deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-7873
Published: 2024-09-17
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Encoding or Escaping of Output, CWE - 83 Improper Neutralization of Script in Attributes in a Web Page vulnerability in Veribilim Software Veribase Order allows Stored XSS, Cross-Site Scripting (XSS), Exploit Script-Based APIs, XSS Through HTTP Headers.This issue affects Veribase Order: before v4.010.3.
CWE: CWE-79, CWE-116
References: https://www.usom.gov.tr/bildirim/tr-24-1485
CVE: CVE-2024-8897
Published: 2024-09-17
Description: Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a trusted site, may be able to spoof the address bar contents. This can lead to a malicious site to appear to have the same URL as the trusted site.
*This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 130.0.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1862537; https://www.mozilla.org/security/advisories/mfsa2024-45/
CVE: CVE-2021-27915
Published: 2024-09-17
Description: Prior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application which could be exploited by a logged in user of Mautic with the appropriate permissions.

This could lead to the user having elevated access to the system.
CVSS Score: 7.6 (HIGH)
CWE: CWE-80, CWE-79
References: https://github.com/mautic/mautic/security/advisories/GHSA-2rc5-2755-v422
CVE: CVE-2024-21743
Published: 2024-09-17
Description: Privilege Escalation vulnerability in favethemes Houzez Login Register houzez-login-register.This issue affects Houzez Login Register: from n/a through 3.2.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-266
References: https://patchstack.com/database/vulnerability/houzez-login-register/wordpress-houzez-login-register-plugin-3-2-5-privilege-escalation-vulnerability?_s_id=cve
CVE: CVE-2024-22303
Published: 2024-09-17
Description: Incorrect Privilege Assignment vulnerability in favethemes Houzez allows Privilege Escalation.This issue affects Houzez: from n/a through 3.2.4.
CVSS Score: 8.8 (HIGH)
CWE: CWE-266
References: https://patchstack.com/database/vulnerability/houzez/wordpress-houzez-theme-3-2-4-privilege-escalation-vulnerability?_s_id=cve
CVE: CVE-2024-38860
Published: 2024-09-17
Description: Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious links that can facilitate phishing attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://checkmk.com/werk/17094
CVE: CVE-2024-47047
Published: 2024-09-17
Description: An issue was discovered in the powermail extension through 12.4.0 for TYPO3. It fails to validate the mail parameter of the createAction, resulting in Insecure Direct Object Reference (IDOR) in some configurations. An unauthenticated attacker can use this to display user-submitted data of all forms persisted by the extension. The fixed versions are 7.5.1, 8.5.1, 10.9.1, and 12.4.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639, CWE-639
References: https://typo3.org/security/advisory/typo3-ext-sa-2024-007
CVE: CVE-2024-47049
Published: 2024-09-17
Description: The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer) does not properly validate URLs within makeFromUrl and makeFromAny, leading to SSRF, and to directory traversal for the reading of local files.
CVSS Score: 8.2 (HIGH)
CWE: CWE-22, CWE-918, CWE-22, CWE-918
References: https://github.com/czim/file-handling/blob/2.3.0/SECURITY.md
CVE: CVE-2021-27916
Published: 2024-09-17
Description: Prior to the patched version, logged in users of Mautic are vulnerable to Relative Path Traversal/Arbitrary File Deletion. Regardless of the level of access the Mautic user had, they could delete files other than those in the media folders such as system files, libraries or other important files.

This vulnerability exists in the implementation of the GrapesJS builder in Mautic.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/mautic/mautic/security/advisories/GHSA-9fcx-cv56-w58p
CVE: CVE-2024-7788
Published: 2024-09-17
Description: Improper Digital Signature Invalidation  vulnerability in Zip Repair Mode of The Document Foundation LibreOffice allows Signature forgery vulnerability in LibreOfficeThis issue affects LibreOffice: from 24.2 before < 24.2.5.
