deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-48702
Published: 2024-05-03
Description: In the Linux kernel, the following vulnerability has been resolved:

ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()

The voice allocator sometimes begins allocating from near the end of the
array and then wraps around, however snd_emu10k1_pcm_channel_alloc()
accesses the newly allocated voices as if it never wrapped around.

This results in out of bounds access if the first voice has a high enough
index so that first_voice + requested_voice_count > NUM_G (64).
The more voices are requested, the more likely it is for this to occur.

This was initially discovered using PipeWire, however it can be reproduced
by calling aplay multiple times with 16 channels:
aplay -r 48000 -D plughw:CARD=Live,DEV=3 -c 16 /dev/zero

UBSAN: array-index-out-of-bounds in sound/pci/emu10k1/emupcm.c:127:40
index 65 is out of range for type 'snd_emu10k1_voice [64]'
CPU: 1 PID: 31977 Comm: aplay Tainted: G        W IOE      6.0.0-rc2-emu10k1+ #7
Hardware name: ASUSTEK COMPUTER INC P5W DH Deluxe/P5W DH Deluxe, BIOS 3002    07/22/2010
Call Trace:
<TASK>
dump_stack_lvl+0x49/0x63
dump_stack+0x10/0x16
ubsan_epilogue+0x9/0x3f
__ubsan_handle_out_of_bounds.cold+0x44/0x49
snd_emu10k1_playback_hw_params+0x3bc/0x420 [snd_emu10k1]
snd_pcm_hw_params+0x29f/0x600 [snd_pcm]
snd_pcm_common_ioctl+0x188/0x1410 [snd_pcm]
? exit_to_user_mode_prepare+0x35/0x170
? do_syscall_64+0x69/0x90
? syscall_exit_to_user_mode+0x26/0x50
? do_syscall_64+0x69/0x90
? exit_to_user_mode_prepare+0x35/0x170
snd_pcm_ioctl+0x27/0x40 [snd_pcm]
__x64_sys_ioctl+0x95/0xd0
do_syscall_64+0x5c/0x90
? do_syscall_64+0x69/0x90
? do_syscall_64+0x69/0x90
entry_SYSCALL_64_after_hwframe+0x63/0xcd
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: https://git.kernel.org/stable/c/39a90720f3abe96625d1224e7a[PII_REDACTED]de4c; https://git.kernel.org/stable/c/4204a01ffce97cae1d59edc5848f02be5b2b9178; https://git.kernel.org/stable/c/45321a7d02b7cf9b3f97e3987fc1e4d649b82da2
CVE: CVE-2022-48703
Published: 2024-05-03
Description: In the Linux kernel, the following vulnerability has been resolved:

thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR

In some case, the GDDV returns a package with a buffer which has
zero length. It causes that kmemdup() returns ZERO_SIZE_PTR (0x10).

Then the data_vault_read() got NULL point dereference problem when
accessing the 0x10 value in data_vault.

[   71.024560] BUG: kernel NULL pointer dereference, address:
[PII_REDACTED]

