deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-2902
Published: 2024-03-26
Description: A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical. This issue affects the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet. The manipulation of the argument shareSpeed leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257945 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC7/v1/fromSetWifiGusetBasic.md; https://vuldb.com/?ctiid.257945; https://vuldb.com/?id.257945
CVE: CVE-2024-2955
Published: 2024-03-26
Description: T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file
CVSS Score: 7.8 (HIGH)
CWE: CWE-762, CWE-763
References: https://gitlab.com/wireshark/wireshark/-/issues/19695; https://www.wireshark.org/security/wnpa-sec-2024-06.html; https://gitlab.com/wireshark/wireshark/-/issues/19695
CVE: CVE-2023-28687
Published: 2024-03-26
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in perfectwpthemes Glaze Blog Lite, themebeez Fascinate, themebeez Cream Blog, themebeez Cream Magazine allows Reflected XSS.This issue affects Glaze Blog Lite: from n/a through <= 1.1.4; Fascinate: from n/a through 1.0.8; Cream Blog: from n/a through 2.1.3; Cream Magazine: from n/a through 2.1.4.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/cream-blog/wordpress-cream-blog-theme-2-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/cream-magazine/wordpress-cream-magazine-theme-2-1-4-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/fascinate/wordpress-fascinate-theme-1-0-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-28787
Published: 2024-03-26
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExpressTech Quiz And Survey Master.This issue affects Quiz And Survey Master: from n/a through 8.1.4.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-89
References: https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-8-1-4-unauthenticated-sql-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-8-1-4-unauthenticated-sql-injection-vulnerability?_s_id=cve
CVE: CVE-2023-29386
Published: 2024-03-26
Description: Unrestricted Upload of File with Dangerous Type vulnerability in Julien Crego Manager for Icomoon.This issue affects Manager for Icomoon: from n/a through 2.0.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-434
References: https://patchstack.com/database/vulnerability/manager-for-icomoon/wordpress-manager-for-icommon-plugin-2-0-arbitrary-file-upload-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/manager-for-icomoon/wordpress-manager-for-icommon-plugin-2-0-arbitrary-file-upload-vulnerability?_s_id=cve
CVE: CVE-2023-38388
Published: 2024-03-26
Description: Unrestricted Upload of File with Dangerous Type vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from n/a through 3.3.5.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-434
References: https://patchstack.com/database/vulnerability/jupiterx-core/wordpress-jupiter-x-core-plugin-3-3-0-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/jupiterx-core/wordpress-jupiter-x-core-plugin-3-3-0-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve
CVE: CVE-2023-39307
Published: 2024-03-26
Description: Unrestricted Upload of File with Dangerous Type vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.
CVSS Score: 8.5 (HIGH)
CWE: CWE-434
References: https://patchstack.com/database/vulnerability/avada/wordpress-avada-theme-7-11-1-authenticated-arbitrary-file-upload-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/avada/wordpress-avada-theme-7-11-1-authenticated-arbitrary-file-upload-vulnerability?_s_id=cve
CVE: CVE-2023-47842
Published: 2024-03-26
Description: Unrestricted Upload of File with Dangerous Type vulnerability in Zachary Segal CataBlog.This issue affects CataBlog: from n/a through 1.7.0.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-434
References: https://patchstack.com/database/vulnerability/catablog/wordpress-catablog-plugin-1-7-0-arbitrary-file-upload-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/catablog/wordpress-catablog-plugin-1-7-0-arbitrary-file-upload-vulnerability?_s_id=cve
CVE: CVE-2023-47846
Published: 2024-03-26
Description: Unrestricted Upload of File with Dangerous Type vulnerability in Terry Lin WP Githuber MD.This issue affects WP Githuber MD: from n/a through 1.16.2.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-434
References: https://patchstack.com/database/vulnerability/wp-githuber-md/wordpress-wp-githuber-md-plugin-1-16-2-arbitrary-file-upload-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-githuber-md/wordpress-wp-githuber-md-plugin-1-16-2-arbitrary-file-upload-vulnerability?_s_id=cve
CVE: CVE-2023-47873
Published: 2024-03-26
Description: Unrestricted Upload of File with Dangerous Type vulnerability in WEN Solutions WP Child Theme Generator.This issue affects WP Child Theme Generator: from n/a through 1.0.9.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-434
References: https://patchstack.com/database/vulnerability/wp-child-theme-generator/wordpress-wp-child-theme-generator-plugin-1-0-8-arbitrary-file-upload-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-child-theme-generator/wordpress-wp-child-theme-generator-plugin-1-0-8-arbitrary-file-upload-vulnerability?_s_id=cve
CVE: CVE-2023-48275
Published: 2024-03-26
Description: Unrestricted Upload of File with Dangerous Type vulnerability in Trustindex.Io Widgets for Google Reviews.This issue affects Widgets for Google Reviews: from n/a through 11.0.2.
