deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-47180
Published: 2024-03-25
Description: In the Linux kernel, the following vulnerability has been resolved:

NFC: nci: fix memory leak in nci_allocate_device

nfcmrvl_disconnect fails to free the hci_dev field in struct nci_dev.
Fix this by freeing hci_dev in nci_free_device.

BUG: memory leak
unreferenced object 0xffff888111ea6800 (size 1024):
  comm "kworker/1:0", pid 19, jiffies[PII_REDACTED] (age 13.580s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 60 fd 0c 81 88 ff ff  .........`......
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<000000004bc25d43>] kmalloc include/linux/slab.h:552 [inline]
    [<000000004bc25d43>] kzalloc include/linux/slab.h:682 [inline]
    [<000000004bc25d43>] nci_hci_allocate+0x21/0xd0 net/nfc/nci/hci.c:784
    [<00000000c59cff92>] nci_allocate_device net/nfc/nci/core.c:1170 [inline]
    [<00000000c59cff92>] nci_allocate_device+0x10b/0x160 net/nfc/nci/core.c:1132
    [<[PII_REDACTED]6e0a8e>] nfcmrvl_nci_register_dev+0x10a/0x1c0 drivers/nfc/nfcmrvl/main.c:153
    [<000000004da1b57e>] nfcmrvl_probe+0x223/0x290 drivers/nfc/nfcmrvl/usb.c:345
    [<00000000d506aed9>] usb_probe_interface+0x177/0x370 drivers/usb/core/driver.c:396
    [<00000000bc632c92>] really_probe+0x159/0x4a0 drivers/base/dd.c:554
    [<00000000f5009125>] driver_probe_device+0x84/0x100 drivers/base/dd.c:740
    [<000000000ce658ca>] __device_attach_driver+0xee/0x110 drivers/base/dd.c:846
    [<[PII_REDACTED]67d05f>] bus_for_each_drv+0xb7/0x100 drivers/base/bus.c:431
    [<00000000f8e13372>] __device_attach+0x122/0x250 drivers/base/dd.c:914
    [<000000009cf68860>] bus_probe_device+0xc6/0xe0 drivers/base/bus.c:491
    [<[PII_REDACTED]9c965a>] device_add+0x5be/0xc30 drivers/base/core.c:3109
    [<[PII_REDACTED]6e4bd3>] usb_set_configuration+0x9d9/0xb90 drivers/usb/core/message.c:2164
    [<00000000ca036872>] usb_generic_driver_probe+0x8c/0xc0 drivers/usb/core/generic.c:238
    [<00000000d40d36f6>] usb_probe_device+0x5c/0x140 drivers/usb/core/driver.c:293
    [<00000000bc632c92>] really_probe+0x159/0x4a0 drivers/base/dd.c:554
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/0365701bc44e078682ee1224866a71897495c7ef; https://git.kernel.org/stable/c/2c2fb2df46ea866b49fea5ec7112ec3cd4896c74; https://git.kernel.org/stable/c/448a1cb12977f52142e6feb12022c59662d88dc1
CVE: CVE-2024-2864
Published: 2024-03-25
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaineLabs Youzify - Buddypress Moderation.This issue affects Youzify - Buddypress Moderation: from n/a through 1.2.5.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/youzify-moderation/wordpress-youzify-buddypress-moderation-plugin-2-0-0-unauthenticated-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/youzify-moderation/wordpress-youzify-buddypress-moderation-plugin-2-0-0-unauthenticated-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2022-38057
Published: 2024-03-25
Description: Missing Authorization vulnerability in ThemeHunk Advance WordPress Search Plugin.This issue affects Advance WordPress Search Plugin: from n/a through 1.2.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-306
References: https://patchstack.com/database/vulnerability/th-advance-product-search/wordpress-th-advance-product-search-plugin-1-1-4-unauthenticated-plugin-settings-reset-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/th-advance-product-search/wordpress-th-advance-product-search-plugin-1-1-4-unauthenticated-plugin-settings-reset-vulnerability?_s_id=cve
CVE: CVE-2022-44626
Published: 2024-03-25
Description: Missing Authorization vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.1.20.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://patchstack.com/database/vulnerability/squirrly-seo/wordpress-squirrly-seo-peaks-plugin-12-1-20-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/squirrly-seo/wordpress-squirrly-seo-peaks-plugin-12-1-20-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2022-45349
Published: 2024-03-25
Description: Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-broken-access-control-vulnerability-4?_s_id=cve; https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-broken-access-control-vulnerability-4?_s_id=cve
