deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-4898
Published: 2024-06-12
Description: The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary option updates due to a missing authorization checks on the REST API calls in all versions up to, and including, 0.1.0.38. This makes it possible for unauthenticated attackers to connect the site to InstaWP API, edit arbitrary site options and create administrator accounts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/instawp-connect/tags/0.1.0.38/includes/class-instawp-rest-api.php#L926; https://www.wordfence.com/threat-intel/vulnerabilities/id/92a00fb4-7b50-43fd-ac04-5d6e29336e9c?source=cve; https://plugins.trac.wordpress.org/browser/instawp-connect/tags/0.1.0.38/includes/class-instawp-rest-api.php#L926
CVE: CVE-2024-5674
Published: 2024-06-12
Description: The Newsletter - API v1 and v2 addon plugin for WordPress is vulnerable to unauthorized subscribers management due to PHP type juggling issue on the check_api_key function in all versions up to, and including, 2.4.5. This makes it possible for unauthenticated attackers to list, create or delete newsletter subscribers. This issue affects only sites running the PHP version below 8.0
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://www.thenewsletterplugin.com/documentation/developers/newsletter-api-2/; https://www.wordfence.com/threat-intel/vulnerabilities/id/ecd9800e-ce0f-45f3-bb66-3690c51d885b?source=cve; https://www.thenewsletterplugin.com/documentation/developers/newsletter-api-2/
CVE: CVE-2024-5056
Published: 2024-06-12
Description: CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may
prevent user to update the device firmware and prevent proper behavior of the webserver when
specific files or directories are removed from the filesystem.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-552
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-01.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-01.pdf
CVE: CVE-2024-5211
Published: 2024-06-12
Description: A path traversal vulnerability in mintplex-labs/anything-llm allowed a manager to bypass the `normalizePath()` function, intended to defend against path traversal attacks. This vulnerability enables the manager to read, delete, or overwrite the 'anythingllm.db' database file and other files stored in the 'storage' directory, such as internal communication keys and .env secrets. Exploitation of this vulnerability could lead to application compromise, denial of service (DoS) attacks, and unauthorized admin account takeover. The issue stems from improper validation of user-supplied input in the process of setting a custom logo for the app, which can be manipulated to achieve arbitrary file read, deletion, or overwrite, and to execute a DoS attack by deleting critical files required for the application's operation.
CVSS Score: 7.2 (HIGH)
CWE: CWE-29
References: https://github.com/mintplex-labs/anything-llm/commit/e208074ef4c240fe03e4147ab097ec3b52b97619; https://huntr.com/bounties/38f282cb-7226-435e-9832-2d4a102dad4b; https://github.com/mintplex-labs/anything-llm/commit/e208074ef4c240fe03e4147ab097ec3b52b97619
CVE: CVE-2024-25949
Published: 2024-06-12
Description: Dell OS10 Networking Switches, versions10.5.6.x, 10.5.5.x, 10.5.4.x and 10.5.3.x ,contain an improper authorization vulnerability. A remote authenticated attacker could potentially exploit this vulnerability leading to escalation of privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://www.dell.com/support/kbdoc/en-us/000225922/dsa-2024-087-security-update-for-dell-networking-os10-vulnerability; https://www.dell.com/support/kbdoc/en-us/000225922/dsa-2024-087-security-update-for-dell-networking-os10-vulnerability
CVE: CVE-2024-5313
Published: 2024-06-12
Description: CWE-668: Exposure of the Resource Wrong Sphere vulnerability exists that exposes a SSH
interface over the product network interface. This does not allow to directly exploit the product or
make any unintended operation as the SSH interface access is protected by an authentication
mechanism. Impacts are limited to port scanning and fingerprinting activities as well as attempts
to perform a potential denial of service attack on the exposed SSH interface.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-668
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-03.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-03.pdf
CVE: CVE-2024-1576
Published: 2024-06-12
Description: SQL Injection vulnerability in MegaBIP software allows attacker to obtain site administrator privileges, including access to the administration panel and the ability to change the administrator password. This issue affects MegaBIP software versions through 5.09.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://cert.pl/en/posts/2024/06/CVE-2024-1576/; https://cert.pl/posts/2024/06/CVE-2024-1576/; https://megabip.pl/
CVE: CVE-2024-1577
Published: 2024-06-12
Description: Remote Code Execution vulnerability in MegaBIP software allows to execute arbitrary code on the server without requiring authentication by saving crafted by the attacker PHP code to one of the website files. This issue affects MegaBIP software versions through 5.11.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://cert.pl/en/posts/2024/06/CVE-2024-1576/; https://cert.pl/posts/2024/06/CVE-2024-1576/; https://megabip.pl/
CVE: CVE-2024-1659
Published: 2024-06-12
Description: Arbitrary File Upload vulnerability in MegaBIP software allows attacker to upload any file to the server (including a PHP code file) without an authentication. This issue affects MegaBIP software versions through 5.10.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://cert.pl/en/posts/2024/06/CVE-2024-1576/; https://cert.pl/posts/2024/06/CVE-2024-1576/; https://megabip.pl/
CVE: CVE-2024-23445
Published: 2024-06-12
Description: It was identified that if a  cross-cluster API key https://www.elastic.co/guide/en/elasticsearch/reference/8.14/security-api-create-cross-cluster-api-key.html#security-api-create-cross-cluster-api-key-request-body  restricts search for a given index using the query or the field_security parameter, and the same cross-cluster API key also grants replication for the same index, the search restrictions are not enforced during cross cluster search operations and search results may include documents and terms that should not be returned.

