deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-51135
Published: 2024-11-11
Description: An XML External Entity (XXE) vulnerability in the component DocumentBuilderFactory of powertac-server v1.9.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-79
References: http://www.powertac.org/; https://github.com/powertac/powertac-server; https://github.com/powertac/powertac-server/issues/1166
CVE: CVE-2024-10315
Published: 2024-11-11
Description: In Gliffy Online an insecure configuration was discovered in versions before 4.14.0-6. Reported by Alpha Inferno PVT LTD.
CWE: CWE-942
References: https://portal.perforce.com/s/detail/a91PA000001SZVJYA4
CVE: CVE-2024-11078
Published: 2024-11-11
Description: A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument e/role leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://code-projects.org/; https://github.com/UnrealdDei/cve/blob/main/xss.md; https://vuldb.com/?ctiid.283873
CVE: CVE-2024-36061
Published: 2024-11-11
Description: EnGenius EWS356-FIT devices through 1.1.30 allow blind OS command injection. This allows an attacker to execute arbitrary OS commands via shell metacharacters to the Ping and Speed Test utilities.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/actuator/cve/blob/main/Engenius/CVE-2024-36061
CVE: CVE-2024-46965
Published: 2024-11-11
Description: The DS allvideo.downloader.browser (aka Fast Video Downloader: Browser) application through 1.6-RC1 for Android allows an attacker to execute arbitrary JavaScript code via the allvideo.downloader.browser.DefaultBrowserActivity component.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-94
References: https://github.com/actuator/allvideo.downloader.browser/blob/main/CVE-2024-46965; https://play.google.com/store/apps/details?id=allvideo.downloader.browser
CVE: CVE-2024-48322
Published: 2024-11-11
Description: UsersController.php in Run.codes 1.5.2 and older has a reset password race condition vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-367
References: https://github.com/runcodes-icmc/server; https://github.com/runcodes-icmc/server/issues/12; https://github.com/runcodes-icmc/server/releases/tag/v1.5.3
CVE: CVE-2024-51186
Published: 2024-11-11
Description: D-Link DIR-820L 1.05b03 was discovered to contain a remote code execution (RCE) vulnerability via the ping_addr parameter in the ping_v4 and ping_v6 functions.
CVSS Score: 8.0 (HIGH)
CWE: CWE-77
References: https://github.com/4hsien/CVE-vulns/blob/main/D-Link/DIR-820L/CI_ping_addr/README.md; https://legacy.us.dlink.com/pages/product.aspx?id=00c2150966b046b58ba95d8ae3a8f73d; https://www.dlink.com/en
CVE: CVE-2024-51187
Published: 2024-11-11
Description: TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the firewallRule_Name_1.1.1.0.0 parameter on the /firewall_setting.htm page.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/4hsien/CVE-vulns/blob/main/TRENDnet/TEW-652BRP/XSS_Firewall_Rule/README.md; https://www.trendnet.com/products/product-detail?prod=235_TEW-651BR; https://www.trendnet.com/products/product-detail?prod=235_TEW-652BRP
CVE: CVE-2024-51188
Published: 2024-11-11
Description: TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the vsRule_VirtualServerName_1.1.10.0.0 parameter on the /virtual_server.htm page.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/4hsien/CVE-vulns/blob/main/TRENDnet/TEW-652BRP/XSS_Virtual_Server/README.md; https://www.trendnet.com/products/product-detail?prod=235_TEW-651BR; https://www.trendnet.com/products/product-detail?prod=235_TEW-652BRP
CVE: CVE-2024-51189
Published: 2024-11-11
Description: TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the macList_Name_1.1.1.0.0 parameter on the /filters.htm page.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/4hsien/CVE-vulns/blob/main/TRENDnet/TEW-652BRP/XSS_Filter/README.md; https://www.trendnet.com/products/product-detail?prod=235_TEW-651BR; https://www.trendnet.com/products/product-detail?prod=235_TEW-652BRP
CVE: CVE-2024-51190
Published: 2024-11-11
Description: TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the ptRule_ApplicationName_1.1.6.0.0 parameter on the /special_ap.htm page.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/4hsien/CVE-vulns/blob/main/TRENDnet/TEW-652BRP/XSS_Special_AP/README.md; https://www.trendnet.com/products/product-detail?prod=235_TEW-651BR; https://www.trendnet.com/products/product-detail?prod=235_TEW-652BRP
CVE: CVE-2024-51484
Published: 2024-11-11
Description: Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating controllers. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://github.com/ampache/ampache/security/advisories/GHSA-h6vj-6rvc-3x29
CVE: CVE-2024-51485
Published: 2024-11-11
Description: Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating plugins. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/ampache/ampache/security/advisories/GHSA-xvfj-w962-hqcx
CVE: CVE-2024-51486
Published: 2024-11-11
Description: Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface section of the Ampache menu, where users can change the "Custom URL - Favicon". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/ampache/ampache/security/advisories/GHSA-4xw5-f7xm-vpw5
