deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-10570
Published: 2024-11-26
Description: The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to unauthorized SQL Injection due to an authorization bypass via reverse DNS spoofing on the checkWithoutToken function in all versions up to, and including, 2.145, as well as insufficient input sanitization and validation. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/security-malware-firewall/tags/2.145/lib/CleantalkSP/Common/RemoteCalls.php#L59; https://www.wordfence.com/threat-intel/vulnerabilities/id/2187311d-6651-4eca-806d-aa2ff9fae4e2?source=cve
CVE: CVE-2024-10781
Published: 2024-11-26
Description: The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an missing empty value check on the 'api_key' value in the 'perform' function in all versions up to, and including, 6.44. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins which can be leveraged to achieve remote code execution if another vulnerable plugin is installed and activated.
CVSS Score: 8.1 (HIGH)
CWE: CWE-703
References: https://plugins.trac.wordpress.org/browser/cleantalk-spam-protect/tags/6.44/lib/Cleantalk/ApbctWP/RemoteCalls.php#L95; https://plugins.trac.wordpress.org/browser/cleantalk-spam-protect/tags/6.44/lib/Cleantalk/ApbctWP/RemoteCalls.php#L96; https://plugins.trac.wordpress.org/changeset/3188546/cleantalk-spam-protect#file653
CVE: CVE-2024-10857
Published: 2024-11-26
Description: The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.9 via the handle_downloads() function due to insufficient file path validation/sanitization. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-35
References: https://plugins.trac.wordpress.org/changeset/3195423/product-input-fields-for-woocommerce/trunk?contextall=1&old=3173573&old_path=%2Fproduct-input-fields-for-woocommerce%2Ftrunk; https://www.wordfence.com/threat-intel/vulnerabilities/id/e45207af-3886-4d95-9cd8-5ecdc683dc58?source=cve
CVE: CVE-2024-11002
Published: 2024-11-26
Description: The The InPost Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution via the inpost_gallery_get_shortcode_template AJAX action in all versions up to, and including, 2.1.4.2. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-94
References: https://plugins.trac.wordpress.org/browser/inpost-gallery/trunk/index.php#L323; https://plugins.trac.wordpress.org/changeset/3192113/; https://wordpress.org/plugins/inpost-gallery/#developers
CVE: CVE-2024-6476
Published: 2024-11-26
Description: Gee-netics, member of the AXIS Camera Station Pro Bug Bounty Program has found that it is possible for a non-admin user to gain system privileges by redirecting a file deletion upon service restart. 
 Axis has released patched versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-276
References: https://www.axis.com/dam/public/e5/24/82/cve-2024-6476pdf-en-US-455104.pdf
CVE: CVE-2024-6749
Published: 2024-11-26
Description: Seth Fogie, member of the AXIS Camera Station Pro Bug Bounty Program, has found that the Incident report feature may expose sensitive credentials on the AXIS Camera Station windows client. If Incident report is not being used with credentials configured this flaw does not apply. 

 Axis has released patched versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-522
References: https://www.axis.com/dam/public/e6/e8/1e/cve-2024-6749-en-US-455106.pdf
CVE: CVE-2024-11202
Published: 2024-11-26
Description: Multiple plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the cminds_free_guide shortcode in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/cm-business-directory/trunk/package/cminds-free.php#L1465; https://plugins.trac.wordpress.org/browser/cm-email-blacklist/trunk/package/cminds-free.php#L1465; https://plugins.trac.wordpress.org/browser/cm-header-footer-script-loader/trunk/package/cminds-free.php#L1465
CVE: CVE-2024-28038
Published: 2024-11-26
Description: The web interface of the affected devices processes a cookie value improperly, leading to a stack buffer overflow. More precisely, giving too long character string to MFPSESSIONID parameter results in a stack buffer overflow. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-121
References: https://global.sharp/products/copier/info/info_security_2024-05.html; https://jp.sharp/business/print/information/info_security_2024-05.html; https://jvn.jp/en/vu/JVNVU93051062/
CVE: CVE-2024-28955
Published: 2024-11-26
Description: Affected devices create coredump files when crashed, storing them with world-readable permission. Any local user of the device can examine the coredump files, and research the memory contents. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-732
References: https://global.sharp/products/copier/info/info_security_2024-05.html; https://jp.sharp/business/print/information/info_security_2024-05.html; https://jvn.jp/en/vu/JVNVU93051062/
CVE: CVE-2024-29146
Published: 2024-11-26
Description: User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump file. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-312
References: https://global.sharp/products/copier/info/info_security_2024-05.html; https://jp.sharp/business/print/information/info_security_2024-05.html; https://jvn.jp/en/vu/JVNVU93051062/
CVE: CVE-2024-29978
Published: 2024-11-26
Description: User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump file. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-256