This issue only affects the  API key based security model for remote clusters https://www.elastic.co/guide/en/elasticsearch/reference/8.14/remote-clusters.html#remote-clusters-security-models  that was previously a beta feature and is released as GA with 8.14.0
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-922
References: https://discuss.elastic.co/t/elasticsearch-8-14-0-security-update-esa-2024-13/360898; https://discuss.elastic.co/t/elasticsearch-8-14-0-security-update-esa-2024-13/360898
CVE: CVE-2024-36263
Published: 2024-06-12
Description: ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Submarine Server Core.

This issue affects Apache Submarine Server Core: all versions.

As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: http://www.openwall.com/lists/oss-security/2024/06/12/1; https://github.com/apache/submarine/pull/1121; https://lists.apache.org/thread/8q9kbdg9gk9kpz5p8x6t7q8709l3vrmt
CVE: CVE-2024-36264
Published: 2024-06-12
Description: ** UNSUPPORTED WHEN ASSIGNED ** Improper Authentication vulnerability in Apache Submarine Commons Utils.

If the user doesn't explicitly set `submarine.auth.default.secret`, a default value will be used.


This issue affects Apache Submarine Commons Utils: from 0.8.0.

As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/apache/submarine/pull/1125; https://lists.apache.org/thread/7mo0c7vbhpo8thvybl8wwvb0bccrg7r4; http://www.openwall.com/lists/oss-security/2024/06/12/2
CVE: CVE-2024-36699
Published: 2024-06-12
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2024-5891
Published: 2024-06-12
Description: A vulnerability was found in Quay. If an attacker can obtain the client ID for an application, they can use an OAuth token to authenticate despite not having access to the organization from which the application was created. This issue is limited to authentication and not authorization. However, in configurations where endpoints rely only on authentication, a user may authenticate to applications they otherwise have no access to.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-1390
References: https://access.redhat.com/security/cve/CVE-2024-5891; https://bugzilla.redhat.com/show_bug.cgi?id=2283879; https://access.redhat.com/security/cve/CVE-2024-5891
CVE: CVE-2024-28964
Published: 2024-06-12
Description: Dell Common Event Enabler, version 8.9.10.0 and prior, contain an insecure deserialization vulnerability in CAVATools. A local unauthenticated attacker could potentially exploit this vulnerability, leading to arbitrary code execution in the context of the logged in user. Exploitation of this issue requires a victim to open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://www.dell.com/support/kbdoc/en-us/000224987/dsa-2024-179-security-update-for-dell-emc-common-event-enabler-windows-for-cavatools-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000224987/dsa-2024-179-security-update-for-dell-emc-common-event-enabler-windows-for-cavatools-vulnerabilities
CVE: CVE-2024-29181
Published: 2024-06-12
Description: Strapi is an open-source content management system. Prior to version 4.19.1, a super admin can create a collection where an item in the collection has an association to another collection. When this happens, another user with Author Role can see the list of associated items they did not create. They should see nothing but their own items they created not all items ever created. Users should upgrade @strapi/plugin-content-manager to version 4.19.1 to receive a patch.
CVSS Score: 2.3 (LOW)
CWE: CWE-639, CWE-639
References: https://github.com/strapi/strapi/commit/e1dfd4d9f1cab25cf6da3614c1975e4e508e01c6; https://github.com/strapi/strapi/security/advisories/GHSA-6j89-frxc-q26m; https://github.com/strapi/strapi/commit/e1dfd4d9f1cab25cf6da3614c1975e4e508e01c6
CVE: CVE-2024-2300
Published: 2024-06-12
Description: HP Advance Mobile Applications for iOS and Android are potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices.
CVSS Score: 6.2 (MEDIUM)
References: https://support.hp.com/us-en/document/ish_10[PII_REDACTED]7262-16/hpsbgn03921; https://support.hp.com/us-en/document/ish_10[PII_REDACTED]7262-16/hpsbgn03921
CVE: CVE-2024-31217
Published: 2024-06-12
Description: Strapi is an open-source content management system. Prior to version 4.22.0, a denial-of-service vulnerability is present in the media upload process causing the server to crash without restarting, affecting either development and production environments. Usually, errors in the application cause it to log the error and keep it running for other clients. This behavior, in contrast, stops the server execution, making it unavailable for any clients until it's manually restarted. Any user with access to the file upload functionality is able to exploit this vulnerability, affecting applications running in both development mode and production mode as well. Users should upgrade @strapi/plugin-upload to version 4.22.0 to receive a patch.

