deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-12484
Published: 2024-12-12
Description: A vulnerability classified as critical was found in Codezips Technical Discussion Forum 1.0. This vulnerability affects unknown code of the file /signuppost.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/LiChaser/CVE/; https://vuldb.com/?ctiid.287866; https://vuldb.com/?id.287866
CVE: CVE-2024-12485
Published: 2024-12-12
Description: A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/department.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/bjtyyy/CVE/blob/main/Online%20Class%20and%20Exam%20Scheduling%20System_department_php.docx; https://vuldb.com/?ctiid.287867
CVE: CVE-2024-12486
Published: 2024-12-12
Description: A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/rank_update.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/bjtyyy/CVE/blob/main/Online%20Class%20and%20Exam%20Scheduling%20System_rank_update_php.docx; https://vuldb.com/?ctiid.287868
CVE: CVE-2024-12487
Published: 2024-12-12
Description: A vulnerability has been found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/room_update.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/bjtyyy/CVE/blob/main/Online%20Class%20and%20Exam%20Scheduling%20System_room_update_php.docx; https://vuldb.com/?ctiid.287869
CVE: CVE-2024-12488
Published: 2024-12-12
Description: A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/subject_update.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/bjtyyy/CVE/blob/main/Online%20Class%20and%20Exam%20Scheduling%20System_subject_update_php%20.docx; https://vuldb.com/?ctiid.287870
CVE: CVE-2024-12489
Published: 2024-12-12
Description: A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/term.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/bjtyyy/CVE/blob/main/Online%20Class%20and%20Exam%20Scheduling%20System_term_php%20.docx; https://vuldb.com/?ctiid.287871
CVE: CVE-2024-37377
Published: 2024-12-12
Description: A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://forums.ivanti.com/s/article/December-2024-Security-Advisory-Ivanti-Connect-Secure-ICS-and-Ivanti-Policy-Secure-IPS-Multiple-CVEs
CVE: CVE-2024-37401
Published: 2024-12-12
Description: An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://forums.ivanti.com/s/article/December-2024-Security-Advisory-Ivanti-Connect-Secure-ICS-and-Ivanti-Policy-Secure-IPS-Multiple-CVEs
CVE: CVE-2024-42448
Published: 2024-12-12
Description: From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to perform Remote Code Execution (RCE) on the VSPC server machine.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94
References: https://www.veeam.com/kb4679
CVE: CVE-2024-43594
Published: 2024-12-12
Description: Microsoft System Center Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43594
CVE: CVE-2024-43600
Published: 2024-12-12
Description: Microsoft Office Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43600
CVE: CVE-2024-45337
Published: 2024-12-12
Description: Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is in fact used to authenticate." Specifically, the SSH protocol allows clients to inquire about whether a public key is acceptable before proving control of the corresponding private key. PublicKeyCallback may be called with multiple keys, and the order in which the keys were provided cannot be used to infer which key the client successfully authenticated with, if any. Some applications, which store the key(s) passed to PublicKeyCallback (or derived information) and make security relevant determinations based on it once the connection is established, may make incorrect assumptions. For example, an attacker may send public keys A and B, and then authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B for which the attacker does not actually control the private key. Since this API is widely misused, as a partial mitigation golang.org/x/cry...@v0.31.0 enforces the property that, when successfully authenticating via public key, the last key passed to ServerConfig.PublicKeyCallback will be the key used to authenticate the connection. PublicKeyCallback will now be called multiple times with the same key, if necessary. Note that the client may still not control the last key passed to PublicKeyCallback if the connection is then authenticated with a different method, such as PasswordCallback, KeyboardInteractiveCallback, or NoClientAuth. Users should be using the Extensions field of the Permissions return value from the various authentication callbacks to record data associated with the authentication attempt instead of referencing external state. Once the connection is established the state corresponding to the successful authentication attempt can be retrieved via the ServerConn.Permissions field. Note that some third-party libraries misuse the Permissions type by sharing it across authentication attempts; users of third-party libraries should refer to the relevant projects for guidance.
