deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-53267
Published: 2024-11-26
Description: sigstore-java is a sigstore java client for interacting with sigstore infrastructure. sigstore-java has insufficient verification for a situation where a validly-signed but "mismatched" bundle is presented as proof of inclusion into a transparency log. This bug impacts clients using any variation of KeylessVerifier.verify(). The verifier may accept a bundle with an unrelated log entry, cryptographically verifying everything but fails to ensure the log entry applies to the artifact in question, thereby "verifying" a bundle without any proof the signing event was logged. This allows the creation of a bundle without fulcio certificate and private key combined with an unrelated but time-correct log entry to fake logging of a signing event. A malicious actor using a compromised identity may want to do this to prevent discovery via rekor's log monitors. The signer's identity will still be available to the verifier. The signature on the bundle must still be on the correct artifact for the verifier to pass. sigstore-gradle-plugin and sigstore-maven-plugin are not affected by this as they only provide signing functionality. This issue has been patched in v1.1.0 release with PR #856. All users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-347
References: https://github.com/sigstore/sigstore-conformance/pull/166; https://github.com/sigstore/sigstore-java/pull/856; https://github.com/sigstore/sigstore-java/security/advisories/GHSA-q4xm-6fjc-5f6w
CVE: CVE-2024-53619
Published: 2024-11-26
Description: An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3 allows attackers to execute arbitrary code via uploading a crafted PDF file.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://grimthereaperteam.medium.com/spip-4-3-3-malicious-file-upload-xss-in-pdf-526c03bb1776
CVE: CVE-2024-53620
Published: 2024-11-26
Description: A cross-site scripting (XSS) vulnerability in the Article module of SPIP v4.3.3 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Title parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://grimthereaperteam.medium.com/ec1e8714c02e
CVE: CVE-2024-53844
Published: 2024-11-26
Description: E.D.D.I (Enhanced Dialog Driven Interface) is a middleware to connect and manage LLM API bots. A path traversal vulnerability exists in the backup export functionality of EDDI, as implemented in `RestExportService.java`. This vulnerability allows an attacker to access sensitive files on the server by manipulating the `botFilename` parameter in requests. The application fails to sanitize user input, enabling malicious inputs such as `..%2f..%2fetc%2fpasswd` to access arbitrary files. However, the **severity of this vulnerability is significantly limited** because EDDI typically runs within a **Docker container**, which provides additional layers of isolation and restricted permissions. As a result, while this vulnerability exposes files within the container, it does not inherently threaten the underlying host system or other containers. A patch is required to sanitize and validate the botFilename input parameter. Users should ensure they are using version 5.4 which contains this patdch. For temporary mitigation, access to the vulnerable endpoint should be restricted through firewall rules or authentication mechanisms.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/labsai/EDDI/blob/release/5.3.3/src/main/java/ai/labs/eddi/backup/impl/RestExportService.java#L95; https://github.com/labsai/EDDI/security/advisories/GHSA-49qh-39wc-4p8j
CVE: CVE-2024-8114
Published: 2024-11-26
Description: An issue has been discovered in GitLab CE/EE affecting all versions from 8.12 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. This issue allows an attacker with access to a victim's Personal Access Token (PAT) to escalate privileges.
CVSS Score: 8.2 (HIGH)
CWE: CWE-862
References: https://gitlab.com/gitlab-org/gitlab/-/issues/480494; https://hackerone.com/reports/2649822
CVE: CVE-2024-8177
Published: 2024-11-26
Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 15.6 prior to 17.4.5, starting from 17.5 prior to 17.5.3, starting from 17.6 prior to 17.6.1 which could cause Denial of Service via integrating a malicious harbor registry.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-407
References: https://gitlab.com/gitlab-org/gitlab/-/issues/480706; https://hackerone.com/reports/2637996
CVE: CVE-2024-8237
Published: 2024-11-26
Description: A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions prior to 12.6 prior to 17.4.5, 17.5 prior to 17.5.3, and 17.6 prior to 17.6.1. An attacker could cause a denial of service with a crafted cargo.toml file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-407
References: https://gitlab.com/gitlab-org/gitlab/-/issues/480900; https://hackerone.com/reports/2648665
CVE: CVE-2019-17082
Published: 2024-11-26
Description: Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass. When installed on a Linux or Solaris system

the vulnerability could allow anyone who knows a valid AccuRev username can use the AccuRev client to login and gain access to AccuRev source control without knowing the user’s password.