CVSS Score: 7.8 (HIGH)
CWE: CWE-347, CWE-347
References: https://www.libreoffice.org/about-us/security/advisories/CVE-2024-7788; https://lists.debian.org/debian-lts-announce/2024/10/msg00007.html
CVE: CVE-2024-8768
Published: 2024-09-17
Description: A flaw was found in the vLLM library. A completions API request with an empty prompt will crash the vLLM API server, resulting in a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://access.redhat.com/security/cve/CVE-2024-8768; https://bugzilla.redhat.com/show_bug.cgi?id=2311895; https://github.com/vllm-project/vllm/issues/7632
CVE: CVE-2024-8939
Published: 2024-09-17
Description: A vulnerability was found in the ilab model serve component, where improper handling of the best_of parameter in the vllm JSON web API can lead to a Denial of Service (DoS). The API used for LLM-based sentence or chat completion accepts a best_of parameter to return the best completion from several options. When this parameter is set to a large value, the API does not handle timeouts or resource exhaustion properly, allowing an attacker to cause a DoS by consuming excessive system resources. This leads to the API becoming unresponsive, preventing legitimate users from accessing the service.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-400
References: https://access.redhat.com/security/cve/CVE-2024-8939; https://bugzilla.redhat.com/show_bug.cgi?id=2312782
CVE: CVE-2024-38380
Published: 2024-09-17
Description: This vulnerability occurs when user-supplied input is improperly sanitized and then reflected back to the user's browser, allowing an attacker to execute arbitrary JavaScript in the context of the victim's browser session.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-261-02
CVE: CVE-2024-38812
Published: 2024-09-17
Description: The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38812
CVE: CVE-2024-38813
Published: 2024-09-17
Description: The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-250, CWE-273, CWE-273
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38813
CVE: CVE-2024-42501
Published: 2024-09-17
Description: An authenticated Path Traversal vulnerabilities exists in the ArubaOS. Successful exploitation of this vulnerability allows an attacker to install unsigned packages on the underlying operating system, enabling the threat actor to execute arbitrary code or install implants.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04709en_us&docLocale=en_US
CVE: CVE-2024-42502
Published: 2024-09-17
Description: Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability result in the ability to inject shell commands on the underlying operating system.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04709en_us&docLocale=en_US
CVE: CVE-2024-42503
Published: 2024-09-17
Description: Authenticated command execution vulnerability exist in the  ArubaOS command line interface (CLI). Successful exploitation of this vulnerabilities result in the ability to run arbitrary commands as a priviledge user on the underlying operating system.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04709en_us&docLocale=en_US
CVE: CVE-2024-45682
Published: 2024-09-17
Description: There is a command injection vulnerability that may allow an attacker to inject malicious input on the device's operating system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-78
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-261-02
CVE: CVE-2024-45804
Published: 2024-09-17
Description: Rejected reason: This CVE is a duplicate of another CVE.
CVE: CVE-2024-8796
Published: 2024-09-17
Description: Under the default configuration, Devise-Two-Factor versions >= 2.2.0 & < 6.0.0 generate TOTP shared secrets that are 120 bits instead of the 128-bit minimum defined by RFC 4226. Using a shared secret shorter than the minimum to generate a multi-factor authentication code could make it easier for an attacker to guess the shared secret and generate valid TOTP codes.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-331, CWE-331
References: https://github.com/devise-two-factor/devise-two-factor/security/advisories/GHSA-qjxf-mc72-wjr2
CVE: CVE-2024-8944
Published: 2024-09-17
Description: A vulnerability, which was classified as critical, was found in code-projects Hospital Management System 1.0. This affects an unknown part of the file check_availability.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://code-projects.org/; https://github.com/65241/cve/issues/1; https://vuldb.com/?ctiid.277761
CVE: CVE-2024-8945
Published: 2024-09-17
Description: A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and classified as critical. This vulnerability affects unknown code of the file /index.php/dashboard/save. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://bytium.com/sql-injection-vulnerability-identified-in-rise-crm/; https://vuldb.com/?ctiid.277762; https://vuldb.com/?id.277762
CVE: CVE-2024-38183
Published: 2024-09-17
Description: An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38183
CVE: CVE-2024-43460
Published: 2024-09-17
Description: Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network.
CVSS Score: 8.1 (HIGH)
CWE: CWE-285
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43460
CVE: CVE-2024-45384
Published: 2024-09-17
Description: Padding Oracle vulnerability in Apache Druid extension, druid-pac4j.
This could allow an attacker to manipulate a pac4j session cookie.

This issue affects Apache Druid versions 0.18.0 through 30.0.0.
Since the druid-pac4j extension is optional and disabled by default, Druid installations not using the druid-pac4j extension are not affected by this vulnerability.