CVSS Score: 9.1 (CRITICAL)
References: https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909; https://go.dev/cl/635315; https://go.dev/issue/70779
CVE: CVE-2024-45404
Published: 2024-12-12
Description: OpenCTI is an open-source cyber threat intelligence platform. In versions below 6.2.18, because the function to limit the rate of OTP does not exist, an attacker with valid credentials or a malicious user who commits internal fraud can break through the two-factor authentication and hijack the account. This is because the otpLogin mutation does not implement One Time Password rate limiting. As of time of publication, it is unknown whether a patch is available.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287, CWE-307
References: https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-hg56-r6hh-56j7; https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-hg56-r6hh-56j7
CVE: CVE-2024-47537
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed to by stream->samples to accommodate stream->n_samples + samples_count elements of type QtDemuxSample. The problem is that samples_count is read from the input file. And if this value is big enough, this can lead to an integer overflow during the addition. As a consequence, g_try_renew might allocate memory for a significantly smaller number of elements than intended. Following this, the program iterates through samples_count elements and attempts to write samples_count number of elements, potentially exceeding the actual allocated memory size and causing an OOB-write. This vulnerability is fixed in 1.24.10.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-787
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch; https://gstreamer.freedesktop.org/security/sa-2024-0005.html; https://securitylab.github.com/advisories/GHSL-2024-094_Gstreamer/
CVE: CVE-2024-47538
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the `vorbis_handle_identification_packet` function within `gstvorbisdec.c`. The position array is a stack-allocated buffer of size 64. If vd->vi.channels exceeds 64, the for loop will write beyond the boundaries of the position array. The value written will always be `GST_AUDIO_CHANNEL_POSITION_NONE`. This vulnerability allows someone to overwrite the EIP address allocated in the stack. Additionally, this bug can overwrite the `GstAudioInfo` info structure. This vulnerability is fixed in 1.24.10.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8035.patch; https://gstreamer.freedesktop.org/security/sa-2024-0022.html; https://securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer/
CVE: CVE-2024-47539
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the convert_to_s334_1a function in isomp4/qtdemux.c. The vulnerability arises due to a discrepancy between the size of memory allocated to the storage array and the loop condition i * 2 < ccpair_size. Specifically, when ccpair_size is even, the allocated size in storage does not match the loop's expected bounds, resulting in an out-of-bounds write. This bug allows for the overwriting of up to 3 bytes beyond the allocated bounds of the storage array. This vulnerability is fixed in 1.24.10.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch; https://gstreamer.freedesktop.org/security/sa-2024-0007.html; https://securitylab.github.com/advisories/GHSL-2024-195_Gstreamer/
CVE: CVE-2024-47540
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the gst_matroska_demux_add_wvpk_header function within matroska-demux.c. When size < 4, the program calls gst_buffer_unmap with an uninitialized map variable. Then, in the gst_memory_unmap function, the program will attempt to unmap the buffer using the uninitialized map variable, causing a function pointer hijack, as it will jump to mem->allocator->mem_unmap_full or mem->allocator->mem_unmap. This vulnerability could allow an attacker to hijack the execution flow, potentially leading to code execution. This vulnerability is fixed in 1.24.10.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-457, CWE-908
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch; https://gstreamer.freedesktop.org/security/sa-2024-0017.html; https://securitylab.github.com/advisories/GHSL-2024-197_GStreamer/
CVE: CVE-2024-47541
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-write vulnerability has been identified in the gst_ssa_parse_remove_override_codes function of the gstssaparse.c file. This function is responsible for parsing and removing SSA (SubStation Alpha) style override codes, which are enclosed in curly brackets ({}). The issue arises when a closing curly bracket "}" appears before an opening curly bracket "{" in the input string. In this case, memmove() incorrectly duplicates a substring. With each successive loop iteration, the size passed to memmove() becomes progressively larger (strlen(end+1)), leading to a write beyond the allocated memory bounds. This vulnerability is fixed in 1.24.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8036.patch; https://gstreamer.freedesktop.org/security/sa-2024-0023.html; https://securitylab.github.com/advisories/GHSL-2024-228_GStreamer/
CVE: CVE-2024-47542
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference has been discovered in the id3v2_read_synch_uint function, located in id3v2.c. If id3v2_read_synch_uint is called with a null work->hdr.frame_data, the pointer guint8 *data is accessed without validation, resulting in a null pointer dereference. This vulnerability can result in a Denial of Service (DoS) by triggering a segmentation fault (SEGV). This vulnerability is fixed in 1.24.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-476
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8033.patch; https://gstreamer.freedesktop.org/security/sa-2024-0008.html; https://securitylab.github.com/advisories/GHSL-2024-235_Gstreamer/
CVE: CVE-2024-47543
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in qtdemux_parse_container function within qtdemux.c. In the parent function qtdemux_parse_node, the value of length is not well checked. So, if length is big enough, it causes the pointer end to point beyond the boundaries of buffer. Subsequently, in the qtdemux_parse_container function, the while loop can trigger an OOB-read, accessing memory beyond the bounds of buf. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch; https://gstreamer.freedesktop.org/security/sa-2024-0009.html; https://securitylab.github.com/advisories/GHSL-2024-236_Gstreamer/