CVE: CVE-2022-45351
Published: 2024-03-25
Description: Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-broken-access-control-vulnerability-5?_s_id=cve; https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-broken-access-control-vulnerability-5?_s_id=cve
CVE: CVE-2022-45352
Published: 2024-03-25
Description: Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-broken-access-control-vulnerability-2?_s_id=cve; https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-broken-access-control-vulnerability-2?_s_id=cve
CVE: CVE-2022-45356
Published: 2024-03-25
Description: Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-broken-access-control-vulnerability-3?_s_id=cve; https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-broken-access-control-vulnerability-3?_s_id=cve
CVE: CVE-2022-45851
Published: 2024-03-25
Description: Missing Authorization vulnerability in ShareThis ShareThis Dashboard for Google Analytics.This issue affects ShareThis Dashboard for Google Analytics: from n/a through 3.1.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/googleanalytics/wordpress-sharethis-dashboard-for-google-analytics-plugin-3-1-2-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/googleanalytics/wordpress-sharethis-dashboard-for-google-analytics-plugin-3-1-2-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-22699
Published: 2024-03-25
Description: Missing Authorization vulnerability in MainWP MainWP Wordfence Extension.This issue affects MainWP Wordfence Extension: from n/a through 4.0.7.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/mainwp-wordfence-extension/wordpress-mainwp-wordfence-extension-plugin-4-0-7-subscriber-arbitrary-plugin-activation-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/mainwp-wordfence-extension/wordpress-mainwp-wordfence-extension-plugin-4-0-7-subscriber-arbitrary-plugin-activation-vulnerability?_s_id=cve
CVE: CVE-2023-25039
Published: 2024-03-25
Description: Missing Authorization vulnerability in CodePeople Google Maps CP.This issue affects Google Maps CP: from n/a through 1.0.43.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/codepeople-post-map/wordpress-google-maps-cp-plugin-1-0-43-missing-authorization-leading-to-feedback-submission-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/codepeople-post-map/wordpress-google-maps-cp-plugin-1-0-43-missing-authorization-leading-to-feedback-submission-vulnerability?_s_id=cve
CVE: CVE-2023-27608
Published: 2024-03-25
Description: Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Rewards for WooCommerce: from n/a through 1.5.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/points-and-rewards-for-woocommerce/wordpress-points-and-rewards-for-woocommerce-plugin-1-5-0-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/points-and-rewards-for-woocommerce/wordpress-points-and-rewards-for-woocommerce-plugin-1-5-0-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-25002
Published: 2024-03-25
Description: Command Injection in the diagnostics interface of the Bosch Network Synchronizer allows unauthorized users full access to the device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://psirt.bosch.com/security-advisories/BOSCH-SA-152190.html; https://psirt.bosch.com/security-advisories/BOSCH-SA-152190.html
CVE: CVE-2024-28386
Published: 2024-03-25
Description: An issue in Home-Made.io fastmagsync v.1.7.51 and before allows a remote attacker to execute arbitrary code via the getPhpBin() component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://fastmagsync.com; http://home-madeio.com; https://reference1.example.com/modules/fastmagsync/crons/cron_mutualise_job_queue.php?hosting=.%20%26%20%20echo%20%27%3C%3Fphp%20echo%20%2242ovh%22%3B%27%20%3E%20a.php%3B%23&syncway=tofastmag
CVE: CVE-2024-28387
Published: 2024-03-25
Description: An issue in axonaut v.3.1.23 and before allows a remote attacker to obtain sensitive information via the log.txt component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312, CWE-359
References: https://axonaut.com/integration/detail/prestashop; https://security.friendsofpresta.org/modules/2024/03/19/axonaut.html; https://axonaut.com/integration/detail/prestashop