This issue affects AccuRev: 2017.1.
CWE: CWE-522
References: https://support.microfocus.com/kb/kmdoc.php?id=KM03544106
CVE: CVE-2024-10240
Published: 2024-11-26
Description: An issue has been discovered in GitLab EE affecting all versions starting from 17.3 before 17.3.7, all versions starting from 17.4 before 17.4.4, all versions starting from 17.5 before 17.5.2 in which an unauthenticated user may be able to read some information about an MR in a private project, under certain circumstances.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-497
References: https://about.gitlab.com/releases/2024/11/13/patch-release-gitlab-17-5-2-released/#information-disclosure-through-an-api-endpoint; https://gitlab.com/gitlab-org/gitlab/-/issues/493188
CVE: CVE-2024-11145
Published: 2024-11-26
Description: Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Joomla! application. Fixed in versions 3.8 and 4.5.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/IT/white/2024/va-24-331-01.json; https://www.valorapps.com/web-products/easy-folder-listing-pro.html
CVE: CVE-2024-11742
Published: 2024-11-26
Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Best House Rental Management System 1.0. This issue affects some unknown processing of the file /rental/ajax.php?action=save_tenant. The manipulation of the argument lastname/firstname/middlename leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/YasserREED/YasserREED-CVEs/blob/main/Best%20house%20rental%20management%20system%20project%20in%20php/Stored%20Cross-Site%20Scripting%20(XSS).md; https://vuldb.com/?ctiid.286139; https://vuldb.com/?id.286139
CVE: CVE-2024-11743
Published: 2024-11-26
Description: A vulnerability, which was classified as problematic, was found in SourceCodester Best House Rental Management System 1.0. Affected is an unknown function of the file /rental/ajax.php?action=delete_user of the component POST Request Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862, CWE-352
References: https://github.com/YasserREED/YasserREED-CVEs/blob/main/Best%20house%20rental%20management%20system%20project%20in%20php/Cross-Site%20Request%20Forgery%20(CSRF).md; https://vuldb.com/?ctiid.286140; https://vuldb.com/?id.286140
CVE: CVE-2024-49035
Published: 2024-11-26
Description: An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network.
CVSS Score: 8.7 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49035; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-49035
CVE: CVE-2024-49038
Published: 2024-11-26
Description: Improper neutralization of input during web page generation ('Cross-site Scripting') in Copilot Studio by an unauthorized attacker leads to elevation of privilege over a network.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49038
CVE: CVE-2024-49052
Published: 2024-11-26
Description: Missing authentication for critical function in Microsoft Azure PolicyWatch allows an unauthorized attacker to elevate privileges over a network.
CVSS Score: 8.2 (HIGH)
CWE: CWE-306
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49052
CVE: CVE-2024-49053
Published: 2024-11-26
Description: Microsoft Dynamics 365 Sales Spoofing Vulnerability
CVSS Score: 7.6 (HIGH)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49053
CVE: CVE-2024-8676
Published: 2024-11-26
Description: A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be asked to restore it. When it does that restoration, it attempts to restore the mounts from the restore archive instead of the pod request. As a result, the validations run on the pod spec, verifying that the pod has access to the mounts it specifies are not applicable to a restored container. This flaw allows a malicious user to trick CRI-O into restoring a pod that doesn't have access to host mounts. The user needs access to the kubelet or cri-o socket to call the restore endpoint and trigger the restore.
