sensitive Information into Log File vulnerability. This could allow a local authenticated user with low privileges to read sensitive information and thus circumvent access restrictions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: https://cert-portal.siemens.com/productcert/html/ssa-097786.html
CVE: CVE-2024-44087
Published: 2024-09-10
Description: A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6.0 (All versions < V6.0 SP12 Upd3), Automation License Manager V6.2 (All versions < V6.2 Upd3). Affected applications do not properly validate certain fields in incoming network packets on port 4410/tcp. This could allow an unauthenticated remote attacker to cause an integer overflow and crash of the application. This denial of service condition could prevent legitimate users from using subsequent products that rely on the affected application for license verification.
CVSS Score: 8.6 (HIGH)
CWE: CWE-190
References: https://cert-portal.siemens.com/productcert/html/ssa-103653.html
CVE: CVE-2024-45032
Published: 2024-09-10
Description: A vulnerability has been identified in Industrial Edge Management Pro (All versions < V1.9.5), Industrial Edge Management Virtual (All versions < V2.3.1-1). Affected components do not properly validate the device tokens. This could allow an unauthenticated remote attacker to impersonate other devices onboarded to the system.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-639
References: https://cert-portal.siemens.com/productcert/html/ssa-359713.html
CVE: CVE-2024-8241
Published: 2024-09-10
Description: The Nova Blocks by Pixelgrade plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' attribute of the 'wp:separator' Gutenberg block in all versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pixelgrade/nova-blocks/commit/655b5b804306c3ca3a59707cc2f12098e193b4ca; https://plugins.trac.wordpress.org/changeset/3148752/; https://wordpress.org/plugins/nova-blocks/#developers
CVE: CVE-2024-8543
Published: 2024-09-10
Description: The Slider comparison image before and after plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [sciba] shortcode in all versions up to, and including, 0.8.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/slider-comparison-image-before-and-after/trunk/sciba.php#L39; https://www.wordfence.com/threat-intel/vulnerabilities/id/14ab5d7c-ab46-4a53-b0d2-8b331e204cf3?source=cve
CVE: CVE-2024-8645
Published: 2024-09-10
Description: SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-824, CWE-824
References: https://gitlab.com/wireshark/wireshark/-/issues/19559; https://www.wireshark.org/security/wnpa-sec-2024-10.html; https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html
CVE: CVE-2024-40754
Published: 2024-09-10
Description: Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects Escargot: 4.0.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122
References: https://github.com/Samsung/escargot/pull/1369
CVE: CVE-2024-45845
Published: 2024-09-10
Description: Rejected reason: DO NOT USE THIS CVE RECORD. Consult IDs: CVE-2024-45593. Reason: This record is a reservation duplicate of CVE-2024-45593. Notes: All CVE users should reference CVE-2024-45593 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2024-7770
Published: 2024-09-10
Description: The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload' function in all versions up to, and including, 6.5.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, and granted upload permissions by an administrator, to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://plugins.trac.wordpress.org/browser/file-manager/trunk/backend/app/Http/Controllers/FileManagerController.php#L26; https://plugins.trac.wordpress.org/browser/file-manager/trunk/libs/elFinder/php/elFinder.class.php#L1210; https://plugins.trac.wordpress.org/browser/file-manager/trunk/libs/elFinder/php/elFinder.class.php#L3257
CVE: CVE-2024-6282
Published: 2024-09-10
Description: The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-jltma-wrapper-link element in all versions up to, and including 2.0.6.4 due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user clicks on the injected link.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/master-addons/tags/2.0.6.2/assets/js/master-addons-scripts.js#L3398; https://plugins.trac.wordpress.org/changeset/3146230/; https://www.wordfence.com/threat-intel/vulnerabilities/id/8bab0acc-5a5d-4dd4-9201-199b7f5aaa69?source=cve
CVE: CVE-2024-8369
Published: 2024-09-10
Description: The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access to Private or Password-protected events due to missing authorization checks in all versions up to, and including, 4.0.4.3. This makes it possible for unauthenticated attackers to view private or password-protected events.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://wordpress.org/plugins/eventprime-event-calendar-management/; https://www.wordfence.com/threat-intel/vulnerabilities/id/97174ec0-a2b7-455e-9bf8-b6f51546beee?source=cve
CVE: CVE-2023-37226
Published: 2024-09-10
Description: Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://code-white.com; https://code-white.com/public-vulnerability-list/; https://docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF14.htm
CVE: CVE-2023-37227
Published: 2024-09-10
Description: Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://code-white.com; https://code-white.com/public-vulnerability-list/; https://docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF13.htm
CVE: CVE-2023-37229
Published: 2024-09-10
Description: Loftware Spectrum before 5.1 allows SSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-918
References: https://code-white.com; https://code-white.com/public-vulnerability-list/
CVE: CVE-2023-37230
Published: 2024-09-10
Description: Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-918
References: https://code-white.com; https://code-white.com/public-vulnerability-list/
CVE: CVE-2023-37231
Published: 2024-09-10
Description: Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-259
References: https://code-white.com; https://code-white.com/public-vulnerability-list/; https://docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF14.htm
CVE: CVE-2024-37728
Published: 2024-09-10
Description: Arbitrary File Read vulnerability in Xi'an Daxi Information Technology Co., Ltd OfficeWeb365 v.7.18.23.0 and v8.6.1.0 allows a remote attacker to obtain sensitive information via the "Pic/Indexes" interface
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-922
References: https://github.com/wy876/POC/blob/main/OfficeWeb365/OfficeWeb365_%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md; https://github.com/xuetang1125/OfficeWeb365/blob/main/OfficeWeb365_%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E%20.md
CVE: CVE-2024-44867
Published: 2024-09-10
Description: phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component /autoload/file.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/ChengZyin/CVE-2024-44867/blob/main/CVE-2024-44867.md; https://github.com/ChengZyin/Exploit/blob/ChengZyin-patch-1/README.md
CVE: CVE-2024-8443
Published: 2024-09-10
Description: A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the `pkcs15-init` tool may lead to out-of-bound rights, possibly resulting in arbitrary code execution.