CVSS Score: 5.3 (MEDIUM)
CWE: CWE-248
References: https://github.com/strapi/strapi/commit/a0da7e73e1496d835fe71a2febb14f70170135c7; https://github.com/strapi/strapi/security/advisories/GHSA-pm9q-xj9p-96pm; https://github.com/strapi/strapi/commit/a0da7e73e1496d835fe71a2febb14f70170135c7
CVE: CVE-2024-34065
Published: 2024-06-12
Description: Strapi is an open-source content management system. By combining two vulnerabilities (an `Open Redirect` and `session token sent as URL query parameter`) in @strapi/plugin-users-permissions before version 4.24.2, is its possible of an unauthenticated attacker to bypass authentication mechanisms and retrieve the 3rd party tokens. The attack requires user interaction (one click). Unauthenticated attackers can leverage two vulnerabilities to obtain an 3rd party token and the bypass authentication of Strapi apps. Users should upgrade @strapi/plugin-users-permissions to version 4.24.2 to receive a patch.
CVSS Score: 7.1 (HIGH)
CWE: CWE-294, CWE-601, CWE-294, CWE-601
References: https://github.com/strapi/strapi/security/advisories/GHSA-wrvh-rcmr-9qfc; https://github.com/strapi/strapi/security/advisories/GHSA-wrvh-rcmr-9qfc
CVE: CVE-2024-36265
Published: 2024-06-12
Description: ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core.

This issue affects Apache Submarine Server Core: from 0.8.0.