This patch uses ZERO_OR_NULL_PTR() for checking ZERO_SIZE_PTR or
NULL value in data_vault.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/39d5137085a6c37ace4680ee4d24020a4a03e7dc; https://git.kernel.org/stable/c/7931e28098a4c1a2a6802510b0cbe57546d2049d; https://git.kernel.org/stable/c/dae42083b045a4ddf71c57cf350cb2412b5915c2
CVE: CVE-2023-37407
Published: 2024-05-03
Description: IBM Aspera Orchestrator 4.0.1 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.  IBM X-Force ID:  260116.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/260116; https://www.ibm.com/support/pages/node/7150117; https://exchange.xforce.ibmcloud.com/vulnerabilities/260116
CVE: CVE-2024-33398
Published: 2024-05-03
Description: There is a ClusterRole in piraeus-operator v2.5.0 and earlier which has been granted list secrets permission, which allows an attacker to impersonate the service account bound to this ClusterRole and use its high-risk privileges to list confidential information across the cluster.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269
References: https://gist.github.com/HouqiyuA/d0c11fae5ba4789946ae33175d0f9edb; https://github.com/HouqiyuA/k8s-rbac-poc; https://github.com/piraeusdatastore/piraeus-operator
CVE: CVE-2024-34447
Published: 2024-05-03
Description: An issue was discovered in the Bouncy Castle Crypto Package For Java before BC TLS Java 1.0.19 (ships with BC Java 1.78, BC Java (LTS) 2.73.6) and before BC FIPS TLS Java 1.0.19. When endpoint identification is enabled in the BCJSSE and an SSL socket is created without an explicit hostname (as happens with HttpsURLConnection), hostname verification could be performed against a DNS-resolved IP address in some situations, opening up a possibility of DNS poisoning.
CVSS Score: 7.5 (HIGH)
CWE: CWE-297
References: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9034447; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.bouncycastle.org/latest_releases.html
CVE: CVE-2024-34449
Published: 2024-05-03
Description: Vditor 3.10.3 allows XSS via an attribute of an A element. NOTE: the vendor indicates that a user is supposed to mitigate this via sanitize=true.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Vanessa219/vditor/blob/b3a14d6e4462b0c17141e1fcc66173264ada64e0/README_en_US.md?plain=1#L310; https://github.com/Vanessa219/vditor/issues/1604; https://github.com/Vanessa219/vditor/blob/b3a14d6e4462b0c17141e1fcc66173264ada64e0/README_en_US.md?plain=1#L310
CVE: CVE-2020-4874
Published: 2024-05-03
Description: IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.  IBM X-Force ID:  190837.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/190837; https://www.ibm.com/support/pages/node/7149876; https://exchange.xforce.ibmcloud.com/vulnerabilities/190837
CVE: CVE-2021-20450
Published: 2024-05-03
Description: IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.  IBM X-Force ID:  196640.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-565
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/196640; https://www.ibm.com/support/pages/node/7149876; https://exchange.xforce.ibmcloud.com/vulnerabilities/196640
CVE: CVE-2024-28519
Published: 2024-05-03
Description: A kernel handle leak issue in ProcObsrvesx.sys 4.0.0.49 in MicroWorld Technologies Inc eScan Antivirus could allow privilege escalation for low-privileged users.
CVSS Score: 7.8 (HIGH)
References: https://northwave-cybersecurity.com/vulnerability-notice-escan-antivirus; https://www.escanav.com/en/index.asp; https://northwave-cybersecurity.com/vulnerability-notice-escan-antivirus
CVE: CVE-2024-30851
Published: 2024-05-03
Description: Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to obtain sensitive information via the download_file.php component.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/chebuya/CVE-2024-30851-jasmin-ransomware-path-traversal-poc; https://github.com/codesiddhant/Jasmin-Ransomware; https://github.com/chebuya/CVE-2024-30851-jasmin-ransomware-path-traversal-poc
CVE: CVE-2024-31636
Published: 2024-05-03
Description: An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machd_reader.c component.
CVSS Score: 3.9 (LOW)
CWE: CWE-457
References: http://lief.com; https://github.com/lief-project/LIEF; https://github.com/lief-project/LIEF/issues/1038
CVE: CVE-2024-33789
Published: 2024-05-03
Description: Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the ipurl parameter at /API/info form endpoint.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/ymkyu/CVE/tree/main/CVE-2024-33789; https://github.com/ymkyu/CVE/tree/main/CVE-2024-33789
CVE: CVE-2024-33791
Published: 2024-05-03
Description: A cross-site scripting (XSS) vulnerability in netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the getTimeZone function.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://github.com/ymkyu/CVE/tree/main/CVE-2024-33791; https://github.com/ymkyu/CVE/tree/main/CVE-2024-33791
CVE: CVE-2024-33792
Published: 2024-05-03
Description: netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the tracert page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-20
References: https://github.com/ymkyu/CVE/tree/main/CVE-2024-33792; https://github.com/ymkyu/CVE/tree/main/CVE-2024-33792
CVE: CVE-2024-33793
Published: 2024-05-03
Description: netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-78
References: https://github.com/ymkyu/CVE/tree/main/CVE-2024-33793; https://github.com/ymkyu/CVE/tree/main/CVE-2024-33793
CVE: CVE-2021-20556
Published: 2024-05-03
Description: IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 could allow a remote user to enumerate usernames due to differentiating error messages on existing usernames.  IBM X-Force ID:  199181.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204, CWE-203
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/199181; https://www.ibm.com/support/pages/node/7149876; https://exchange.xforce.ibmcloud.com/vulnerabilities/199181
CVE: CVE-2022-48690
Published: 2024-05-03
Description: In the Linux kernel, the following vulnerability has been resolved:

ice: Fix DMA mappings leak

Fix leak, when user changes ring parameters.
During reallocation of RX buffers, new DMA mappings are created for
those buffers. New buffers with different RX ring count should
substitute older ones, but those buffers were freed in ice_vsi_cfg_rxq
and reallocated again with ice_alloc_rx_buf. kfree on rx_buf caused
leak of already mapped DMA.
Reallocate ZC with xdp_buf struct, when BPF program loads. Reallocate
back to rx_buf, when BPF program unloads.
If BPF program is loaded/unloaded and XSK pools are created, reallocate
RX queues accordingly in XDP_SETUP_XSK_POOL handler.