References: https://global.sharp/products/copier/info/info_security_2024-05.html; https://jp.sharp/business/print/information/info_security_2024-05.html; https://jvn.jp/en/vu/JVNVU93051062/
CVE: CVE-2024-32151
Published: 2024-11-26
Description: User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump file. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-257
References: https://global.sharp/products/copier/info/info_security_2024-05.html; https://jp.sharp/business/print/information/info_security_2024-05.html; https://jvn.jp/en/vu/JVNVU93051062/
CVE: CVE-2024-33605
Published: 2024-11-26
Description: Improper processing of some parameters of installed_emanual_list.html leads to a path traversal vulnerability. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://global.sharp/products/copier/info/info_security_2024-05.html; https://jp.sharp/business/print/information/info_security_2024-05.html; https://jvn.jp/en/vu/JVNVU93051062/
CVE: CVE-2024-33610
Published: 2024-11-26
Description: "sessionlist.html" and "sys_trayentryreboot.html" are accessible with no authentication. "sessionlist.html" provides logged-in users' session information including session cookies, and "sys_trayentryreboot.html" allows to reboot the device. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-288
References: https://global.sharp/products/copier/info/info_security_2024-05.html; https://jp.sharp/business/print/information/info_security_2024-05.html; https://jvn.jp/en/vu/JVNVU93051062/
CVE: CVE-2024-33616
Published: 2024-11-26
Description: Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege. Sharp Corporation states the telnet feature is implemented on older models only, and is planning to provide the firmware update to remove the feature. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://global.sharp/products/copier/info/info_security_2024-05.html; https://jp.sharp/business/print/information/info_security_2024-05.html; https://jvn.jp/en/vu/JVNVU93051062/
CVE: CVE-2024-34162
Published: 2024-11-26
Description: The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users. But configuring LDAP authentication to "SIMPLE", the device communicates with the LDAP server in clear-text. The LDAP password can be retrieved from this clear-text communication. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-767
References: https://global.sharp/products/copier/info/info_security_2024-05.html; https://jp.sharp/business/print/information/info_security_2024-05.html; https://jvn.jp/en/vu/JVNVU93051062/
CVE: CVE-2024-35244
Published: 2024-11-26
Description: There are several hidden accounts. Some of them are intended for maintenance engineers, and with the knowledge of their passwords (e.g., by examining the coredump), these accounts can be used to re-configure the device. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-798
References: https://global.sharp/products/copier/info/info_security_2024-05.html; https://jp.sharp/business/print/information/info_security_2024-05.html; https://jvn.jp/en/vu/JVNVU93051062/
CVE: CVE-2024-36248
Published: 2024-11-26
Description: API keys for some cloud services are hardcoded in the "main" binary. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-798
References: https://global.sharp/products/copier/info/info_security_2024-05.html; https://jp.sharp/business/print/information/info_security_2024-05.html; https://jvn.jp/en/vu/JVNVU93051062/
CVE: CVE-2024-36249
Published: 2024-11-26
Description: Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs (multifunction printers). If this vulnerability is exploited, an arbitrary script may be executed on the administrative page of the affected MFPs. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
CVSS Score: 7.4 (HIGH)
CWE: CWE-79
References: https://global.sharp/products/copier/info/info_security_2024-05.html; https://jp.sharp/business/print/information/info_security_2024-05.html; https://jvn.jp/en/vu/JVNVU93051062/
CVE: CVE-2024-36251
Published: 2024-11-26
Description: The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. More precisely, a crafted parameter to billcodedef_sub_sel.html is not processed properly and device-crash happens. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://global.sharp/products/copier/info/info_security_2024-05.html; https://jp.sharp/business/print/information/info_security_2024-05.html; https://jvn.jp/en/vu/JVNVU93051062/
CVE: CVE-2024-36254
Published: 2024-11-26
Description: Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction printers), which may lead to a denial-of-service (DoS) condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://global.sharp/products/copier/info/info_security_2024-05.html; https://jp.sharp/business/print/information/info_security_2024-05.html; https://jvn.jp/en/vu/JVNVU93051062/
CVE: CVE-2024-47257
Published: 2024-11-26
Description: Florent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet frames which could lead to the Axis device becoming unavailable in the network. 
Axis has released patched AXIS OS versions for the highlighted flaw for products that are still under AXIS OS software support. Please refer to the Axis security advisory for more information and solution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1284
References: https://www.axis.com/dam/public/b7/76/b2/cve-2024-47257pdf-en-US-458044.pdf
CVE: CVE-2024-6831
Published: 2024-11-26
Description: Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program has found that it is possible to edit and/or remove views without the necessary permission due to a client-side-only check. 