CVE: CVE-2024-28393
Published: 2024-03-25
Description: SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess() method.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://addons.prestashop.com/fr/paiement-en-plusieurs-fois/87023-scalapay-payez-en-3-fois-sans-frais.html; https://security.friendsofpresta.org/modules/2024/03/19/scalapay.html; https://addons.prestashop.com/fr/paiement-en-plusieurs-fois/87023-scalapay-payez-en-3-fois-sans-frais.html
CVE: CVE-2024-28434
Published: 2024-03-25
Description: The CRM platform Twenty is vulnerable to stored cross site scripting via file upload in version 0.3.0. A crafted svg file can trigger the execution of the javascript code.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79
References: https://github.com/b-hermes/vulnerability-research/tree/main/CVE-2024-28434; https://github.com/twentyhq/twenty; https://github.com/b-hermes/vulnerability-research/tree/main/CVE-2024-28434
CVE: CVE-2024-28435
Published: 2024-03-25
Description: The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://github.com/b-hermes/vulnerability-research/tree/main/CVE-2024-28435; https://github.com/twentyhq/twenty; https://github.com/b-hermes/vulnerability-research/tree/main/CVE-2024-28435
CVE: CVE-2024-2865
Published: 2024-03-25
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mergen Software Quality Management System allows SQL Injection.This issue affects Quality Management System: through 25032024.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.usom.gov.tr/bildirim/tr-24-0229; https://www.usom.gov.tr/bildirim/tr-24-0229
CVE: CVE-2024-25175
Published: 2024-03-25
Description: An issue in Kickdler before v1.107.0 allows attackers to provide an XSS payload via a HTTP response splitting attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/jet-pentest/CVE-2024-25175; https://www.kickidler.com/; https://github.com/jet-pentest/CVE-2024-25175
CVE: CVE-2024-28183
Published: 2024-03-25
Description: ESP-IDF is the development framework for Espressif SoCs supported on Windows, Linux and macOS. A Time-of-Check to Time-of-Use (TOCTOU) vulnerability was discovered in the implementation of the ESP-IDF bootloader which could allow an attacker with physical access to flash of the device to bypass anti-rollback protection. Anti-rollback prevents rollback to application with security version lower than one programmed in eFuse of chip. This attack can allow to boot past (passive) application partition having lower security version of the same device even in the presence of the flash encryption scheme. The attack requires carefully modifying the flash contents after the anti-rollback checks have been performed by the bootloader (before loading the application). The vulnerability is fixed in 4.4.7 and 5.2.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-367
References: https://github.com/espressif/esp-idf/commit/3305cb4d[PII_REDACTED]36f8e940e6db174e25b4b2; https://github.com/espressif/esp-idf/commit/4c95aa445d4e84f01f86b6f3a552aa299276abf3; https://github.com/espressif/esp-idf/commit/534e3ad1fa68526a5f989fb2163856d6b7cd2c87
CVE: CVE-2024-29650
Published: 2024-03-25
Description: An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://gist.github.com/tariqhawis/1bc340ca5ea6ae115c9ab9665cfd5921; https://learn.snyk.io/lesson/prototype-pollution/#a0a863a5-fd3a-539f-e1ed-a0769f6c6e3b; https://gist.github.com/tariqhawis/1bc340ca5ea6ae115c9ab9665cfd5921
CVE: CVE-2024-30202
Published: 2024-03-25
Description: In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: http://www.openwall.com/lists/oss-security/2024/03/25/2; http://www.openwall.com/lists/oss-security/2024/04/08/6; https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=befa9fcaae29a6c9a283ba371c3c5234c7f644eb
CVE: CVE-2024-30203
Published: 2024-03-25
Description: In Emacs before 29.3, Gnus treats inline MIME contents as trusted.
CVSS Score: 5.5 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2024/03/25/2; http://www.openwall.com/lists/oss-security/2024/04/08/3; http://www.openwall.com/lists/oss-security/2024/04/08/4
CVE: CVE-2024-30204
Published: 2024-03-25
Description: In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.