Steps for reproduction:
while :
do
	for ((i=0; i<=8160; i=i+32))
	do
		ethtool -G enp130s0f0 rx $i tx $i
		sleep 0.5
		ethtool -g enp130s0f0
	done
done
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/07f40e9f0ff342eb3e97d5c544783b7cb641689c; https://git.kernel.org/stable/c/7e753eb675f0523207b184558638ee2eed6c9ac2; https://git.kernel.org/stable/c/07f40e9f0ff342eb3e97d5c544783b7cb641689c
CVE: CVE-2022-48695
Published: 2024-05-03
Description: In the Linux kernel, the following vulnerability has been resolved:

scsi: mpt3sas: Fix use-after-free warning

Fix the following use-after-free warning which is observed during
controller reset:

refcount_t: underflow; use-after-free.
WARNING: CPU: 23 PID: 5399 at lib/refcount.c:28 refcount_warn_saturate+0xa6/0xf0
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/41acb064c4e013808bc7d5fc1b506fa449425b0b; https://git.kernel.org/stable/c/5682c94644fde72f72bded6580c38189ffc856b5; https://git.kernel.org/stable/c/6229fa494a5949be209bc73afbc5d0a749c2e3c7
CVE: CVE-2022-48704
Published: 2024-05-03
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/radeon: add a force flush to delay work when radeon

Although radeon card fence and wait for gpu to finish processing current batch rings,
there is still a corner case that radeon lockup work queue may not be fully flushed,
and meanwhile the radeon_suspend_kms() function has called pci_set_power_state() to
put device in D3hot state.
Per PCI spec rev 4.0 on 5.3.1.4.1 D3hot State.
> Configuration and Message requests are the only TLPs accepted by a Function in
> the D3hot state. All other received Requests must be handled as Unsupported Requests,
> and all received Completions may optionally be handled as Unexpected Completions.
This issue will happen in following logs:
Unable to handle kernel paging request at virtual address 00008800e0008010
CPU 0 kworker/0:3(131): Oops 0
pc = [<ffffffff811bea5c>]  ra = [<ffffffff81240844>]  ps = 0000 Tainted: G        W
pc is at si_gpu_check_soft_reset+0x3c/0x240
ra is at si_dma_is_lockup+0x34/0xd0
v0 = [PII_REDACTED]  t0 = fff08800e0008010  t1 = [PII_REDACTED]
t2 = [PII_REDACTED]  t3 = fff00007e3c00000  t4 = fff00007e3c00258
t5 =[PII_REDACTED]00ffff  t6 = [PII_REDACTED]  t7 = fff00007ef078000
s0 = fff00007e3c016e8  s1 = fff00007e3c00000  s2 = fff00007e3c00018
s3 = fff00007e3c00000  s4 = fff00007fff59d80  s5 = [PII_REDACTED]
s6 = fff00007ef07bd98
a0 = fff00007e3c00000  a1 = fff00007e3c016e8  a2 = [PII_REDACTED]
a3 = [PII_REDACTED]  a4 = 8f5c28f5c28f5c29  a5 = ffffffff810f4338
t8 = [PII_REDACTED]  t9 = ffffffff809b66f8  t10 = ff6769c5d964b800
t11=[PII_REDACTED]00b886  pv = ffffffff811bea20  at = [PII_REDACTED]
gp = ffffffff81d89690  sp = 00000000aa814126
Disabling lock debugging due to kernel taint
Trace:
[<ffffffff81240844>] si_dma_is_lockup+0x34/0xd0
[<ffffffff81119610>] radeon_fence_check_lockup+0xd0/0x290
[<ffffffff80977010>] process_one_work+0x280/0x550
[<ffffffff80977350>] worker_thread+0x70/0x7c0
[<ffffffff80977410>] worker_thread+0x130/0x7c0
[<ffffffff80982040>] kthread+0x200/0x210
[<ffffffff809772e0>] worker_thread+0x0/0x7c0
[<ffffffff80981f8c>] kthread+0x14c/0x210
[<ffffffff80911658>] ret_from_kernel_thread+0x18/0x20
[<ffffffff80981e40>] kthread+0x0/0x210
 Code: ad3e0008  43f0074a  ad7e0018  ad9e0020  8c3001e8  40230101
 <88210000> 4821ed21
So force lockup work queue flush to fix this problem.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/16cb367daa446923d82e332537f446a4cc784b40; https://git.kernel.org/stable/c/4e25e8f27fdbdc6fd55cc572a9939bf24500b9e8; https://git.kernel.org/stable/c/5a7a5b2edac4b05abd744eeaebda46d9dacd952d
CVE: CVE-2022-48705
Published: 2024-05-03
Description: In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7921e: fix crash in chip reset fail

In case of drv own fail in reset, we may need to run mac_reset several
times. The sequence would trigger system crash as the log below.

