deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-2259
Published: 2024-08-13
Description: This vulnerability exists in InstaRISPACS software due to insufficient validation of user supplied input for the loginTo parameter in user login module of the web interface of the application. A remote attacker could exploit this vulnerability by sending a specially crafted input to the vulnerable parameter to perform reflected Cross Site Scripting (XSS) attacks on the targeted system.
CWE: CWE-79
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0241
CVE: CVE-2024-38699
Published: 2024-08-13
Description: Missing Authorization vulnerability in WP Swings Wallet System for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wallet System for WooCommerce: from n/a through 2.5.13.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/wallet-system-for-woocommerce/wordpress-wallet-system-for-woocommerce-plugin-2-5-13-sensitive-data-exposure-via-exported-file-vulnerability?_s_id=cve
CVE: CVE-2024-38724
Published: 2024-08-13
Description: Cross-Site Request Forgery (CSRF), Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Muhammad Rehman Contact Form 7 Summary and Print allows Stored XSS.This issue affects Contact Form 7 Summary and Print: from n/a through 1.2.5.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-352
References: https://patchstack.com/database/vulnerability/cf7-summary-and-print/wordpress-contact-form-7-summary-and-print-plugin-1-2-5-cross-site-request-forgery-csrf-to-xss-vulnerability?_s_id=cve
CVE: CVE-2024-38742
Published: 2024-08-13
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in MBE Worldwide S.P.A. MBE eShip allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MBE eShip: from n/a through 2.1.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://patchstack.com/database/vulnerability/mail-boxes-etc/wordpress-mbe-eship-plugin-2-1-2-sensitive-data-exposure-vulnerability?_s_id=cve
CVE: CVE-2024-38747
Published: 2024-08-13
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HitPay Payment Solutions Pte Ltd HitPay Payment Gateway for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects HitPay Payment Gateway for WooCommerce: from n/a through 4.1.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://patchstack.com/database/vulnerability/hitpay-payment-gateway/wordpress-hitpay-payment-gateway-for-woocommerce-plugin-4-1-3-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve
CVE: CVE-2024-38749
Published: 2024-08-13
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Olive Themes Olive One Click Demo Import allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Olive One Click Demo Import: from n/a through 1.1.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://patchstack.com/database/vulnerability/olive-one-click-demo-import/wordpress-olive-one-click-demo-import-plugin-1-1-2-sensitive-data-exposure-vulnerability?_s_id=cve
CVE: CVE-2024-38752
Published: 2024-08-13
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zoho Campaigns allows Cross-Site Scripting (XSS).This issue affects Zoho Campaigns: from n/a through 2.0.8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/zoho-campaigns/wordpress-zoho-campaigns-plugin-2-0-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-38756
Published: 2024-08-13
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Weblizar Coming Soon allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Coming Soon: from n/a through 1.6.3.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://patchstack.com/database/vulnerability/responsive-coming-soon-page/wordpress-coming-soon-page-responsive-coming-soon-maintenance-mode-plugin-1-6-3-sensitive-data-exposure-vulnerability?_s_id=cve
CVE: CVE-2024-38760
Published: 2024-08-13
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Maucher Send Users Email allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Send Users Email: from n/a through 1.5.1.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://patchstack.com/database/vulnerability/send-users-email/wordpress-send-users-email-plugin-1-5-1-sensitive-data-exposure-vulnerability?_s_id=cve
CVE: CVE-2024-38787
Published: 2024-08-13
Description: Insertion of Sensitive Information Into Sent Data vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through <= 1.26.8.
CVSS Score: 7.5 (HIGH)
CWE: CWE-201
References: https://patchstack.com/database/Wordpress/Plugin/import-users-from-csv-with-meta/vulnerability/wordpress-import-and-export-users-and-customers-plugin-1-26-8-sensitive-information-via-imported-file-vulnerability?_s_id=cve
CVE: CVE-2024-39642
Published: 2024-08-13
Description: Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects LearnPress: from n/a through 4.2.6.8.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://patchstack.com/database/vulnerability/learnpress/wordpress-learnpress-plugin-4-2-6-8-2-insecure-direct-object-references-idor-vulnerability?_s_id=cve
CVE: CVE-2024-39651
Published: 2024-08-13
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPWeb WooCommerce PDF Vouchers allows File Manipulation.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5.