While we are not aware of a way to meaningfully exploit this flaw, we 
nevertheless recommend upgrading to version 30.0.1 or higher which fixes the issue
and ensuring you have a strong 
druid.auth.pac4j.cookiePassphrase as a precaution.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://lists.apache.org/thread/gr94fnp574plb50lsp8jw4smvgv1lbz1; http://www.openwall.com/lists/oss-security/2024/09/17/1
CVE: CVE-2024-45537
Published: 2024-09-17
Description: Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionality allows trusted users to set up Druid lookups or run ingestion tasks. Druid also allows administrators to configure a list of allowed properties that users are able to provide for their JDBC connections. By default, this allowed properties list restricts users to TLS-related properties only. However, when configuration a MySQL JDBC connection, users can use a particularly-crafted JDBC connection string to provide properties that are not on this allow list.

Users without the permission to configure JDBC connections are not able to exploit this vulnerability.
CVE-2021-26919 describes a similar vulnerability which was partially addressed in Apache Druid 0.20.2.

This issue is fixed in Apache Druid 30.0.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://lists.apache.org/thread/2ovx1t77y6tlkhk5b42clp4vwo4c8cjv
CVE: CVE-2024-45612
Published: 2024-09-17
Description: Contao is an Open Source CMS. In affected versions an untrusted user can inject insert tags into the canonical tag, which are then replaced on the web page (front end). Users are advised to update to Contao 4.13.49, 5.3.15 or 5.4.3. Users unable to upgrade should disable canonical tags in the root page settings.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-74
References: https://contao.org/en/security-advisories/insert-tag-injection-via-canonical-urls; https://github.com/contao/contao/security/advisories/GHSA-2xpq-xp6c-5mgj
CVE: CVE-2024-45798
Published: 2024-09-17
Description: arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. The `arduino-esp32` CI is vulnerable to multiple Poisoned Pipeline Execution (PPE) vulnerabilities. Code injection in `tests_results.yml` workflow (`GHSL-2024-169`) and environment Variable injection (`GHSL-2024-170`). These issue have been addressed but users are advised to verify the contents of the downloaded artifacts.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-20, CWE-78, CWE-94
References: https://codeql.github.com/codeql-query-help/javascript/js-actions-command-injection; https://github.com/espressif/arduino-esp32/blob/690bdb511d9f001e2066da2dda2c631a3eee270f/.github/workflows/tests_results.yml; https://github.com/espressif/arduino-esp32/security/advisories/GHSA-h52q-xhg2-6jw8
CVE: CVE-2024-45803
Published: 2024-09-17
Description: Wire UI is a library of components and resources to empower Laravel and Livewire application development. A potential Cross-Site Scripting (XSS) vulnerability has been identified in the `/wireui/button` endpoint, specifically through the `label` query parameter. Malicious actors could exploit this vulnerability by injecting JavaScript into the `label` parameter, leading to the execution of arbitrary code in the victim's browser. The `/wireui/button` endpoint dynamically renders button labels based on user-provided input via the `label` query parameter. Due to insufficient sanitization or escaping of this input, an attacker can inject malicious JavaScript. By crafting such a request, an attacker can inject arbitrary code that will be executed by the browser when the endpoint is accessed. If exploited, this vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the affected website. This could lead to: **Session Hijacking**: Stealing session cookies, tokens, or other sensitive information. **User Impersonation**: Performing unauthorized actions on behalf of authenticated users. **Phishing**: Redirecting users to malicious websites. **Content Manipulation**: Altering the appearance or behavior of the affected page to mislead users or execute further attacks. The severity of this vulnerability depends on the context of where the affected component is used, but in all cases, it poses a significant risk to user security. This issue has been addressed in release versions 1.19.3 and 2.1.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/wireui/wireui/commit/784c4f110e58eb41d0f2bdecd4655ea417f16e7e; https://github.com/wireui/wireui/commit/a[PII_REDACTED]55f4dcc559da04d4e319f76b80fc5; https://github.com/wireui/wireui/security/advisories/GHSA-rw5h-g8xq-6877
CVE: CVE-2024-8660
Published: 2024-09-17
Description: Concrete CMS versions 9.0.0 through 9.3.3 are affected by a
stored XSS vulnerability in the "Top Navigator Bar" block.