Because we do not re-enable/schedule "tx_napi" before disable it again,
the process would keep waiting for state change in napi_diable(). To
avoid the problem and keep status synchronize for each run, goto final
resource handling if drv own failed.

[ 5857.353423] mt7921e 0000:3b:00.0: driver own failed
[ 5858.433427] mt7921e 0000:3b:00.0: Timeout for driver own
[ 5859.633430] mt7921e 0000:3b:00.0: driver own failed
[ 5859.633444] ------------[ cut here ]------------
[ 5859.633446] WARNING: CPU: 6 at kernel/kthread.c:659 kthread_park+0x11d
[ 5859.633717] Workqueue: mt76 mt7921_mac_reset_work [mt7921_common]
[ 5859.633728] RIP: 0010:kthread_park+0x11d/0x150
[ 5859.633736] RSP: 0018:ffff8881b676fc68 EFLAGS: 00010202
......
[ 5859.633766] Call Trace:
[ 5859.633768]  <TASK>
[ 5859.633771]  mt7921e_mac_reset+0x176/0x6f0 [mt7921e]
[ 5859.633778]  mt7921_mac_reset_work+0x184/0x3a0 [mt7921_common]
[ 5859.633785]  ? mt7921_mac_set_timing+0x520/0x520 [mt7921_common]
[ 5859.633794]  ? __kasan_check_read+0x11/0x20
[ 5859.633802]  process_one_work+0x7ee/0x1320
[ 5859.633810]  worker_thread+0x53c/0x1240
[ 5859.633818]  kthread+0x2b8/0x370
[ 5859.633824]  ? process_one_work+0x1320/0x1320
[ 5859.633828]  ? kthread_complete_and_exit+0x30/0x30
[ 5859.633834]  ret_from_fork+0x1f/0x30
[ 5859.633842]  </TASK>
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/f7f3001723e337568017e8617974f29bc8b2f595; https://git.kernel.org/stable/c/fa3fbe64037839f448dc569212bafc5a495d8219; https://git.kernel.org/stable/c/f7f3001723e337568017e8617974f29bc8b2f595
CVE: CVE-2023-23474
Published: 2024-05-03
Description: IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser.  IBM X-Force ID:  245403.
CVSS Score: 3.7 (LOW)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/245403; https://www.ibm.com/support/pages/node/7149876; https://exchange.xforce.ibmcloud.com/vulnerabilities/245403
CVE: CVE-2023-28952
Published: 2024-05-03
Description: IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to injection attacks in application logging by not sanitizing user provided data.  IBM X-Force ID:  251463.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-117, CWE-116
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/251463; https://www.ibm.com/support/pages/node/7149876; https://exchange.xforce.ibmcloud.com/vulnerabilities/251463
CVE: CVE-2023-38724
Published: 2024-05-03
Description: IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.  IBM X-Force ID:  262183.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/262183; https://www.ibm.com/support/pages/node/7149876; https://exchange.xforce.ibmcloud.com/vulnerabilities/262183
CVE: CVE-2023-40696
Published: 2024-05-03
Description: IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.  IBM X-Force ID:  264939.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/264939; https://www.ibm.com/support/pages/node/7149876; https://exchange.xforce.ibmcloud.com/vulnerabilities/264939
CVE: CVE-2024-27453
Published: 2024-05-03
Description: In Extreme XOS through 22.6.1.4, a read-only user can escalate privileges to root via a crafted HTTP POST request to the python method of the Machine-to-Machine Interface (MMI).
CVSS Score: 8.6 (HIGH)
CWE: CWE-266
References: https://extreme-networks.my.site.com/ExtrArticleDetail?an=000118266; https://www.exsiliumsecurity.com/CVE-2024-27453.html; https://extreme-networks.my.site.com/ExtrArticleDetail?an=000118266
CVE: CVE-2024-31673
Published: 2024-05-03
Description: Kliqqi-CMS 2.0.2 is vulnerable to SQL Injection in load_data.php via the userid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/265; https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/265
CVE: CVE-2024-34066
Published: 2024-05-03
Description: Pterodactyl wings is the server control plane for Pterodactyl Panel. If the Wings token is leaked either by viewing the node configuration or posting it accidentally somewhere, an attacker can use it to gain arbitrary file write and read access on the node the token is associated to. This issue has been addressed in version 1.11.12 and users are advised to upgrade. Users unable to upgrade may enable the `ignore_panel_config_updates` option as a workaround.
CVSS Score: 8.4 (HIGH)
CWE: CWE-552, CWE-552