CVSS Score: 7.4 (HIGH)
CWE: CWE-285
References: https://access.redhat.com/errata/RHBA-2024:10826; https://access.redhat.com/errata/RHSA-2025:0648; https://access.redhat.com/errata/RHSA-2025:1908
CVE: CVE-2024-11744
Published: 2024-11-26
Description: A vulnerability has been found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://1000projects.org/; https://github.com/zdwf-klm/CVE/issues/1; https://vuldb.com/?ctiid.286141
CVE: CVE-2024-11745
Published: 2024-11-26
Description: A vulnerability was found in Tenda AC8 16.03.34.09 and classified as critical. Affected by this issue is the function route_static_check of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121, CWE-787
References: https://tasty-foxtrot-3a8.notion.site/Tenda-AC8v4-route_static_check-stack-overflow-1460448e[PII_REDACTED]a5d39755d2bb6b?pvs=74; https://vuldb.com/?ctiid.286142; https://vuldb.com/?id.286142
CVE: CVE-2024-43784
Published: 2024-11-26
Description: lakeFS is an open-source tool that transforms object storage into a Git-like repository. Existing lakeFS users who have issued credentials to users who have been deleted are affected by this vulnerability. When creating a new user with the same username as a deleted user, that user will inherit all of the previous user's credentials. This issue has been addressed in release version 1.33.0 and all users are advised to upgrade. The only known workaround for those who cannot upgrade is to not reuse usernames.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-281
References: https://github.com/treeverse/lakeFS/releases/tag/v1.33.0; https://github.com/treeverse/lakeFS/security/advisories/GHSA-hh33-46q4-hwm2
CVE: CVE-2024-50942
Published: 2024-11-26
Description: qiwen-file v1.4.0 was discovered to contain a SQL injection vulnerability via the component /mapper/NoticeMapper.xml.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://qiwen-file.com; https://gist.github.com/3xsh0re/[PII_REDACTED]bc35b2f95dcea12a4310fc; https://www.qiwenshare.com/
CVE: CVE-2024-11622
Published: 2024-11-26
Description: An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases.
CVSS Score: 7.3 (HIGH)
CWE: CWE-91, CWE-611
References: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04731en_us
CVE: CVE-2024-53673
Published: 2024-11-26
Description: A java deserialization vulnerability in HPE Remote Insight Support may allow an unauthenticated attacker to execute code.
CVSS Score: 8.1 (HIGH)
CWE: CWE-502, CWE-502
References: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04731en_us
CVE: CVE-2024-53674
Published: 2024-11-26
Description: An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases.
CVSS Score: 7.3 (HIGH)
CWE: CWE-91, CWE-611
References: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04731en_us
CVE: CVE-2024-53675
Published: 2024-11-26
Description: An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases.
CVSS Score: 7.3 (HIGH)
CWE: CWE-91, CWE-611
References: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04731en_us
CVE: CVE-2024-11817
Published: 2024-11-26
Description: A vulnerability was found in PHPGurukul User Registration & Login and User Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/wackymaker/CVE/issues/1; https://phpgurukul.com/; https://vuldb.com/?ctiid.286190
CVE: CVE-2024-11818
Published: 2024-11-27
Description: A vulnerability classified as critical has been found in PHPGurukul User Registration & Login and User Management System 1.0. This affects an unknown part of the file /signup.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/wackymaker/CVE/issues/3; https://phpgurukul.com/; https://vuldb.com/?ctiid.286191
CVE: CVE-2024-11819
Published: 2024-11-27
Description: A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /forgot_password_process.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://1000projects.org/; https://github.com/wackymaker/CVE/issues/2; https://vuldb.com/?ctiid.286192
CVE: CVE-2024-53849
Published: 2024-11-27
Description: editorconfig-core-c  is  theEditorConfig core library written in C (for use by plugins supporting EditorConfig parsing). In affected versions several overflows may occur in switch case '[' when the input pattern contains many escaped characters. The added backslashes leave too little space in the output pattern when processing nested brackets such that the remaining input length exceeds the output capacity. This issue has been addressed in release version 0.12.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CWE: CWE-121
References: http://editorconfig.org; https://github.com/editorconfig/editorconfig-core-c/commit/4d5518a0a4e4910c37281ab13a048d0d86999782; https://github.com/editorconfig/editorconfig-core-c/commit/a8dd5312e08abeab95ff5656d32ed3cb85fba70b
CVE: CVE-2024-11820
Published: 2024-11-27
Description: A vulnerability, which was classified as problematic, has been found in code-projects Crud Operation System 1.0. This issue affects some unknown processing of the file /add.php. The manipulation of the argument saddress leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://code-projects.org/; https://github.com/xiaobai19198/cve/blob/main/xss.md; https://vuldb.com/?ctiid.286193
CVE: CVE-2024-53676
Published: 2024-11-27
Description: A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-552, CWE-22
References: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04731en_us; https://github.com/pwnfuzz/POCs/tree/main/CVE-2024-53676
CVE: CVE-2024-5921
Published: 2024-11-27
Description: An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint.