CVSS Score: 2.9 (LOW)
CWE: CWE-122, CWE-787
References: https://access.redhat.com/security/cve/CVE-2024-8443; https://bugzilla.redhat.com/show_bug.cgi?id=2310494; https://lists.debian.org/debian-lts-announce/2024/12/msg00026.html
CVE: CVE-2024-8654
Published: 2024-09-10
Description: MongoDB Server may access non-initialized region of memory leading to unexpected behaviour when zero arguments are called in internal aggregation stage. This issue affected MongoDB Server v6.0 version 6.0.3.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-908
References: https://jira.mongodb.org/browse/SERVER-71477; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-45856
Published: 2024-09-10
Description: An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, FortiClientMac 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.4, FortiClientLinux 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.4, FortiClientAndroid 6.4 all versions, 7.0 all versions, 7.2.0 and FortiClientiOS 5.6 all versions, 6.0.0 through 6.0.1, 7.0.0 through 7.0.6 SAML SSO feature may allow an unauthenticated attacker to man-in-the-middle the communication between the FortiClient and  both the service provider and the identity provider.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-295
References: https://fortiguard.fortinet.com/psirt/FG-IR-22-230
CVE: CVE-2023-44254
Published: 2024-09-10
Description: An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer version 7.4.1 and before 7.2.5 and FortiManager version 7.4.1 and before 7.2.5 may allow a remote attacker with low privileges to read sensitive data via a crafted HTTP request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://fortiguard.com/psirt/FG-IR-23-204
CVE: CVE-2024-21753
Published: 2024-09-10
Description: A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiClientEMS versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.13, 6.4.0 through 6.4.9, 6.2.0 through 6.2.9, 6.0.0 through 6.0.8, 1.2.1 through 1.2.5 allows attacker to perform a denial of service, read or write a limited number of files via specially crafted HTTP requests
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://fortiguard.fortinet.com/psirt/FG-IR-23-362
CVE: CVE-2024-23184
Published: 2024-09-10
Description: Having a large number of address headers (From, To, Cc, Bcc, etc.) becomes excessively CPU intensive. With 100k header lines CPU usage is already 12 seconds, and in a production environment we observed 500k header lines taking 18 minutes to parse. Since this can be triggered by external actors sending emails to a victim, this is a security issue. An external attacker can send specially crafted messages that consume target system resources and cause outage. One can implement restrictions on address headers on MTA component preceding Dovecot. No publicly available exploits are known.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-770
References: https://documentation.open-xchange.com/dovecot/security/advisories/csaf/2024/oxdc-adv-2024-0002.json; http://seclists.org/fulldisclosure/2024/Aug/17; http://www.openwall.com/lists/oss-security/2024/08/15/3
CVE: CVE-2024-23185
Published: 2024-09-10
Description: Very large headers can cause resource exhaustion when parsing message. The message-parser normally reads reasonably sized chunks of the message. However, when it feeds them to message-header-parser, it starts building up "full_value" buffer out of the smaller chunks. The full_value buffer has no size limit, so large headers can cause large memory usage. It doesn't matter whether it's a single long header line, or a single header split into multiple lines. This bug exists in all Dovecot versions. Incoming mails typically have some size limits set by MTA, so even largest possible header size may still fit into Dovecot's vsz_limit. So attackers probably can't DoS a victim user this way. A user could APPEND larger mails though, allowing them to DoS themselves (although maybe cause some memory issues for the backend in general). One can implement restrictions on headers on MTA component preceding Dovecot. No publicly available exploits are known.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://documentation.open-xchange.com/dovecot/security/advisories/csaf/2024/oxdc-adv-2024-0003.json; http://seclists.org/fulldisclosure/2024/Aug/18; http://www.openwall.com/lists/oss-security/2024/08/15/4
CVE: CVE-2024-25073
Published: 2024-09-10
Description: An issue was discovered in Samsung Semiconductor Mobile Processor and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, Exynos Modem 5300. The baseband software does not properly check a pointer specified by the CC (Call Control module), which can lead to Denial of Service (Untrusted Pointer Dereference).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-25073/
CVE: CVE-2024-25074
Published: 2024-09-10
Description: An issue was discovered in Samsung Semiconductor Mobile Processor and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, Exynos Modem 5300. The baseband software does not properly check a pointer specified by the SM (Session Management module), which can lead to Denial of Service (Untrusted Pointer Dereference).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-763
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-25074/
CVE: CVE-2024-27257
Published: 2024-09-10