CVSS Score: 2.8 (LOW)
CWE: CWE-276
References: http://www.openwall.com/lists/oss-security/2024/03/25/2; http://www.openwall.com/lists/oss-security/2024/04/08/3; http://www.openwall.com/lists/oss-security/2024/04/08/4
CVE: CVE-2024-30205
Published: 2024-03-25
Description: In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.
CVSS Score: 7.1 (HIGH)
CWE: CWE-494
References: http://www.openwall.com/lists/oss-security/2024/03/25/2; https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=2bc865ace050ff118db43f01457f95f95112b877; https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29
CVE: CVE-2023-45824
Published: 2024-03-25
Description: OroPlatform is a PHP Business Application Platform (BAP).  A logged in user can access page state data of pinned pages of other users by pageId hash. This vulnerability is fixed in 5.1.4.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/oroinc/platform/commit/cf94df7595afca052796e26b299d2ce031e289cd; https://github.com/oroinc/platform/security/advisories/GHSA-vxq2-p937-3px3; https://github.com/oroinc/platform/commit/cf94df7595afca052796e26b299d2ce031e289cd
CVE: CVE-2023-48296
Published: 2024-03-25
Description: OroPlatform is a PHP Business Application Platform (BAP).  Navigation history, most viewed and favorite navigation items are returned to storefront user in JSON navigation response if ID of storefront user matches ID of back-office user. This vulnerability is fixed in 5.1.4.

CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/oroinc/orocommerce/commit/41c526498012d44cd88852c63697f1ef53b61db8; https://github.com/oroinc/orocommerce/security/advisories/GHSA-v7px-46v9-5qwp; https://github.com/oroinc/orocommerce/commit/41c526498012d44cd88852c63697f1ef53b61db8
CVE: CVE-2024-27299
Published: 2024-03-25
Description: phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. A SQL injection vulnerability has been discovered in the the "Add News" functionality due to improper escaping of the email address. This allows any authenticated user with the rights to add/edit FAQ news to exploit this vulnerability to exfiltrate data, take over accounts and in some cases, even achieve RCE. The vulnerable field lies in the  `authorEmail` field which uses PHP's `FILTER_VALIDATE_EMAIL` filter. This filter is insufficient in protecting against SQL injection attacks and should still be properly escaped. However, in this version of phpMyFAQ (3.2.5), this field is not escaped properly can be used together with other fields to fully exploit the SQL injection vulnerability. This vulnerability is fixed in 3.2.6.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://drive.google.com/drive/folders/1BFL8GHIBxSUxu0TneYf66KjFA0A4RZga?usp=sharing; https://github.com/thorsten/phpMyFAQ/commit/1b68a5f89fb65996c56285fa636b818de8608011; https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-qgxx-4xv5-6hcw
CVE: CVE-2024-27300
Published: 2024-03-25
Description: phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The `email` field in phpMyFAQ's user control panel page is vulnerable to stored XSS attacks due to the inadequacy of PHP's `FILTER_VALIDATE_EMAIL` function, which only validates the email format, not its content. This vulnerability enables an attacker to execute arbitrary client-side JavaScript within the context of another user's phpMyFAQ session. This vulnerability is fixed in 3.2.6.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/thorsten/phpMyFAQ/commit/09336b0ff0e0a04aa0c97c5975651af4769d2459; https://github.com/thorsten/phpMyFAQ/commit/de90315c9bd4ead5fe6ba5586f6b016843aa8209; https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-q7g6-xfh2-vhpx
CVE: CVE-2024-28105
Published: 2024-03-25
Description: phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The category image upload function in phpmyfaq is vulnerable to manipulation of the `Content-type` and `lang` parameters, allowing attackers to upload malicious files with a .php extension, potentially leading to remote code execution (RCE) on the system. This vulnerability is fixed in 3.2.6.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/thorsten/phpMyFAQ/commit/[PII_REDACTED]af67dfdb0e8cf14f5e0ca22bf4f2e7; https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-pwh2-fpfr-x5gf; https://github.com/thorsten/phpMyFAQ/commit/[PII_REDACTED]af67dfdb0e8cf14f5e0ca22bf4f2e7