References: https://github.com/pterodactyl/wings/commit/5415f8ae07f533623bd8169836dd7e0b933964de; https://github.com/pterodactyl/wings/security/advisories/GHSA-gqmf-jqgv-v8fw; https://github.com/pterodactyl/wings/commit/5415f8ae07f533623bd8169836dd7e0b933964de
CVE: CVE-2024-34067
Published: 2024-05-03
Description: Pterodactyl is a free, open-source game server management panel built with PHP, React, and Go. Importing a malicious egg or gaining access to wings instance could lead to cross site scripting (XSS) on the panel, which could be used to gain an administrator account on the panel. Specifically, the following things are impacted: Egg Docker images and Egg variables: Name, Environment variable, Default value, Description, Validation rules. Additionally, certain fields would reflect malicious input, but it would require the user knowingly entering such input to have an impact. To iterate, this would require an administrator to perform actions and can't be triggered by a normal panel user. This issue has has been addressed in version 1.11.6 and users are advised to upgrade. No workaround is available other than updating to the latest version of the panel.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/pterodactyl/panel/commit/0dad4c5a488661f9adc27dd311542516d9bfa0f2; https://github.com/pterodactyl/panel/commit/1172d71d31561c4e465dabdf6b838e64de48ad16; https://github.com/pterodactyl/panel/commit/f671046947e4695b5e1c647df79305c1cefdf817
CVE: CVE-2024-34068
Published: 2024-05-03
Description: Pterodactyl wings is the server control plane for Pterodactyl Panel. An authenticated user who has access to a game server is able to bypass the previously implemented access control (GHSA-6rg3-8h8x-5xfv) that prevents accessing internal endpoints of the node hosting Wings in the pull endpoint. This would allow malicious users to potentially access resources on local networks that would otherwise be inaccessible. This issue has been addressed in version 1.11.2 and users are advised to upgrade. Users unable to upgrade may enable the `api.disable_remote_download` option as a workaround. 
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-284, CWE-441, CWE-918
References: https://github.com/pterodactyl/wings/commit/c152e36101aba45d8868a9a0eeb890995e8934b8; https://github.com/pterodactyl/wings/security/advisories/GHSA-6rg3-8h8x-5xfv; https://github.com/pterodactyl/wings/security/advisories/GHSA-qq22-jj8x-4wwv
CVE: CVE-2024-34075
Published: 2024-05-03
Description: kurwov is a fast, dependency-free library for creating Markov Chains. An unsafe sanitization of dataset contents on the `MarkovData#getNext` method used in `Markov#generate` and `Markov#choose` allows a maliciously crafted string on the dataset to throw and stop the function from running properly. If a string contains a forbidden substring (i.e. `__proto__`) followed by a space character, the code will access a special property in `MarkovData#finalData` by removing the last character of the string, bypassing the dataset sanitization (as it is supposed to be already sanitized before this function is called). Any dataset can be contaminated with the substring making it unable to properly generate anything in some cases. This issue has been addressed in version 3.2.5 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-502
References: https://github.com/xiboon/kurwov/blob/0d58dfa42135ab40e830e[PII_REDACTED]2f980ca89/src/MarkovData.ts#L38-L44; https://github.com/xiboon/kurwov/commit/85d63e652594f121d6656177d7a3c0d823c976c9; https://github.com/xiboon/kurwov/security/advisories/GHSA-hfrv-h3q8-9jpr
CVE: CVE-2024-34453
Published: 2024-05-03
Description: TwoNav 2.1.13 contains an SSRF vulnerability via the url paramater to index.php?c=api&method=read_data&type=connectivity_test (which reaches /system/api.php).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/tznb1/TwoNav/compare/v2.1.13-20240321...v2.1.14-20240419; https://github.com/tznb1/TwoNav/issues/9#issuecomment[PII_REDACTED]; https://github.com/tznb1/TwoNav/compare/v2.1.13-20240321...v2.1.14-20240419
CVE: CVE-2021-20451
Published: 2024-05-03
Description: IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.  IBM X-Force ID:  196643.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-89
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/196643; https://www.ibm.com/support/pages/node/7149876; https://exchange.xforce.ibmcloud.com/vulnerabilities/196643