Description: IBM OpenPages 8.3 and 9.0 potentially exposes information about client-side source code through use of JavaScript source maps to unauthorized users.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-540
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/283966; https://www.ibm.com/support/pages/node/7167702
CVE: CVE-2024-31489
Published: 2024-09-10
Description: AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.0.11,  FortiClientLinux 7.2.0, 7.0.0 through 7.0.11 and FortiClientMac 7.0.0 through 7.0.11, 7.2.0 through 7.2.4 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the FortiGate and the FortiClient during the ZTNA tunnel creation
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-295
References: https://fortiguard.fortinet.com/psirt/FG-IR-22-282
CVE: CVE-2024-31490
Published: 2024-09-10
Description: An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0 all versions, FortiSandbox 3.2.2 through 3.2.4, FortiSandbox 3.1.5 allows attacker to information disclosure via HTTP get requests.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://fortiguard.com/psirt/FG-IR-24-051
CVE: CVE-2024-33508
Published: 2024-09-10
Description: An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortinet FortiClientEMS 7.2.0 through 7.2.4, 7.0.0 through 7.0.12 may allow an unauthenticated attacker to execute limited and temporary operations on the underlying database via crafted requests.
CVSS Score: 7.3 (HIGH)
CWE: CWE-77
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-123
CVE: CVE-2024-35282
Published: 2024-09-10
Description: A cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting FortiClient VPN iOS 7.2 all versions, 7.0 all versions, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an unauthenticated attacker that has physical access to a jailbroken device to obtain cleartext passwords via keychain dump.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-316, CWE-312
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-139
CVE: CVE-2024-36511
Published: 2024-09-10
Description: An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions when cookie security policy is enabled may allow an attacker, under specific conditions, to retrieve the initial encrypted and signed cookie protected by the feature
CVSS Score: 3.7 (LOW)
CWE: CWE-358
References: https://fortiguard.fortinet.com/psirt/FG-IR-22-256
CVE: CVE-2024-42423
Published: 2024-09-10
Description: Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized actions leading to information disclosure and tampering.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-863
References: https://www.dell.com/support/kbdoc/en-us/000225289/dsa-2024-229-security-update-for-dell-thinos-vulnerabilities
CVE: CVE-2024-43796
Published: 2024-09-10
Description: Express.js minimalist web framework for node. In express < 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect() may execute untrusted code. This issue is patched in express 4.20.0.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-79
References: https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553; https://github.com/expressjs/express/security/advisories/GHSA-qw6h-vgh9-j6wx
CVE: CVE-2024-43799
Published: 2024-09-10
Description: Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issue is patched in send 0.19.0.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-79
References: https://github.com/pillarjs/send/commit/ae4f2989491b392ae2ef3b0015a019770ae65d35; https://github.com/pillarjs/send/security/advisories/GHSA-m6fv-jmcg-4jfg; https://lists.debian.org/debian-lts-announce/2025/06/msg00022.html
CVE: CVE-2024-43800
Published: 2024-09-10
Description: serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect() may execute untrusted code. This issue is patched in serve-static 1.16.0.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-79
References: https://github.com/expressjs/serve-static/commit/0c11fad159898cdc69fd9ab63269b72468ecaf6b; https://github.com/expressjs/serve-static/commit/ce730896fddce1588111d9ef6fdf20896de5c6fa; https://github.com/expressjs/serve-static/security/advisories/GHSA-cm22-4g7w-348p
CVE: CVE-2024-45044
Published: 2024-09-10
Description: Bareos is open source software for backup, archiving, and recovery of data for operating systems. When a command ACL is in place and a user executes a command in bconsole using an abbreviation (i.e. "w" for "whoami") the ACL check did not apply to the full form (i.e. "whoami") but to the abbreviated form (i.e. "w"). If the command ACL is configured with negative ACL that should forbid using the "whoami" command, you could still use "w" or "who" as a command successfully. Fixes for the problem are shipped in Bareos versions 23.0.4, 22.1.6 and 21.1.11. If only positive command ACLs are used without any negation, the problem does not occur.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://github.com/bareos/bareos/commit/2a026698b87d13bd1c6275726b5e826702f81dd5; https://github.com/bareos/bareos/pull/1875; https://github.com/bareos/bareos/security/advisories/GHSA-jfww-q346-r2r8
CVE: CVE-2024-45323
Published: 2024-09-10
Description: An improper access control vulnerability [CWE-284] in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin with REST API permissions in his profile and restricted to a specific organization to access backend logs that include information related to other organizations.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-371