deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-34445
Published: 2024-11-05
Description: Combodo iTop is a simple, web based IT Service Management tool. When displaying pages/ajax.render.php XSS are possible for scripts outside of script tags. This issue has been fixed in versions 2.7.9, 3.0.4, 3.1.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/Combodo/iTop/security/advisories/GHSA-mm45-wh68-jpvq
CVE: CVE-2024-31448
Published: 2024-11-05
Description: Combodo iTop is a simple, web based IT Service Management tool. By filling malicious code in a CSV content, an Cross-site Scripting (XSS) attack can be performed when importing this content. This issue has been fixed in versions 3.1.2 and 3.2.0. All users are advised to upgrade. Users unable to upgrade should validate CSV content before importing it.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://github.com/Combodo/iTop/security/advisories/GHSA-776w-x6v7-vfwf
CVE: CVE-2024-31998
Published: 2024-11-05
Description: Combodo iTop is a simple, web based IT Service Management tool. A CSRF can be performed on CSV import simulation. This issue has been fixed in versions 3.1.2 and 3.2.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Combodo/iTop/security/advisories/GHSA-8cwx-q4xh-7c7r
CVE: CVE-2024-32870
Published: 2024-11-05
Description: Combodo iTop is a simple, web based IT Service Management tool. Server, OS, DBMS, PHP, and iTop info (name, version and parameters) can be read by anyone having access to iTop URI. This issue has been patched in versions 2.7.11, 3.0.5, 3.1.2, and 3.2.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-200
References: https://github.com/Combodo/iTop/security/advisories/GHSA-rfjh-2f5x-qxmx
CVE: CVE-2024-50346
Published: 2024-11-05
Description: WebFeed is a lightweight web feed reader extension for Firefox/Chrome. Multiple HTML injection vulnerabilities in WebFeed can lead to CSRF and UI spoofing attacks. A remote attacker can provide malicious RSS feeds and attract the victim user to visit it using WebFeed. The attacker can then inject malicious HTML into the extension page and fool the victim into sending out HTTP requests to arbitrary sites with the victim's credentials. Users are vulnerable to CSRF attacks when visiting malicious RSS feeds via WebFeed. Unwanted actions could be executed on the user's behalf on arbitrary websites. This issue has been addressed in release version 0.9.2. All users are advised to upgrade. There are no known workarounds for this vulnerability.
CWE: CWE-79
References: https://github.com/taoso/webfeed/commit/a2d1c1c3a98f30e0bd7a1bbcb746fae484985e6d; https://github.com/taoso/webfeed/security/advisories/GHSA-mrc7-2q3w-48j8
CVE: CVE-2024-51498
Published: 2024-11-05
Description: cobalt is a media downloader that doesn't piss you off. A malicious cobalt instance could serve links with the `javascript:` protocol, resulting in Cross-site Scripting (XSS) when the user tries to download an item from a picker. This issue has been present since commit `66bac03e`, was mitigated in commit `97977efa` (correctly configured web instances were no longer vulnerable) and fully fixed in commit `c4be1d3a` (included in release version 10.2.1). Users are advised to upgrade. Users unable to upgrade should enable a content-security-policy.
CWE: CWE-79
References: https://github.com/imputnet/cobalt/commit/66bac03e3078e4e781d2d3903c05ad66a883a354; https://github.com/imputnet/cobalt/commit/97977efabd92375f270d1818f38de3b0682c2f19; https://github.com/imputnet/cobalt/commit/c4be1d3a37b0deb6b6087ec7a815262ac942daf1
CVE: CVE-2024-10806
Published: 2024-11-05
Description: A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as problematic. This vulnerability affects unknown code of the file betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 2.4 (LOW)
CWE: CWE-74, CWE-79, CWE-707, CWE-79
References: https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Hospital%20Management%20System%20(HMS)%204.0%20-%20(betweendates-detailsreports.php).md; https://phpgurukul.com/; https://vuldb.com/?ctiid.283030
CVE: CVE-2024-10340
Published: 2024-11-05
Description: The Shortcodes Blocks Creator Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'scu' shortcode in versions up to, and including, 2.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/ultimate-shortcodes-creator/trunk/frontend/class-frontend.php?rev=2338595#L163; https://plugins.trac.wordpress.org/changeset/3181163/ultimate-shortcodes-creator#file0; https://www.wordfence.com/threat-intel/vulnerabilities/id/9a9d6c71-98ce-4fa7-817a-43e4f3dc0602?source=cve