CVE: CVE-2024-51487
Published: 2024-11-11
Description: Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating catalog. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://github.com/ampache/ampache/security/advisories/GHSA-5rmx-fjmc-mg6x
CVE: CVE-2024-51488
Published: 2024-11-11
Description: Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing does not adequately validate CSRF tokens when users delete messages. This vulnerability could be exploited to forge CSRF attacks, allowing an attacker to delete messages to any user, including administrators, if they interact with a malicious request. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://github.com/ampache/ampache/security/advisories/GHSA-46m4-5pxj-66f2
CVE: CVE-2024-51489
Published: 2024-11-11
Description: Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing does not adequately validate CSRF tokens when users send messages to one another. This vulnerability could be exploited to forge CSRF attacks, allowing an attacker to send messages to any user, including administrators, if they interact with a malicious request. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://github.com/ampache/ampache/security/advisories/GHSA-4q69-983r-mwwr
CVE: CVE-2024-51490
Published: 2024-11-11
Description: Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the Ampache menu, where users can change "Custom URL - Logo". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/ampache/ampache/security/advisories/GHSA-x979-f6px-7j2w
CVE: CVE-2024-51747
Published: 2024-11-11
Description: Kanboard is project management software that focuses on the Kanban methodology. An authenticated Kanboard admin can read and delete arbitrary files from the server. File attachments, that are viewable or downloadable in Kanboard are resolved through its `path` entry in the `project_has_files`  SQLite db. Thus, an attacker who can upload a modified sqlite.db through the dedicated feature, can set arbitrary file links, by abusing path traversals. Once the modified db is uploaded and the project page is accessed, a file download can be triggered and all files, readable in the context of the Kanboard application permissions, can be downloaded. This issue has been addressed in version 1.2.42 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22, CWE-27, CWE-22
References: https://github.com/kanboard/kanboard/security/advisories/GHSA-78pf-vg56-5p8v
CVE: CVE-2024-51748
Published: 2024-11-11
Description: Kanboard is project management software that focuses on the Kanban methodology. An authenticated Kanboard admin can run arbitrary php code on the server in combination with a file write possibility. The user interface language is determined and loaded by the setting `application_language` in the `settings` table. Thus, an attacker who can upload a modified sqlite.db through the dedicated feature, has control over the filepath, which is loaded. Exploiting this vulnerability has one constraint: the attacker must be able to place a file (called translations.php) on the system. However, this is not impossible, think of anonymous FTP server or another application that allows uploading files. Once the attacker has placed its file with the actual php code as the payload, the attacker can craft a sqlite db settings, which uses path traversal to point to the directory, where the `translations.php` file is stored. Then gaining code execution after importing the crafted sqlite.db. This issue has been addressed in version 1.2.42 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://github.com/kanboard/kanboard/security/advisories/GHSA-jvff-x577-j95p
CVE: CVE-2024-51992
Published: 2024-11-11
Description: Orchid is a @laravel package that allows for rapid application development of back-office applications, admin/user panels, and dashboards. This vulnerability is a method exposure issue (CWE-749: Exposed Dangerous Method or Function) in the Orchid Platform’s asynchronous modal functionality, affecting users of Orchid Platform version 8 through 14.42.x. Attackers could exploit this vulnerability to call arbitrary methods within the `Screen` class, leading to potential brute force of database tables, validation checks against user credentials, and disclosure of the server’s real IP address. The issue has been patched in the latest release, version 14.43.0, released on November 6, 2024. Users should upgrade to version 14.43.0 or later to address this vulnerability. If upgrading to version 14.43.0 is not immediately possible, users can mitigate the vulnerability by implementing middleware to intercept and validate requests to asynchronous modal endpoints, allowing only approved methods and parameters.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-749
References: https://github.com/orchidsoftware/platform/security/advisories/GHSA-cm46-gqf4-mv4f
CVE: CVE-2024-52286
Published: 2024-11-11