CVSS Score: 8.6 (HIGH)
CWE: CWE-22
References: https://patchstack.com/database/vulnerability/woocommerce-pdf-vouchers/wordpress-woocommerce-pdf-vouchers-plugin-4-9-5-unauthenticated-arbitrary-file-deletion-vulnerability?_s_id=cve
CVE: CVE-2024-40697
Published: 2024-08-13
Description: IBM Common Licensing 9.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.  IBM X-Force ID:  297895.
CVSS Score: 7.5 (HIGH)
CWE: CWE-521
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/297895; https://www.ibm.com/support/pages/node/7165250
CVE: CVE-2024-41774
Published: 2024-08-13
Description: IBM Common Licensing 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  350348.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/350348; https://www.ibm.com/support/pages/node/7165251
CVE: CVE-2024-43121
Published: 2024-08-13
Description: Improper Privilege Management vulnerability in realmag777 HUSKY allows Privilege Escalation.This issue affects HUSKY: from n/a through 1.3.6.1.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-269
References: https://patchstack.com/database/vulnerability/woocommerce-products-filter/wordpress-husky-plugin-1-3-6-1-privilege-escalation-vulnerability?_s_id=cve
CVE: CVE-2024-43128
Published: 2024-08-13
Description: Improper Control of Generation of Code ('Code Injection') vulnerability in WC Product Table WooCommerce Product Table Lite allows Code Injection.This issue affects WooCommerce Product Table Lite: from n/a through 3.5.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://patchstack.com/database/vulnerability/wc-product-table-lite/wordpress-woocommerce-product-table-lite-plugin-3-5-1-arbitrary-code-execution-vulnerability?_s_id=cve
CVE: CVE-2024-43129
Published: 2024-08-13
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPDeveloper BetterDocs allows PHP Local File Inclusion.This issue affects BetterDocs: from n/a through 3.5.8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://patchstack.com/database/vulnerability/betterdocs/wordpress-betterdocs-plugin-3-5-8-local-file-inclusion-vulnerability?_s_id=cve
CVE: CVE-2024-43131
Published: 2024-08-13
Description: Incorrect Authorization vulnerability in WPWeb Docket (WooCommerce Collections / Wishlist / Watchlist) allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Docket (WooCommerce Collections / Wishlist / Watchlist): from n/a before 1.7.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://patchstack.com/database/vulnerability/woocommerce-collections/wordpress-docket-woocommerce-collections-wishlist-watchlist-plugin-1-6-6-unauthenticated-arbitrary-post-page-deletion-vulnerability?_s_id=cve
CVE: CVE-2024-43135
Published: 2024-08-13
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allows PHP Local File Inclusion.This issue affects WPCafe: from n/a through 2.2.28.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://patchstack.com/database/vulnerability/wp-cafe/wordpress-wpcafe-plugin-2-2-28-local-file-inclusion-vulnerability?_s_id=cve
CVE: CVE-2024-35124
Published: 2024-08-13
Description: A vulnerability in the combination of the OpenBMC's FW1050.00 through FW1050.10, FW1030.00 through FW1030.50, and FW1020.00 through FW1020.60 default password and session management allow an attacker to gain administrative access to the BMC.  IBM X-Force ID:  290674.
CVSS Score: 7.5 (HIGH)
CWE: CWE-288, CWE-306
References: https://https://exchange.xforce.ibmcloud.com/vulnerabilities/290674; https://www.ibm.com/support/pages/node/7163195
CVE: CVE-2024-37287
Published: 2024-08-13
Description: A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability, ultimately leading to arbitrary code execution.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-94, CWE-1321
References: https://discuss.elastic.co/t/kibana-8-14-2-7-17-23-security-update-esa-2024-22/
CVE: CVE-2024-43138
Published: 2024-08-13
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in MagePeople Team Event Manager for WooCommerce allows PHP Local File Inclusion.This issue affects Event Manager for WooCommerce: from n/a through 4.2.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://patchstack.com/database/vulnerability/mage-eventpress/wordpress-event-manager-and-tickets-selling-plugin-for-woocommerce-plugin-4-2-1-local-file-inclusion-vulnerability?_s_id=cve
CVE: CVE-2024-43140
Published: 2024-08-13
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor allows PHP Local File Inclusion.This issue affects Ultimate Bootstrap Elements for Elementor: from n/a through 1.4.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://patchstack.com/database/vulnerability/ultimate-bootstrap-elements-for-elementor/wordpress-ultimate-bootstrap-elements-for-elementor-plugin-1-4-4-local-file-inclusion-vulnerability?_s_id=cve