Axis has released patched versions for the highlighted flaw. Please 
refer to the Axis security advisory for more information and solution.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-602
References: https://www.axis.com/dam/public/a2/9a/41/cve-2024-6831-en-US-455107.pdf
CVE: CVE-2024-8160
Published: 2024-11-26
Description: Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi did not have a sufficient input validation allowing for a possible command injection leading to being able to transfer files from/to the Axis device. This flaw can only be exploited after authenticating with an administrator-privileged service account. 
Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
CVSS Score: 3.8 (LOW)
CWE: CWE-1286
References: https://www.axis.com/dam/public/permalink/231071/cve-2024-8160pdf-en-US_InternalID-231071.pdf
CVE: CVE-2024-8772
Published: 2024-11-26
Description: 51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API managedoverlayimages.cgi was vulnerable to a race condition attack allowing for an attacker to block access to the overlay configuration page in the web interface of the Axis device. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1286
References: https://www.axis.com/dam/public/permalink/231072/cve-2024-8772pdf-en-US_InternalID-231072.pdf
CVE: CVE-2024-9504
Published: 2024-11-26
Description: The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.2.15 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://hacked.be/posts/CVE-2024-9504; https://plugins.trac.wordpress.org/changeset/3195800/booking-calendar; https://www.wordfence.com/threat-intel/vulnerabilities/id/1fb05281-205f-4d9c-aac9-2b37e069a6fb?source=cve
CVE: CVE-2016-10394
Published: 2024-11-26
Description: Initial xbl_sec revision does not have all the debug policy features and critical checks.
CVSS Score: 8.4 (HIGH)
CWE: CWE-287, CWE-287
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html
CVE: CVE-2017-11076
Published: 2024-11-26
Description: On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-823, CWE-119
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html
CVE: CVE-2017-15832
Published: 2024-11-26
Description: Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW
CVSS Score: 8.4 (HIGH)
CWE: CWE-20, CWE-787
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html
CVE: CVE-2017-17772
Published: 2024-11-26
Description: In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-126, CWE-125
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html
CVE: CVE-2017-18153
Published: 2024-11-26
Description: A race condition exists in a driver potentially leading to a use-after-free condition.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html
CVE: CVE-2018-11922
Published: 2024-11-26
Description: Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-16
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html
CVE: CVE-2018-11952
Published: 2024-11-26
Description: An image with a version lower than the fuse version may potentially be booted lead to improper authentication.
CVSS Score: 8.4 (HIGH)
CWE: CWE-287
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html
CVE: CVE-2024-11091
Published: 2024-11-26
Description: The Support SVG – Upload svg files in wordpress without hassle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3195829/; https://wordpress.org/plugins/support-svg/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/d9207baf-348c-4d3b-a6f0-cbfcd2624f78?source=cve
CVE: CVE-2024-11119
Published: 2024-11-26
Description: The BNE Gallery Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gallery' shortcode in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/bne-gallery-extended/trunk/bne-gallery-extended.php#L178; https://plugins.trac.wordpress.org/changeset/3191705/; https://wordpress.org/plugins/bne-gallery-extended/#developers
CVE: CVE-2024-11192
Published: 2024-11-26
Description: The Spotify Play Button for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's spotifyplaybutton shortcode in all versions up to, and including, 2.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/spotify-play-button-for-wordpress/tags/2.11/sptify-play-button-for-wordpress.php#L137; https://plugins.trac.wordpress.org/browser/spotify-play-button-for-wordpress/tags/2.11/sptify-play-button-for-wordpress.php#L147; https://plugins.trac.wordpress.org/changeset?old_path=%2Fspotify-play-button-for-wordpress&old=3189556&new_path=%2Fspotify-play-button-for-wordpress&new=3191339&sfp_email=&sfph_mail=
CVE: CVE-2024-9170
Published: 2024-11-26
Description: The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wcj_product_meta shortcode in all versions up to, and including, 7.2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with ShopManager-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://booster.io/changelog/; https://booster.io/shortcodes/wcj_product_meta/; https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-products-shortcodes.php#L963
CVE: CVE-2024-11032
Published: 2024-11-26
Description: The Parsi Date plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 5.1.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-parsidate/tags/5.1.1/includes/general.php#L76; https://plugins.trac.wordpress.org/changeset/3195986/wp-parsidate/trunk/includes/general.php; https://wordpress.org/plugins/wp-parsidate/#developers
CVE: CVE-2024-11680
Published: 2024-11-26
Description: ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Remote, unauthenticated attackers can exploit this flaw by sending crafted HTTP requests to options.php, enabling unauthorized modification of the application's configuration. Successful exploitation allows attackers to create accounts, upload webshells, and embed malicious JavaScript.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/projectsend-auth-bypass.yaml; https://github.com/projectsend/projectsend/commit/193367d937b1a59ed5b68dd4e60bd[PII_REDACTED]4; https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/projectsend_unauth_rce.rb