Since the "Top Navigator Bar" output was not sufficiently sanitized, a rogue administrator could add a malicious payload that could be executed when targeted users visited the home page.The Concrete CMS Security Team gave this vulnerability a CVSS v4 score of 4.6
with vector  CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N . This
does not affect versions below 9.0.0  since they do not have the Top
Navigator Bar Block. Thanks, Chu Quoc Khanh for reporting.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://documentation.concretecms.org/9-x/developers/introduction/version-history/934-release-notes; https://github.com/concretecms/concretecms/pull/12128
CVE: CVE-2024-8900
Published: 2024-09-17
Description: An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain sequence of navigational events. This vulnerability affects Firefox < 129, Firefox ESR < 128.3, and Thunderbird < 128.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1872841; https://www.mozilla.org/security/advisories/mfsa2024-33/; https://www.mozilla.org/security/advisories/mfsa2024-47/
CVE: CVE-2024-8946
Published: 2024-09-17
Description: A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mp_vfs_umount of the file extmod/vfs.c of the component VFS Unmount Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is[PII_REDACTED]3c92334e8518695a11fc0e2ceea68b. It is recommended to apply a patch to fix this issue. In the VFS unmount process, the comparison between the mounted path string and the unmount requested string is based solely on the length of the unmount string, which can lead to a heap buffer overflow read.
CVSS Score: 7.3 (HIGH)
CWE: CWE-122, CWE-787
References: https://github.com/micropython/micropython/commit/[PII_REDACTED]3c92334e8518695a11fc0e2ceea68b; https://github.com/micropython/micropython/issues/13006; https://github.com/micropython/micropython/issues/13006#issuecomment[PII_REDACTED]
CVE: CVE-2024-8947
Published: 2024-09-17
Description: A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use after free. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 1.23.0 is able to address this issue. The identifier of the patch is 4bed614e707c0644c06e117f848fa12605c711cd. It is recommended to upgrade the affected component. In micropython objarray component, when a bytes object is resized and copied into itself, it may reference memory that has already been freed.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-416
References: https://github.com/micropython/micropython/commit/4bed614e707c0644c06e117f848fa12605c711cd; https://github.com/micropython/micropython/issues/13283; https://github.com/micropython/micropython/issues/13283#issuecomment[PII_REDACTED]
CVE: CVE-2024-8948
Published: 2024-09-17
Description: A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpz_as_bytes of the file py/objint.c. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 908ab1ceca15ee6fd0ef82ca4cba770a3ec41894. It is recommended to apply a patch to fix this issue. In micropython objint component, converting zero from int to bytes leads to heap buffer-overflow-write at mpz_as_bytes.
CVSS Score: 7.3 (HIGH)
CWE: CWE-122, CWE-787
References: https://github.com/micropython/micropython/commit/908ab1ceca15ee6fd0ef82ca4cba770a3ec41894; https://github.com/micropython/micropython/issues/13041; https://vuldb.com/?ctiid.277766
CVE: CVE-2024-8949
Published: 2024-09-17
Description: A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown part of the file /classes/Master.php of the component Cart Content Handler. The manipulation of the argument cart_id/id leads to improper ownership management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-282
References: https://github.com/gurudattch/CVEs/edit/main/Sourcecodester-Online-Eyewear-shop-webiste-Broken-access-control.md; https://vuldb.com/?ctiid.277767; https://vuldb.com/?id.277767
CVE: CVE-2024-45398
Published: 2024-09-17
Description: Contao is an Open Source CMS. In affected versions a back end user with access to the file manager can upload malicious files and execute them on the server. Users are advised to update to Contao 4.13.49, 5.3.15 or 5.4.3. Users unable to update are advised to configure their web server so it does not execute PHP files and other scripts in the Contao file upload directory.
CVSS Score: 8.3 (HIGH)
CWE: CWE-434
References: https://contao.org/en/security-advisories/remote-command-execution-through-file-uploads; https://github.com/contao/contao/security/advisories/GHSA-vm6r-j788-hjh5
CVE: CVE-2024-45604
Published: 2024-09-17
Description: Contao is an Open Source CMS. In affected versions authenticated users in the back end can list files outside the document root in the file selector widget. Users are advised to update to Contao 4.13.49. There are no known workarounds for this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://contao.org/en/security-advisories/directory-traversal-in-the-fileselector-widget; https://github.com/contao/contao/security/advisories/GHSA-4p75-5p53-65m9
CVE: CVE-2024-45605
Published: 2024-09-17
Description: Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary users given a know alert ID. A patch was issued to ensure authorization checks are properly scoped on requests to delete user alert notifications. Sentry SaaS users do not need to take any action. Self-Hosted Sentry users should upgrade to version 24.9.0 or higher. There are no known workarounds for this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://github.com/getsentry/self-hosted; https://github.com/getsentry/sentry/pull/77093; https://github.com/getsentry/sentry/security/advisories/GHSA-54m3-95j9-v89j