CVE: CVE-2024-43141
Published: 2024-08-13
Description: Deserialization of Untrusted Data vulnerability in Roland Barker, xnau webdesign Participants Database allows Object Injection.This issue affects Participants Database: from n/a through 2.5.9.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://patchstack.com/database/vulnerability/participants-database/wordpress-participants-database-plugin-2-5-9-2-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2024-43153
Published: 2024-08-13
Description: Incorrect Privilege Assignment vulnerability in WofficeIO Woffice woffice.This issue affects Woffice: from n/a through <= 5.4.10.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-266
References: https://patchstack.com/database/Wordpress/Theme/woffice/vulnerability/wordpress-woffice-theme-5-4-10-unauthenticated-privilege-escalation-vulnerability?_s_id=cve
CVE: CVE-2024-43160
Published: 2024-08-13
Description: Unrestricted Upload of File with Dangerous Type vulnerability in BerqWP allows Code Injection.This issue affects BerqWP: from n/a through 1.7.6.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-434
References: https://patchstack.com/database/vulnerability/searchpro/wordpress-berqwp-plugin-1-7-6-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve
CVE: CVE-2024-43165
Published: 2024-08-13
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rashid87 WPSection allows PHP Local File Inclusion.This issue affects WPSection: from n/a through 1.3.8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://patchstack.com/database/vulnerability/wpsection/wordpress-wpsection-plugin-1-3-8-contributor-limited-local-file-inclusion-vulnerability?_s_id=cve
CVE: CVE-2024-38501
Published: 2024-08-13
Description: An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML code and gain low-privileged access on the affected device.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cert.vde.com/en/advisories/VDE-2024-033
CVE: CVE-2024-38502
Published: 2024-08-13
Description: An unauthenticated remote attacker may use stored XSS vulnerability to obtain information from a user or reboot the affected device once.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://cert.vde.com/en/advisories/VDE-2024-033
CVE: CVE-2024-3913
Published: 2024-08-13
Description: An unauthenticated remote attacker can use this vulnerability to change the device configuration due to a file writeable for short time after system startup.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-552
References: https://cert.vde.com/en/advisories/VDE-2024-022
CVE: CVE-2024-5849
Published: 2024-08-13
Description: An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the affected device once.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://cert.vde.com/en/advisories/VDE-2024-033
CVE: CVE-2024-41623
Published: 2024-08-13
Description: An issue in D3D Security D3D IP Camera (D8801) v.V9.1.17.1.4-20180428 allows a local attacker to execute arbitrary code via a crafted payload
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://d3d.com; https://github.com/Anonymous120386/Anonymous
CVE: CVE-2024-42736
Published: 2024-08-13
Description: In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in addBlacklist. Authenticated Attackers can send malicious packet to execute arbitrary commands.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/HouseFuzz/reports/blob/main/totolink/x5000r/addBlacklist/addBlacklist.md
CVE: CVE-2024-42737
Published: 2024-08-13
Description: In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in delBlacklist. Authenticated Attackers can send malicious packet to execute arbitrary commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://github.com/HouseFuzz/reports/blob/main/totolink/x5000r/delBlacklist/delBlacklist.md
CVE: CVE-2024-42738
Published: 2024-08-13
Description: In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setDmzCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://github.com/HouseFuzz/reports/blob/main/totolink/x5000r/setDmzCfg/setDmzCfg.md
CVE: CVE-2024-42739
Published: 2024-08-13
Description: In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setAccessDeviceCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-94
References: https://github.com/HouseFuzz/reports/blob/main/totolink/x5000r/setAccessDeviceCfg/setAccessDeviceCfg.md
CVE: CVE-2024-42740
Published: 2024-08-13
Description: In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setLedCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78
References: https://github.com/HouseFuzz/reports/blob/main/totolink/x5000r/setLedCfg/setLedCfg.md
CVE: CVE-2024-6788
Published: 2024-08-13
Description: A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user “user-app” to the default password.