CVE: CVE-2024-28106
Published: 2024-03-25
Description: phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. By manipulating the news parameter in a POST request, an attacker can inject malicious JavaScript code. Upon browsing to the compromised news page, the XSS payload triggers. This vulnerability is fixed in 3.2.6.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/thorsten/phpMyFAQ/commit/c94b3deadd87789389e1fad162bc3dd595c0e15a; https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-6p68-36m6-392r; https://github.com/thorsten/phpMyFAQ/commit/c94b3deadd87789389e1fad162bc3dd595c0e15a
CVE: CVE-2024-28107
Published: 2024-03-25
Description: phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases.  A SQL injection vulnerability has been discovered in the `insertentry` & `saveentry` when modifying records due to improper escaping of the email address. This allows any authenticated user with the rights to add/edit FAQ news to exploit this vulnerability to exfiltrate data, take over accounts and in some cases, even achieve RCE. This vulnerability is fixed in 3.2.6.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/thorsten/phpMyFAQ/commit/d0fae62a72615d809e6710861c1a7f67ac893007; https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-2grw-mc9r-822r; https://github.com/thorsten/phpMyFAQ/commit/d0fae62a72615d809e6710861c1a7f67ac893007
CVE: CVE-2024-28108
Published: 2024-03-25
Description: phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Due to insufficient validation on the `contentLink` parameter, it is possible for unauthenticated users to inject HTML code to the page which might affect other users. _Also, requires that adding new FAQs is allowed for guests and that the admin doesn't check the content of a newly added FAQ._ This vulnerability is fixed in 3.2.6.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79, CWE-80, CWE-79
References: https://github.com/thorsten/phpMyFAQ/commit/4fed1d9602f0635260f789fe85995789d94d6634; https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-48vw-jpf8-hwqh; https://github.com/thorsten/phpMyFAQ/commit/4fed1d9602f0635260f789fe85995789d94d6634
CVE: CVE-2024-28850
Published: 2024-03-25
Description: WP Crontrol controls the cron events on WordPress websites.  WP Crontrol includes a feature that allows administrative users to create events in the WP-Cron system that store and execute PHP code subject to the restrictive security permissions documented here. While there is no known vulnerability in this feature on its own, there exists potential for this feature to be vulnerable to RCE if it were specifically targeted via vulnerability chaining that exploited a separate SQLi (or similar) vulnerability. This is exploitable on a site if one of the below preconditions are met, the site is vulnerable to a writeable SQLi vulnerability in any plugin, theme, or WordPress core, the site's database is compromised at the hosting level, the site is vulnerable to a method of updating arbitrary options in the wp_options table, or the site is vulnerable to a method of triggering an arbitrary action, filter, or function with control of the parameters.  As a hardening measure, WP Crontrol version 1.16.2 ships with a new feature that prevents tampering of the code stored in a PHP cron event.
CVSS Score: 8.1 (HIGH)
CWE: CWE-494
References: https://github.com/johnbillion/wp-crontrol/releases/tag/1.16.2; https://github.com/johnbillion/wp-crontrol/security/advisories/GHSA-9xvf-cjvf-ff5q; https://github.com/johnbillion/wp-crontrol/releases/tag/1.16.2
CVE: CVE-2024-29515
Published: 2024-03-25
Description: File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via uploading a crafted PHP file to the save.php and config.php component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/zzq66/cve7/; https://github.com/zzq66/cve7/
CVE: CVE-2024-29666
Published: 2024-03-25
Description: Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through v.7.32.0.3 allows a remote attacker to escalate privileges via the default password component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1393
References: https://github.com/whgojp/cve-reports/wiki/There-is-a-weak-password-in-the-CMSV6-vehicle-monitoring-platform-system; https://github.com/whgojp/cve-reports/wiki/There-is-a-weak-password-in-the-CMSV6-vehicle-monitoring-platform-system