CVE: CVE-2024-10807
Published: 2024-11-05
Description: A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been rated as problematic. This issue affects some unknown processing of the file hms/doctor/search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 2.4 (LOW)
CWE: CWE-74, CWE-79, CWE-707, CWE-79
References: https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Hospital%20Management%20System%20(HMS)%204.0%20-%20(search.php).md; https://phpgurukul.com/; https://vuldb.com/?ctiid.283031
CVE: CVE-2024-10808
Published: 2024-11-05
Description: A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file Admin/req_detail.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-707, CWE-89
References: https://code-projects.org/; https://github.com/koevas257/cve/blob/main/sql.md; https://vuldb.com/?ctiid.283036
CVE: CVE-2024-10809
Published: 2024-11-05
Description: A vulnerability was found in code-projects E-Health Care System 1.0 and classified as critical. This issue affects some unknown processing of the file /Doctor/chat.php. The manipulation of the argument name/message leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "name" to be affected. But it must be assumed that the parameter "message" is affected as well.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-707, CWE-89
References: https://code-projects.org/; https://github.com/Xueweian/cve/blob/main/sql18.md; https://vuldb.com/?ctiid.283037
CVE: CVE-2024-10810
Published: 2024-11-05
Description: A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an unknown function of the file Doctor/app_request.php. The manipulation of the argument app_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-707, CWE-89
References: https://code-projects.org/; https://github.com/wsy149433/cve/blob/main/sql19.md; https://vuldb.com/?ctiid.283038
CVE: CVE-2024-5578
Published: 2024-11-05
Description: The Table of Contents Plus WordPress plugin through 2408 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/641e4fc3-4214-4c2e-8245-15e9dcdd37b4/
CVE: CVE-2024-7876
Published: 2024-11-05
Description: The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.55 does not sanitise and escape some of its Appointment Type settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/fffe862f-5bf0-4a05-9d32-caff0bfdb860/
CVE: CVE-2024-7877
Published: 2024-11-05
Description: The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.55 does not sanitise and escape some of its Notification settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/fbec3738-2135-458d-be25-1ffb00e6deb6/
CVE: CVE-2024-9459
Published: 2024-11-05
Description: Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module.
CVSS Score: 8.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.manageengine.com/products/exchange-reports/advisory/CVE-2024-9459.html
CVE: CVE-2024-9689
Published: 2024-11-05
Description: The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow attackers to make logged in admin perform such action via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/ea501d37-1ec2-43ec-873a-ec204e965f60/
CVE: CVE-2024-9883
Published: 2024-11-05
Description: The Pods  WordPress plugin before 3.2.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ea4b277e-ef47-4e38-bd82-c5a54a95372f/
CVE: CVE-2024-10097
Published: 2024-11-05
Description: The Loginizer Security and Loginizer plugins for WordPress are vulnerable to authentication bypass in all versions up to, and including, 1.9.2. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email and the user does not have an already-existing account for the service returning the token.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://loginizer.com/; https://plugins.trac.wordpress.org/browser/loginizer/trunk/main/social-login.php?rev=3108779#L127; https://plugins.trac.wordpress.org/changeset/3173657/
CVE: CVE-2024-47137
Published: 2024-11-05
Description: in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through out-of-bounds write.
CVSS Score: 8.4 (HIGH)
CWE: CWE-787
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-11.md
CVE: CVE-2024-47402
Published: 2024-11-05