CVSS Score: 8.0 (HIGH)
CWE: CWE-434
References: https://patchstack.com/database/vulnerability/wp-reviews-plugin-for-google/wordpress-widgets-for-google-reviews-plugin-11-0-2-arbitrary-file-upload-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-reviews-plugin-for-google/wordpress-widgets-for-google-reviews-plugin-11-0-2-arbitrary-file-upload-vulnerability?_s_id=cve
CVE: CVE-2023-48777
Published: 2024-03-26
Description: Unrestricted Upload of File with Dangerous Type vulnerability in Elementor.Com Elementor Website Builder.This issue affects Elementor Website Builder: from 3.3.0 through 3.18.1.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-434
References: https://patchstack.com/database/vulnerability/elementor/wordpress-elementor-plugin-3-18-0-arbitrary-file-upload-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/elementor/wordpress-elementor-plugin-3-18-0-arbitrary-file-upload-vulnerability?_s_id=cve
CVE: CVE-2023-51148
Published: 2024-03-26
Description: An issue in TRENDnet Trendnet AC1200 Dual Band PoE Indoor Wireless Access Point TEW-821DAP v.3.00b06 allows an attacker to execute arbitrary code via the 'mycli' command-line interface component.
CVSS Score: 8.0 (HIGH)
CWE: CWE-121
References: http://trendnet.com; https://github.com/SpikeReply/advisories/blob/main/cve/trendnet/cve-2023-51148.md; http://trendnet.com
CVE: CVE-2024-25420
Published: 2024-03-26
Description: An issue in Ignite Realtime Openfire before 4.8.1 allows a remote attacker to escalate privileges via the admin.authorizedJIDs system property component.
CVSS Score: 7.2 (HIGH)
CWE: CWE-273
References: https://github.com/igniterealtime/Openfire/blob/main/xmppserver/src/main/java/org/jivesoftware/openfire/admin/AdminManager.java; https://github.com/igniterealtime/Openfire/pull/2411; https://github.com/igniterealtime/Openfire/releases/tag/v4.8.1
CVE: CVE-2024-25421
Published: 2024-03-26
Description: An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via the ROOM_CACHE component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-250
References: https://github.com/igniterealtime/Openfire/blob/main/xmppserver/src/main/java/org/jivesoftware/openfire/muc/spi/LocalMUCRoomManager.java; https://www.hackthebox.com/blog/openfire-cves-explained-CVE-2024-25420-CVE-2024-25421; https://www.igniterealtime.org/projects/openfire/
CVE: CVE-2024-26303
Published: 2024-03-26
Description: Authenticated Denial of Service Vulnerability in ArubaOS-Switch SSH Daemon


CVSS Score: 4.9 (MEDIUM)
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-003.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-003.txt
CVE: CVE-2024-27521
Published: 2024-03-26
Description: TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote command execution (RCE) vulnerability via multiple parameters in the "setOpModeCfg" function. This security issue allows an attacker to take complete control of the device. In detail, exploitation allows unauthenticated, remote attackers to execute arbitrary system commands with administrative privileges (i.e., as user "root").