CVE: CVE-2024-47544
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. The function qtdemux_parse_sbgp in qtdemux.c is affected by a null dereference vulnerability. This vulnerability is fixed in 1.24.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch; https://gstreamer.freedesktop.org/security/sa-2024-0011.html; https://securitylab.github.com/advisories/GHSL-2024-238_Gstreamer/
CVE: CVE-2024-47545
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemux_parse_trak function within qtdemux.c. During the strf parsing case, the subtraction size -= 40 can lead to a negative integer overflow if it is less than 40. If this happens, the subsequent call to gst_buffer_fill will invoke memcpy with a large tocopy size, resulting in an OOB-read. This vulnerability is fixed in 1.24.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-191
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch; https://gstreamer.freedesktop.org/security/sa-2024-0010.html; https://securitylab.github.com/advisories/GHSL-2024-242_Gstreamer/
CVE: CVE-2024-47546
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extract_cc_from_data function within qtdemux.c. In the FOURCC_c708 case, the subtraction atom_length - 8 may result in an underflow if atom_length is less than 8. When that subtraction underflows, *cclen ends up being a large number, and then cclen is passed to g_memdup2 leading to an out-of-bounds (OOB) read. This vulnerability is fixed in 1.24.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-191
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch; https://gstreamer.freedesktop.org/security/sa-2024-0013.html; https://securitylab.github.com/advisories/GHSL-2024-243_Gstreamer/
CVE: CVE-2024-47596
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemux_parse_svq3_stsd_data function within qtdemux.c. In the FOURCC_SMI_ case, seqh_size is read from the input file without proper validation. If seqh_size is greater than the remaining size of the data buffer, it can lead to an OOB-read in the following call to gst_buffer_fill, which internally uses memcpy. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch; https://gstreamer.freedesktop.org/security/sa-2024-0015.html; https://securitylab.github.com/advisories/GHSL-2024-244_Gstreamer/
CVE: CVE-2024-47597
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads data beyond the boundaries of the stream->stco buffer. The following code snippet shows the call to qt_atom_parser_get_offset_unchecked, which leads to the OOB-read when parsing the provided GHSL-2024-245_crash1.mp4 file. This issue may lead to read up to 8 bytes out-of-bounds. This vulnerability is fixed in 1.24.10.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch; https://gstreamer.freedesktop.org/security/sa-2024-0012.html; https://securitylab.github.com/advisories/GHSL-2024-245_Gstreamer/
CVE: CVE-2024-47598
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sample_table function within qtdemux.c. The problem is that the size of the stts buffer isn’t properly checked before reading stts_duration, allowing the program to read 4 bytes beyond the boundaries of stts->data. This vulnerability reads up to 4 bytes past the allocated bounds of the stts array. This vulnerability is fixed in 1.24.10.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch; https://gstreamer.freedesktop.org/security/sa-2024-0006.html; https://securitylab.github.com/advisories/GHSL-2024-246_Gstreamer/
CVE: CVE-2024-47599
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_jpeg_dec_negotiate function in gstjpegdec.c. This function does not check for a NULL return value from gst_video_decoder_set_output_state. When this happens, dereferences of the outstate pointer will lead to a null pointer dereference. This vulnerability can result in a Denial of Service (DoS) by triggering a segmentation fault (SEGV). This vulnerability is fixed in 1.24.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8040.patch; https://gstreamer.freedesktop.org/security/sa-2024-0016.html; https://securitylab.github.com/advisories/GHSL-2024-247_Gstreamer/
CVE: CVE-2024-47600
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the format_channel_mask function in gst-discoverer.c. The vulnerability affects the local array position, which is defined with a fixed size of 64 elements. However, the function gst_discoverer_audio_info_get_channels may return a guint channels value greater than 64. This causes the for loop to attempt access beyond the bounds of the position array, resulting in an OOB-read when an index greater than 63 is used. This vulnerability can result in reading unintended bytes from the stack. Additionally, the dereference of value->value_nick after the OOB-read can lead to further memory corruption or undefined behavior. This vulnerability is fixed in 1.24.10.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8034.patch; https://gstreamer.freedesktop.org/security/sa-2024-0018.html; https://securitylab.github.com/advisories/GHSL-2024-248_Gstreamer/
CVE: CVE-2024-47601
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_parse_blockgroup_or_simpleblock function within matroska-demux.c. This function does not properly check the validity of the GstBuffer *sub pointer before performing dereferences. As a result, null pointer dereferences may occur. This vulnerability is fixed in 1.24.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch; https://gstreamer.freedesktop.org/security/sa-2024-0020.html; https://securitylab.github.com/advisories/GHSL-2024-249_Gstreamer/
CVE: CVE-2024-47602
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_add_wvpk_header function within matroska-demux.c. This function does not properly check the validity of the stream->codec_priv pointer in the following code. If stream->codec_priv is NULL, the call to GST_READ_UINT16_LE will attempt to dereference a null pointer, leading to a crash of the application. This vulnerability is fixed in 1.24.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-476, CWE-476
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch; https://gstreamer.freedesktop.org/security/sa-2024-0019.html; https://securitylab.github.com/advisories/GHSL-2024-250_Gstreamer/