Description: in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through out-of-bounds read.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-11.md
CVE: CVE-2024-47404
Published: 2024-11-05
Description: in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through double free.
CVSS Score: 8.4 (HIGH)
CWE: CWE-415
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-11.md
CVE: CVE-2024-47797
Published: 2024-11-05
Description: in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through out-of-bounds write.
CVSS Score: 8.4 (HIGH)
CWE: CWE-787
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-11.md
CVE: CVE-2024-10114
Published: 2024-11-05
Description: The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.7.7. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email and the user does not have an already-existing account for the service returning the token.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://www.wordfence.com/threat-intel/vulnerabilities/id/71df23bf-8f51-4260-be1f-ed5bc29d4afe?source=cve; https://www.wpwebelite.com/changelogs/woocommerce-social-login/changelog.txt
CVE: CVE-2024-10711
Published: 2024-11-05
Description: The WooCommerce Report plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.1. This is due to missing or incorrect nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update arbitrary options that can be leveraged for privilege escalation via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://ithemelandco.com/docs/woocommerce-report/; https://plugins.trac.wordpress.org/browser/ithemelandco-woo-report/trunk/class/setting_report.php#L1174; https://plugins.trac.wordpress.org/changeset/3181117/
CVE: CVE-2024-51510
Published: 2024-11-05
Description: Out-of-bounds access vulnerability in the logo module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.6 (HIGH)
CWE: CWE-787, CWE-787
References: https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE: CVE-2024-51511
Published: 2024-11-05
Description: Vulnerability of parameter type not being verified in the WantAgent module
Impact: Successful exploitation of this vulnerability may affect availability.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20
References: https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE: CVE-2024-51512
Published: 2024-11-05
Description: Vulnerability of parameter type not being verified in the WantAgent module
Impact: Successful exploitation of this vulnerability may affect availability.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20
References: https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE: CVE-2024-51513
Published: 2024-11-05
Description: Vulnerability of processes not being fully terminated in the VPN module
Impact: Successful exploitation of this vulnerability will affect power consumption.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE: CVE-2024-51514
Published: 2024-11-05
Description: Vulnerability of pop-up windows belonging to no app in the VPN module
Impact:  Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE: CVE-2024-51515
Published: 2024-11-05
Description: Race condition vulnerability in the kernel network module
Impact:Successful exploitation of this vulnerability may affect availability.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE: CVE-2024-51516
Published: 2024-11-05
Description: Permission control vulnerability in the ability module
Impact: Successful exploitation of this vulnerability may cause features to function abnormally.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-862
References: https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE: CVE-2024-9443
Published: 2024-11-05
Description: The Basticom Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3178823/; https://wordpress.org/plugins/basticom-framework/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/3dd3dc4b-e936-46a4-8d65-5f4bf05b2374?source=cve
CVE: CVE-2024-9667
Published: 2024-11-05
Description: The Seriously Simple Podcasting plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.5.0. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/seriously-simple-podcasting/trunk/php/classes/handlers/class-options-handler.php#L101; https://plugins.trac.wordpress.org/changeset/3181485/; https://wordpress.org/plugins/seriously-simple-podcasting/#developers
CVE: CVE-2023-52920
Published: 2024-11-05
Description: In the Linux kernel, the following vulnerability has been resolved:

bpf: support non-r10 register spill/fill to/from stack in precision tracking

Use instruction (jump) history to record instructions that performed
register spill/fill to/from stack, regardless if this was done through
read-only r10 register, or any other register after copying r10 into it
*and* potentially adjusting offset.

To make this work reliably, we push extra per-instruction flags into
instruction history, encoding stack slot index (spi) and stack frame
number in extra 10 bit flags we take away from prev_idx in instruction
history. We don't touch idx field for maximum performance, as it's
checked most frequently during backtracking.

This change removes basically the last remaining practical limitation of
precision backtracking logic in BPF verifier. It fixes known
deficiencies, but also opens up new opportunities to reduce number of
verified states, explored in the subsequent patches.

There are only three differences in selftests' BPF object files
according to veristat, all in the positive direction (less states).

File                                    Program        Insns (A)  Insns (B)  Insns  (DIFF)  States (A)  States (B)  States (DIFF)
--------------------------------------  -------------  ---------  ---------  -------------  ----------  ----------  -------------
test_cls_redirect_dynptr.bpf.linked3.o  cls_redirect        2987       2864  -123 (-4.12%)         240         231    -9 (-3.75%)
xdp_synproxy_kern.bpf.linked3.o         syncookie_tc       82848      82661  -187 (-0.23%)        5107        5073   -34 (-0.67%)
xdp_synproxy_kern.bpf.linked3.o         syncookie_xdp      85116      84964  -152 (-0.18%)        5162        5130   -32 (-0.62%)

Note, I avoided renaming jmp_history to more generic insn_hist to
minimize number of lines changed and potential merge conflicts between
bpf and bpf-next trees.

Notice also cur_hist_entry pointer reset to NULL at the beginning of
instruction verification loop. This pointer avoids the problem of
relying on last jump history entry's insn_idx to determine whether we
already have entry for current instruction or not. It can happen that we
added jump history entry because current instruction is_jmp_point(), but
also we need to add instruction flags for stack access. In this case, we
don't want to entries, so we need to reuse last added entry, if it is
present.

Relying on insn_idx comparison has the same ambiguity problem as the one
that was fixed recently in [0], so we avoid that.

  [0] https://patchwork.kernel.org/project/netdevbpf/patch/[PII_REDACTED]2[PII_REDACTED]-3-andrii@kernel.org/
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/199f[PII_REDACTED]fa4b8d4d88958e929030b2f92b; https://git.kernel.org/stable/c/41f6f64e6999a837048b1bd13a2f8742964eca6b; https://git.kernel.org/stable/c/ecc2aeeaa08a355d84d3ca9c3d2512399a194f29
CVE: CVE-2024-10687
Published: 2024-11-05
Description: The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons plugin for WordPress is vulnerable to time-based SQL Injection via the $collectedIds parameter in all versions up to, and including, 24.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/contest-gallery/tags/24.0.1/v10/v10-frontend/ecommerce/ecommerce-get-raw-data-from-galleries.php#L61; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3175299%40contest-gallery%2Ftags%2F24.0.3&new=3180268%40contest-gallery%2Ftags%2F24.0.4; https://www.wordfence.com/threat-intel/vulnerabilities/id/fd3b4c44-d47a-45de-bcb2-0820e475b331?source=cve
CVE: CVE-2024-47253
Published: 2024-11-05
Description: In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to write files on the filesystem and potentially achieve arbitrary remote code execution. This vulnerability cannot be exploited by users with lower privilege roles.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.2n.com/en-GB/download/Access-Commander-Security-Advisory-2024-11
CVE: CVE-2024-47254
Published: 2024-11-05
Description: In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient 
Verification of Data Authenticity vulnerability could allow an attacker 
to escalate their privileges and gain root access to the system.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-807
References: https://www.2n.com/en-GB/download/Access-Commander-Security-Advisory-2024-11
CVE: CVE-2024-47255
Published: 2024-11-05
Description: In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow for arbitrary 
code execution with root permissions.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-354
References: https://www.2n.com/en-GB/download/Access-Commander-Security-Advisory-2024-11
CVE: CVE-2024-51517
Published: 2024-11-05
Description: Vulnerability of improper memory access in the phone service module
Impact: Successful exploitation of this vulnerability may affect availability.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-129, CWE-129
References: https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE: CVE-2024-51518
Published: 2024-11-05
Description: Vulnerability of message types not being verified in the advanced messaging modul
Impact: Successful exploitation of this vulnerability may affect availability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-248
References: https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE: CVE-2024-51519
Published: 2024-11-05
Description: Vulnerability of input parameters not being verified in the HDC module
Impact: Successful exploitation of this vulnerability may affect availability.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: https://consumer.huawei.com/en/support/bulletin/2024/11/