Please subscribe to  our RSS feed https://security.paloaltonetworks.com/rss.xml  to be alerted to new updates to this and other advisories.
CVSS Score: 8.8 (HIGH)
CWE: CWE-295
References: https://blog.amberwolf.com/blog/2024/november/palo-alto-globalprotect---code-execution-and-privilege-escalation-via-malicious-vpn-server-cve-2024-5921/; https://github.com/AmberWolfCyber/NachoVPN; https://security.paloaltonetworks.com/CVE-2024-5921
CVE: CVE-2024-11083
Published: 2024-11-27
Description: The ProfilePress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.15.18 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to higher-level roles such as administrator.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/changeset/3197296/wp-user-avatar; https://www.wordfence.com/threat-intel/vulnerabilities/id/60c8159f-0641-4b75-9d56-34bd13105caf?source=cve
CVE: CVE-2024-11219
Published: 2024-11-27
Description: The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 3.0.6 via the get_image function. This makes it possible for unauthenticated attackers to view arbitrary images on the server, which can contain sensitive information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/browser/otter-blocks/tags/3.0.6/inc/plugins/class-dynamic-content.php#L222; https://www.wordfence.com/threat-intel/vulnerabilities/id/c5e9ab63-d61e-40f1-a5cb-432f33dfd2a6?source=cve
CVE: CVE-2024-52958
Published: 2024-11-27
Description: A improper verification of cryptographic signature vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to load a malicious DLL via upload plugin function.
CVSS Score: 7.2 (HIGH)
CWE: CWE-347
References: https://zuso.ai/advisory/za-2024-11
CVE: CVE-2024-52959
Published: 2024-11-27
Description: A Improper Control of Generation of Code ('Code Injection') vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to perform arbitrary system commands via a DLL file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://zuso.ai/advisory/za-2024-12
CVE: CVE-2024-10175
Published: 2024-11-27
Description: The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wdo_pricing_tables shortcode in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/pricing-tables-for-visual-composer/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/79091bc0-d9b6-4a4b-926d-0447193d27c5?source=cve
CVE: CVE-2024-10580
Published: 2024-11-27
Description: The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to unauthorized form submissions due to a missing capability check on the submit_form() function in all versions up to, and including, 7.8.5. This makes it possible for unauthenticated attackers to submit unpublished forms.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/wordpress-popup/tags/7.8.5/inc/front/hustle-module-front-ajax.php#L251; https://plugins.trac.wordpress.org/changeset/3196639/wordpress-popup/tags/7.8.6/inc/front/hustle-module-front-ajax.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/3b2f8726-c4c4-4ed6-aa8d-4412cf5be061?source=cve
CVE: CVE-2024-10895
Published: 2024-11-27
Description: The Counter Up – Animated Number Counter & Milestone Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'lgx-counter' shortcode in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3235022%40wp-counter-up&new=3235022%40wp-counter-up&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/36e070de-bd77-48a4-a9c2-3938b144398a?source=cve
CVE: CVE-2024-36467
Published: 2024-11-27
Description: An authenticated user with API access (e.g.: user with default User role), more specifically a user with access to the user.update API endpoint is enough to be able to add themselves to any group (e.g.: Zabbix Administrators), except to groups that are disabled or having restricted GUI access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-285
References: https://support.zabbix.com/browse/ZBX-25614
CVE: CVE-2024-11667
Published: 2024-11-27
Description: A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versions V5.10 through V5.38 could allow an attacker to download or upload files via a crafted URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-protecting-against-recent-firewall-threats-11-27-2024; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-11667