As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: http://www.openwall.com/lists/oss-security/2024/06/12/3; https://lists.apache.org/thread/prckhhst19qxof064hsm8cccxtofvflz; http://www.openwall.com/lists/oss-security/2024/06/12/3
CVE: CVE-2024-36691
Published: 2024-06-12
Description: Insecure permissions in the AdminController.AjaxSave() method of PPGo_Jobs v2.8.0 allows authenticated attackers to arbitrarily modify users' account information.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-277
References: https://www.yuque.com/beimi-tb0gl/yrgtbp/wi8bg26o3wlfqdaf?singleDoc; https://www.yuque.com/beimi-tb0gl/yrgtbp/wi8bg26o3wlfqdaf?singleDoc
CVE: CVE-2024-36840
Published: 2024-06-12
Description: SQL Injection vulnerability in Boelter Blue System Management v.1.3 allows a remote attacker to execute arbitrary code and obtain sensitive information via the id parameter to news_details.php and location_details.php; and the section parameter to services.php.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2024/Jun/0; https://infosec-db.github.io/CyberDepot/vuln_boelter_blue/; https://packetstormsecurity.com/files/178978/Boelter-Blue-System-Management-1.3-SQL-Injection.html
CVE: CVE-2024-37297
Published: 2024-06-12
Description: WooCommerce is an open-source e-commerce platform built on WordPress. A vulnerability introduced in WooCommerce 8.8 allows for cross-site scripting. A bad actor can manipulate a link to include malicious HTML & JavaScript content. While the content is not saved to the database, the links may be sent to victims for malicious purposes. The injected JavaScript could hijack content & data stored in the browser, including the session. The URL content is read through the `Sourcebuster.js` library and then inserted without proper sanitization to the classic checkout and registration forms. Versions 8.8.5 and 8.9.3 contain a patch for the issue. As a workaround, one may disable the Order Attribution feature.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-80, CWE-79
References: https://developer.woocommerce.com/2024/06/10/developer-advisory-xss-vulnerability-8-8-0; https://github.com/woocommerce/woocommerce/commit/0e9888305d0cb9557e58f558526ab11cb3bcc4b4; https://github.com/woocommerce/woocommerce/commit/915e32a42762916b745a7e663c8b69a698da8b67
CVE: CVE-2024-37304
Published: 2024-06-12
Description: NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability related to its handling of autolinks in Markdown content. While the platform properly filters out JavaScript from standard links, it does not adequately sanitize autolinks. This oversight allows attackers to exploit autolinks as a vector for Cross-Site Scripting (XSS) attacks. When a user inputs a Markdown autolink such as `<javascript:alert(1)>`, the link is rendered without proper sanitization. This means that the JavaScript code within the autolink can be executed by the browser, leading to an XSS attack. Version 2024.05.28 contains a patch for this issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/NuGet/NuGetGallery/commit/c52b023659f4ad7b626874c1063f2b5e878a4fe0; https://github.com/NuGet/NuGetGallery/pull/9836; https://github.com/NuGet/NuGetGallery/security/advisories/GHSA-gwjh-c548-f787
CVE: CVE-2024-5893
Published: 2024-06-12
Description: A vulnerability classified as critical has been found in SourceCodester Cab Management System 1.0. This affects an unknown part of the file /cms/classes/Users.php?f=delete_client. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-268137 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Hefei-Coffee/cve/blob/main/sql9.md; https://vuldb.com/?ctiid.268137; https://vuldb.com/?id.268137
CVE: CVE-2024-5894
Published: 2024-06-12
Description: A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file manage_product.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-268138 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/Hefei-Coffee/cve/blob/main/sql10.md; https://vuldb.com/?ctiid.268138; https://vuldb.com/?id.268138
CVE: CVE-2024-5895
Published: 2024-06-12
Description: A vulnerability, which was classified as critical, has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. This issue affects the function delete_users of the file /classes/Users.php?f=delete. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268139.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Hefei-Coffee/cve/blob/main/sql11.md; https://vuldb.com/?ctiid.268139; https://vuldb.com/?id.268139
CVE: CVE-2024-1891
Published: 2024-06-12
Description: A stored cross site scripting vulnerability exists in Tenable Security Center where an authenticated, remote attacker could inject HTML code into a web application scan result page.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://www.tenable.com/security/tns-2024-10; https://www.tenable.com/security/tns-2024-10
CVE: CVE-2024-36761
Published: 2024-06-12
Description: naga v0.14.0 was discovered to contain a stack overflow via the component /wgsl/parse/mod.rs.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/MageWeiG/VulnerabilityCollection/blob/main/CVE-2024-36761/info.md; https://github.com/gfx-rs/naga/issues/2591; https://github.com/MageWeiG/VulnerabilityCollection/blob/main/CVE-2024-36761/info.md
CVE: CVE-2024-37300
Published: 2024-06-12
Description: OAuthenticator is software that allows OAuth2 identity providers to be plugged in and used with JupyterHub. JupyterHub < 5.0, when used with `GlobusOAuthenticator`, could be configured to allow all users from a particular institution only. This worked fine prior to JupyterHub 5.0, because `allow_all` did not take precedence over `identity_provider`. Since JupyterHub 5.0, `allow_all` does take precedence over `identity_provider`. On a hub with the same config, now all users will be allowed to login, regardless of `identity_provider`. `identity_provider` will basically be ignored. This is a documented change in JupyterHub 5.0, but is likely to catch many users by surprise. OAuthenticator 16.3.1 fixes the issue with JupyterHub 5.0, and does not affect previous versions. As a workaround, do not upgrade to JupyterHub 5.0 when using `GlobusOAuthenticator` in the prior configuration.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863
References: https://github.com/jupyterhub/oauthenticator/commit/d1aea05fa89f2beae15ab0fa0b0d071030f79654; https://github.com/jupyterhub/oauthenticator/security/advisories/GHSA-gprj-3p75-f996; https://jupyterhub.readthedocs.io/en/stable/howto/upgrading-v5.html#authenticator-allow-all-and-allow-existing-users
CVE: CVE-2024-5759
Published: 2024-06-12
Description: An improper privilege management vulnerability exists in Tenable Security Center where an authenticated, remote attacker could view unauthorized objects and launch scans without having the required privileges
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-269, CWE-269
References: https://www.tenable.com/security/tns-2024-10; https://www.tenable.com/security/tns-2024-10
CVE: CVE-2024-5896
Published: 2024-06-12
Description: A vulnerability, which was classified as critical, was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is the function save_users of the file /classes/Users.php?f=save. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-268140.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/Hefei-Coffee/cve/blob/main/sql12.md; https://vuldb.com/?ctiid.268140; https://vuldb.com/?id.268140
CVE: CVE-2024-5897
Published: 2024-06-12
Description: A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=log_visitor. The manipulation of the argument name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-268141 was assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://github.com/Hefei-Coffee/cve/blob/main/xss.md; https://vuldb.com/?ctiid.268141; https://vuldb.com/?id.268141
CVE: CVE-2024-22855
Published: 2024-06-12
Description: A cross-site scripting (XSS) vulnerability in the User Maintenance section of ITSS iMLog v1.307 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.exploit-db.com/exploits/52025; https://www.exploit-db.com/exploits/52025
CVE: CVE-2024-2230
Published: 2024-06-12
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.