Description: Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. In affected versions the Merge functionality takes untrusted user input (file name) and uses it directly in the creation of HTML pages allowing any unauthenticated to execute JavaScript code in the context of the user. The issue stems to the code starting at `Line 24` in `src/main/resources/static/js/merge.js`. The file name is directly being input into InnerHTML with no sanitization on the file name, allowing a malicious user to be able to upload files with names containing HTML tags. As HTML tags can include JavaScript code, this can be used to execute JavaScript code in the context of the user. This is a self-injection style attack and relies on a user uploading the malicious file themselves and it impact only them, not other users. A user might be social engineered into running this to launch a phishing attack. Nevertheless, this breaks the expected security restrictions in place by the application. This issue has been addressed in version 0.32.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CWE: CWE-20, CWE-79
References: https://github.com/Stirling-Tools/Stirling-PDF/commit/404e31468ec98413f1906cc7ee3d49091638c693; https://github.com/Stirling-Tools/Stirling-PDF/security/advisories/GHSA-9j55-gvf2-cqwv; https://hotanya.fyi/blog/self-xss-in-stirling-pdf-cve-2024-52286/
CVE: CVE-2024-52288
Published: 2024-11-11
Description: libosdp is an implementation of IEC 60839-11-5 OSDP (Open Supervised Device Protocol) and provides a C library with support for C++, Rust and Python3. In affected versions an unexpected `REPLY_CCRYPT` or `REPLY_RMAC_I` may be introduced into an active stream when they should not be. Once RMAC_I message can be sent during a session, attacker with MITM access to the communication may intercept the original RMAC_I reply and save it. While the session continues, the attacker will record all of the replies and save them, till capturing the message to be replied (can be detected by ID, length or time based on inspection of visual activity next to the reader) Once attacker captures a session with the message to be replayed, he stops resetting the connection and waits for signal to perform the replay to of the PD to CP message (ex: by signaling remotely to the MIMT device or setting a specific timing). In order to replay, the attacker will craft a specific RMAC_I message in the proper seq of the execution, which will result in reverting the RMAC to the beginning of the session. At that phase - attacker can replay all the messages from the beginning of the session. This issue has been addressed in commit `298576d9` which is included in release version 3.0.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-924
References: https://github.com/goToMain/libosdp/commit/298576d9214b48214092eebdd892ec77be085e5a; https://github.com/goToMain/libosdp/security/advisories/GHSA-xhjw-7vh5-qxqm
CVE: CVE-2024-52530
Published: 2024-11-11
Description: GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444
References: https://gitlab.gnome.org/GNOME/libsoup/-/issues/377; https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/402; https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home
CVE: CVE-2024-52531
Published: 2024-11-11
Description: GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. There is a plausible way to reach this remotely via soup_message_headers_get_content_type (e.g., an application may want to retrieve the content type of a request or response).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/407; https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/407#note_2316401; https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home
CVE: CVE-2024-52532
Published: 2024-11-11
Description: GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://gitlab.gnome.org/GNOME/libsoup/-/issues/391; https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/410; https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home
CVE: CVE-2024-10694
Published: 2024-11-11
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-9542. Reason: This candidate is a reservation duplicate of CVE-2024-9542. Notes: All CVE users should reference CVE-2024-9542 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-44546
Published: 2024-11-11
Description: Powerjob >= 3.20 is vulnerable to SQL injection via the version parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/jwx0539/5151f53ec497474cab6af4fa8ee6b6f7; https://github.com/PowerJob/PowerJob
CVE: CVE-2024-46962
Published: 2024-11-11
Description: The SYQ com.downloader.video.fast (aka Master Video Downloader) application through 2.0 for Android allows an attacker to execute arbitrary JavaScript code via the com.downloader.video.fast.SpeedMainAct component.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-94
References: https://github.com/actuator/com.downloader.video.fast/blob/main/CVE-2024-46962; https://play.google.com/store/apps/details?id=com.downloader.video.fast
CVE: CVE-2024-46963
Published: 2024-11-11
Description: The com.superfast.video.downloader (aka Super Unlimited Video Downloader - All in One) application through 5.1.9 for Android allows an attacker to execute arbitrary JavaScript code via the com.bluesky.browser.ui.BrowserMainActivity component.
CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: https://github.com/actuator/com.superfast.video.downloader/blob/main/CVE-2024-46963; https://play.google.com/store/apps/details?id=com.superfast.video.downloader
CVE: CVE-2024-46964
Published: 2024-11-11
Description: The com.video.downloader.all (aka All Video Downloader) application through 11.28 for Android allows an attacker to execute arbitrary JavaScript code via the com.video.downloader.all.StartActivity component.
CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: https://github.com/actuator/com.video.downloader.all/blob/main/CVE-2024-46964; https://play.google.com/store/apps/details?id=com.video.downloader.all
CVE: CVE-2024-46966
Published: 2024-11-11
Description: The Ikhgur mn.ikhgur.khotoch (aka Video Downloader Pro & Browser) application through 1.0.42 for Android allows an attacker to execute arbitrary JavaScript code via the mn.ikhgur.khotoch.MainActivity component.
CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: https://github.com/actuator/mn.ikhgur.khotoch/blob/main/CVE-2024-46966; https://play.google.com/store/apps/details?id=mn.ikhgur.khotoch
CVE: CVE-2024-51026
Published: 2024-11-11
Description: The NetAdmin IAM system (version 4.0.30319) has a Cross Site Scripting (XSS) vulnerability in the /BalloonSave.ashx endpoint, where it is possible to inject a malicious payload into the Content= field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/BrotherOfJhonny/CVE-2024-51026_Overview
CVE: CVE-2024-23983
Published: 2024-11-11
Description: Improper handling of canonical URL-encoding may lead to bypass not properly constrained by request rules.
CWE: CWE-20, CWE-177
References: https://docs.pingidentity.com/pingaccess/latest/release_notes/pa_811_rn.html; https://www.pingidentity.com/en/resources/downloads/pingaccess.html
CVE: CVE-2024-25253
Published: 2024-11-11
Description: Driver Booster v10.6 was discovered to contain a buffer overflow via the Host parameter under the Customize proxy module.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://exploitart.ist/exploit/2023/09/10/driver-booster-buffer-overflow.html
CVE: CVE-2024-25254
Published: 2024-11-11
Description: SuperScan v4.1 was discovered to contain a buffer overflow via the Hostname/IP parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://exploitart.ist/exploit/2023/09/18/superscan-os-command-injection.html
CVE: CVE-2024-25255
Published: 2024-11-11
Description: Sublime Text 4 was discovered to contain a command injection vulnerability via the New Build System module. NOTE: multiple third parties report that this is intended behavior.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://exploitart.ist/exploit/2023/09/17/sublime-text-os-command-injection.html; https://forum.sublimetext.com/t/cve-2024-25255-critical/74906/3; https://www.sublimetext.com/docs/build_systems.html#exec-target-options
CVE: CVE-2024-50601
Published: 2024-11-11
Description: Persistent and reflected XSS vulnerabilities in the themeMode cookie and _h URL parameter of Axigen Mail Server up to version 10.5.28 allow attackers to execute arbitrary Javascript. Exploitation could lead to session hijacking, data leakage, and further exploitation via a multi-stage attack. Fixed in versions 10.3.3.67, 10.4.42, and 10.5.29.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.axigen.com/knowledgebase/Axigen-WebMail-Persistent-and-Reflected-XSS-Vulnerabilities-CVE-2024-50601-_403.html
CVE: CVE-2024-50636
Published: 2024-11-11
Description: PyMOL 2.5.0 contains a vulnerability in its "Run Script" function, which allows the execution of arbitrary Python code embedded within .PYM files. Attackers can craft a malicious .PYM file containing a Python reverse shell payload and exploit the function to achieve Remote Command Execution (RCE). This vulnerability arises because PyMOL treats .PYM files as Python scripts without properly validating or restricting the commands within the script, enabling attackers to run unauthorized commands in the context of the user running the application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/schrodinger/pymol-open-source/issues/405; https://github.com/yamerooo123/CVE/blob/main/CVE-2024-50636/Description.md; https://youtu.be/SWnN_a1tUNc
CVE: CVE-2024-51213
Published: 2024-11-11
Description: Cross Site Scripting vulnerability in Online Shop Store v.1.0 allows a remote attacker to execute arbitrary code via the login.php component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Prabhatsk7/CVE/blob/main/CVE-2024-51213