CVSS Score: 8.6 (HIGH)
CWE: CWE-1392
References: https://cert.vde.com/en/advisories/VDE-2024-022
CVE: CVE-2024-6384
Published: 2024-08-13
Description: "Hot" backup files may be downloaded by underprivileged users, if they are capable of acquiring a unique backup identifier. This issue affects MongoDB Enterprise Server v6.0 versions prior to 6.0.16, MongoDB Enterprise Server v7.0 versions prior to 7.0.11 and MongoDB Enterprise Server v7.3 versions prior to 7.3.3
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-285
References: https://jira.mongodb.org/browse/SERVER-93516; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-27486
Published: 2024-08-13
Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiDDoS version 5.5.0 through 5.5.1, 5.4.2 through 5.4.0, 5.3.0 through 5.3.1, 5.2.0, 5.1.0, 5.0.0, 4.7.0, 4.6.0 and 4.5.0 and FortiDDoS-F version 6.3.0 through 6.3.1, 6.2.0 through 6.2.2, 6.1.0 through 6.1.4 allows an authenticated attacker to execute shell code as `root` via `execute` CLI commands.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-78
References: https://fortiguard.com/psirt/FG-IR-22-047
CVE: CVE-2022-45862
Published: 2024-08-13
Description: An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and below, 7.0 all versions, 6.4 all versions; FortiProxy 7.2 all versions, 7.0 all versions; FortiPAM 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions; FortiSwitchManager 7.2.1 and below, 7.0 all versions GUI may allow attackers to re-use websessions after GUI logout, should they manage to acquire the required credentials.
CVSS Score: 3.7 (LOW)
CWE: CWE-613
References: https://fortiguard.com/psirt/FG-IR-22-445
CVE: CVE-2023-26211
Published: 2024-08-13
Description: An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSOAR 7.3.0 through 7.3.2 allows an authenticated, remote attacker to inject arbitrary web script or HTML via the Communications module.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/psirt/FG-IR-23-088
CVE: CVE-2024-21757
Published: 2024-08-13
Description: A unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and versions 7.4.0 through 7.4.1, as well as Fortinet FortiAnalyzer versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and versions 7.4.0 through 7.4.1, allows an attacker to modify admin passwords via the device configuration backup.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-620
References: https://fortiguard.fortinet.com/psirt/FG-IR-23-467
CVE: CVE-2024-36505
Published: 2024-08-13
Description: An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14 and 6.4.x may allow an attacker who has already successfully obtained write access to the underlying system (via another hypothetical exploit) to bypass the file integrity checking system.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-284
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-012
CVE: CVE-2024-7746
Published: 2024-08-13
Description: Use of Default Credentials vulnerability in Tananaev Solutions Traccar Server on Administrator Panel modules allows Authentication Abuse.This issue affects the privileged transactions implemented by the Traccar solution that should otherwise be protected by the authentication mechanism. 
These transactions could have an impact on any sensitive aspect of the platform, including Confidentiality, Integrity and Availability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1392, CWE-287
References: https://asrg.io/security-advisories/cve-2024-7746/
CVE: CVE-2021-26344
Published: 2024-08-13
Description: An out of bounds memory write when processing the AMD
PSP1 Configuration Block (APCB) could allow an attacker with access the ability
to modify the BIOS image, and the ability to sign the resulting image, to
potentially modify the APCB block resulting in arbitrary code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html
CVE: CVE-2021-26367
Published: 2024-08-13
Description: A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability.
CVSS Score: 5.7 (MEDIUM)
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html; https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6005.html
CVE: CVE-2021-26387
Published: 2024-08-13
Description: Insufficient access controls in ASP kernel may allow a
privileged attacker with access to AMD signing keys and the BIOS menu or UEFI
shell to map DRAM regions in protected areas, potentially leading to a loss of platform integrity.
CVSS Score: 3.9 (LOW)
CWE: CWE-863
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html; https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5002.html
CVE: CVE-2021-46746
Published: 2024-08-13
Description: Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged attacker with access to AMD signing
keys to c006Frrupt the return address, causing a
stack-based buffer overrun, potentially leading to a denial of service.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-120
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html
CVE: CVE-2021-46772
Published: 2024-08-13
Description: Insufficient input validation in the ABL may allow a privileged
attacker with access to the BIOS menu or UEFI shell to tamper with the
structure headers in SPI ROM causing an out of bounds memory read and write,
potentially resulting in memory corruption or denial of service.
CVSS Score: 3.9 (LOW)
CWE: CWE-125, CWE-787
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html; https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html; https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5002.html
CVE: CVE-2022-23815
Published: 2024-08-13
Description: Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html
CVE: CVE-2022-23817
Published: 2024-08-13
Description: Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the ASP Secure OS kernel virtual address space, potentially leading to privilege escalation.
CVSS Score: 7.0 (HIGH)
CWE: CWE-120
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html