CVSS Score: 8.0 (HIGH)
CWE: CWE-78
References: https://github.com/SpikeReply/advisories/blob/main/cve/totolink/cve-2024-27521.md; https://m.totolink.net/portal/article/index/id/410.html; https://github.com/SpikeReply/advisories/blob/main/cve/totolink/cve-2024-27521.md
CVE: CVE-2024-28545
Published: 2024-03-26
Description: Tenda AC18 V15.03.05.05 contains a command injection vulnerablility in the deviceName parameter of formsetUsbUnload function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/setUsbUnload.md; https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/setUsbUnload.md
CVE: CVE-2024-28551
Published: 2024-03-26
Description: Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the ssid parameter of form_fast_setting_wifi_set function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/form_fast_setting_wifi_set.md; https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/form_fast_setting_wifi_set.md
CVE: CVE-2024-2883
Published: 2024-03-26
Description: Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_26.html; https://issues.chromium.org/issues/327807820; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YUWGSMA5X2NQP5XEFCLRWNX6246GZ2C/
CVE: CVE-2024-2885
Published: 2024-03-26
Description: Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_26.html; https://issues.chromium.org/issues/328958020; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YUWGSMA5X2NQP5XEFCLRWNX6246GZ2C/
CVE: CVE-2024-2886
Published: 2024-03-26
Description: Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_26.html; https://issues.chromium.org/issues/330575496; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YUWGSMA5X2NQP5XEFCLRWNX6246GZ2C/
CVE: CVE-2024-2887
Published: 2024-03-26
Description: Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 7.7 (HIGH)
CWE: CWE-843, CWE-843
References: https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_26.html; https://issues.chromium.org/issues/330588502; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YUWGSMA5X2NQP5XEFCLRWNX6246GZ2C/
CVE: CVE-2024-2903
Published: 2024-03-26
Description: A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-257946 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC7/v1/GetParentControlInfo.md; https://vuldb.com/?ctiid.257946; https://vuldb.com/?id.257946
CVE: CVE-2024-2909
Published: 2024-03-26
Description: A vulnerability classified as critical was found in Ruijie RG-EG350 up to 20240318. Affected by this vulnerability is the function setAction of the file /itbox_pi/networksafe.php?a=set of the component HTTP POST Request Handler. The manipulation of the argument bandwidth leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257977 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://h0e4a0r1t.github.io/2024/vulns/Ruijie%20EG350%20Easy%20Gateway%20Management%20System%20Exists%20Remote%20Code%20Execution%20Vulnerability%20networksafe.php.pdf; https://vuldb.com/?ctiid.257977; https://vuldb.com/?id.257977
CVE: CVE-2024-2910
Published: 2024-03-26
Description: A vulnerability, which was classified as critical, has been found in Ruijie RG-EG350 up to 20240318. Affected by this issue is the function vpnAction of the file /itbox_pi/vpn_quickset_service.php?a=set_vpn of the component HTTP POST Request Handler. The manipulation of the argument ip/port/user/pass/dns/startIp leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-257978 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-78
References: https://h0e4a0r1t.github.io/2024/vulns/Ruijie%20EG350%20Easy%20Gateway%20Management%20System%20Exists%20Remote%20Code%20Execution%20Vulnerability_vpn_quickset_service.php.pdf; https://vuldb.com/?ctiid.257978; https://vuldb.com/?id.257978
CVE: CVE-2023-51146
Published: 2024-03-26
Description: Buffer Overflow vulnerability in TRENDnet AC1200 TEW-821DAP with firmware version 3.00b06 allows an attacker to execute arbitrary code via the adm_add_user action.
CVSS Score: 8.0 (HIGH)
CWE: CWE-121
References: https://github.com/SpikeReply/advisories/blob/main/cve/trendnet/cve-2023-51146.md; https://github.com/SpikeReply/advisories/blob/main/cve/trendnet/cve-2023-51146.md
CVE: CVE-2023-51147
Published: 2024-03-26
Description: Buffer Overflow vulnerability in TRENDnet Trendnet AC1200 TEW-821DAP with firmware version 3.00b06 allows an attacker to execute arbitrary code via the adm_mod_pwd action.
CVSS Score: 8.0 (HIGH)
CWE: CWE-121
References: https://github.com/SpikeReply/advisories/blob/main/cve/trendnet/cve-2023-51147.md; https://github.com/SpikeReply/advisories/blob/main/cve/trendnet/cve-2023-51147.md
CVE: CVE-2024-2911
Published: 2024-03-26
Description: A vulnerability, which was classified as problematic, was found in Tianjin PubliCMS 4.0.202302.e. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/sweatxi/BugHub/blob/main/publiccms_csrf.pdf; https://vuldb.com/?ctiid.257979; https://vuldb.com/?id.257979
CVE: CVE-2024-2971
Published: 2024-03-26
Description: Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file.


CVSS Score: 2.9 (LOW)
CWE: CWE-787, CWE-787
References: https://www.xpdfreader.com/security-bug/CVE-2024-2971.html; https://www.xpdfreader.com/security-bug/CVE-2024-2971.html
CVE: CVE-2023-50702
Published: 2024-03-26
Description: Sikka SSCWindowsService 5 2023-09-14 executes a program as LocalSystem but allows full control by low-privileged users (and low-privileged users have write access to %PROGRAMDATA%\SSCService). Consequently, low-privileged users can execute arbitrary code as LocalSystem.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://www.youtube.com/watch?v=3dCoV33y1WY; https://www.youtube.com/watch?v=3dCoV33y1WY
CVE: CVE-2024-25136
Published: 2024-03-26
Description: 
There is a function in AutomationDirect C-MORE EA9 HMI that allows an attacker to send a relative path in the URL without proper sanitizing of the content.


CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://https://www.cisa.gov/news-events/ics-advisories/icsa-24-086-01; https://https://www.cisa.gov/news-events/ics-advisories/icsa-24-086-01
CVE: CVE-2024-25137
Published: 2024-03-26
Description: 
In AutomationDirect C-MORE EA9 HMI there is a program that copies a buffer of a size controlled by the user into a limited sized buffer on the stack which may lead to a stack overflow. The result of this stack-based buffer overflow can lead to denial-of-service conditions.


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-121
References: https://https://www.cisa.gov/news-events/ics-advisories/icsa-24-086-01; https://https://www.cisa.gov/news-events/ics-advisories/icsa-24-086-01
CVE: CVE-2024-25138
Published: 2024-03-26
Description: 
In AutomationDirect C-MORE EA9 HMI, 

credentials used by the platform are stored as plain text on the device.


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-256
References: https://https://www.cisa.gov/news-events/ics-advisories/icsa-24-086-01; https://https://www.cisa.gov/news-events/ics-advisories/icsa-24-086-01
CVE: CVE-2024-26577
Published: 2024-03-26
Description: VSeeFace through 1.13.38.c2 allows attackers to cause a denial of service (application hang) via a spoofed UDP packet containing at least 10 digits in JSON data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/guusec/VSeeDoS; https://github.com/guusec/VSeeDoS
CVE: CVE-2024-2916
Published: 2024-03-26
Description: A vulnerability was found in Campcodes House Rental Management System 1.0. It has been classified as critical. Affected is an unknown function of the file ajax.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-257982 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/House%20Rental%20Management%20System%20-%20vuln%201.pdf; https://vuldb.com/?ctiid.257982; https://vuldb.com/?id.257982
CVE: CVE-2024-2917
Published: 2024-03-26
Description: A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257983.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-73
References: https://github.com/E1CHO/cve_hub/blob/main/House%20Rental%20Management%20System%20-%20vuln%202.pdf; https://vuldb.com/?ctiid.257983; https://vuldb.com/?id.257983
CVE: CVE-2024-2927
Published: 2024-03-26
Description: A vulnerability was found in code-projects Mobile Shop 1.0. It has been classified as critical. Affected is an unknown function of the file Details.php of the component Login Page. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258000.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://vuldb.com/?ctiid.258000; https://vuldb.com/?id.258000; https://vuldb.com/?submit.304053
CVE: CVE-2017-20190
Published: 2024-03-27
Description: Some Microsoft technologies as used in Windows 8 through 11 allow a temporary client-side performance degradation during processing of multiple Unicode combining characters, aka a "Zalgo text" attack. NOTE: third parties dispute whether the computational cost of interpreting Unicode data should be considered a vulnerability.
CWE: CWE-176
References: https://aka.ms/windowsbugbar; https://en.wikipedia.org/wiki/Zalgo_text; https://talk.dynalist.io/t/dynalist-is-vulnerable-to-zalgo/1234
CVE: CVE-2024-2209
Published: 2024-03-27
Description: A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility (FUU) bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code execution.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-94
References: https://support.hp.com/us-en/document/ish_10[PII_REDACTED]4932-16; https://support.hp.com/us-en/document/ish_10[PII_REDACTED]4932-16
CVE: CVE-2024-2930
Published: 2024-03-27
Description: A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file classes/Master.php?f=save_music. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258001 was assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-434
References: https://github.com/xuanluansec/vul/blob/main/vul/Music%20Gallery%20Site%20using%20PHP%20and%20MySQL%20Database%20Free%20Source%20Code/Music%20Gallery%20Site%20using%20PHP%20and%20MySQL%20Database%20Free%20Source%20Code.md; https://vuldb.com/?ctiid.258001; https://vuldb.com/?id.258001
CVE: CVE-2024-2206
Published: 2024-03-27
Description: An SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the `/proxy` route. Attackers can exploit this vulnerability by manipulating the `self.replica_urls` set through the `X-Direct-Url` header in requests to the `/` and `/config` routes, allowing the addition of arbitrary URLs for proxying. This flaw enables unauthorized proxying of requests and potential access to internal endpoints within the Hugging Face space. The issue arises from the application's inadequate checking of safe URLs in the `build_proxy_request` function.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e[PII_REDACTED]138bdc6; https://huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98e; https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e[PII_REDACTED]138bdc6