deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-21523
Published: 2024-07-10
Description: All versions of the package images are vulnerable to Denial of Service (DoS) due to providing unexpected input types to several different functions. This makes it possible to reach an assert macro, leading to a process crash.**Note:**By providing some specific integer values (like 0) to the size function, it is possible to obtain a Segmentation fault error, leading to the process crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-241
References: https://gist.github.com/dellalibera/8b4ea6b4db84cba212e6e6e39a6933d1; https://github.com/zhangyuanwei/node-images/blob/691d49f4e620b4eec9f1c47b1735841d9d8b55f6/src/Image.cc; https://security.snyk.io/vuln/SNYK-JS-IMAGES-6421826
CVE: CVE-2024-21524
Published: 2024-07-10
Description: All versions of the package node-stringbuilder are vulnerable to Out-of-bounds Read due to incorrect memory length calculation, by calling ToBuffer, ToString, or CharAt on a StringBuilder object with a non-empty string value input. It's possible to return previously allocated memory, for example, by providing negative indexes, leading to an Information Disclosure.
CVSS Score: 8.2 (HIGH)
CWE: CWE-125, CWE-125
References: https://gist.github.com/dellalibera/0bb022811224f81d998fa61c3175ee67; https://github.com/magiclen/node-stringbuilder/blob/5c2797d3d6bf8cb6d10fe1e077609cef9a5a7de0/src/node-stringbuilder.c%23L1281; https://security.snyk.io/vuln/SNYK-JS-NODESTRINGBUILDER-6421617
CVE: CVE-2024-21525
Published: 2024-07-10
Description: All versions of the package node-twain are vulnerable to Improper Check or Handling of Exceptional Conditions due to the length of the source data not being checked. Creating a new twain.TwainSDK with a productName or productFamily, manufacturer, version.info property of length >= 34 chars leads to a buffer overflow vulnerability.
CVSS Score: 8.3 (HIGH)
CWE: CWE-703
References: https://gist.github.com/dellalibera/55b87634a6c360e5be22a715f0566c99; https://security.snyk.io/vuln/SNYK-JS-NODETWAIN-6421153; https://gist.github.com/dellalibera/55b87634a6c360e5be22a715f0566c99
CVE: CVE-2024-21526
Published: 2024-07-10
Description: All versions of the package speaker are vulnerable to Denial of Service (DoS) when providing unexpected input types to the channels property of the Speaker object makes it possible to reach an assert macro. Exploiting this vulnerability can lead to a process crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-241
References: https://github.com/TooTallNate/node-speaker/blob/316afff5a393fce438cf7296011fcfc6e12aa9dc/src/binding.c%23L48; https://security.snyk.io/vuln/SNYK-JS-SPEAKER-6370676; https://github.com/TooTallNate/node-speaker/blob/316afff5a393fce438cf7296011fcfc6e12aa9dc/src/binding.c%23L48
CVE: CVE-2024-38875
Published: 2024-07-10
Description: An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certain inputs with a very large number of brackets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-130
References: https://docs.djangoproject.com/en/dev/releases/security/; https://groups.google.com/forum/#%21forum/django-announce; https://www.djangoproject.com/weblog/2024/jul/09/security-releases/
CVE: CVE-2024-39329
Published: 2024-07-10
Description: An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The django.contrib.auth.backends.ModelBackend.authenticate() method allows remote attackers to enumerate users via a timing attack involving login requests for users with an unusable password.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-208
References: https://docs.djangoproject.com/en/dev/releases/security/; https://groups.google.com/forum/#%21forum/django-announce; https://www.djangoproject.com/weblog/2024/jul/09/security-releases/
CVE: CVE-2024-39330
Published: 2024-07-10
Description: An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes of the django.core.files.storage.Storage base class, when they override generate_filename() without replicating the file-path validations from the parent class, potentially allow directory traversal via certain inputs during a save() call. (Built-in Storage sub-classes are unaffected.)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://docs.djangoproject.com/en/dev/releases/security/; https://groups.google.com/forum/#%21forum/django-announce; https://www.djangoproject.com/weblog/2024/jul/09/security-releases/
CVE: CVE-2024-39614
Published: 2024-07-10
Description: An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. get_supported_language_variant() was subject to a potential denial-of-service attack when used with very long strings containing specific characters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-130
References: https://docs.djangoproject.com/en/dev/releases/security/; https://groups.google.com/forum/#%21forum/django-announce; https://www.djangoproject.com/weblog/2024/jul/09/security-releases/
CVE: CVE-2024-6410
Published: 2024-07-10
Description: The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.8.9 via the 'pm_upload_image' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change the profile picture of any user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/js/profile-magic-admin-power.js#L361; https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/js/profile-magic-admin-power.js#L390; https://plugins.trac.wordpress.org/changeset/3111609/profilegrid-user-profiles-groups-and-communities/trunk/public/partials/crop.php
CVE: CVE-2024-6411
Published: 2024-07-10
Description: The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.8.9. This is due to a lack of validation on user-supplied data in the 'pm_upload_image' AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update their user capabilities to Administrator.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/js/profile-magic-admin-power.js#L361; https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/js/profile-magic-admin-power.js#L390; https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/partials/coverimg_crop.php
CVE: CVE-2024-36450
Published: 2024-07-10
Description: Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a session ID may be obtained, a webpage may be altered, or a server may be halted.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://jvn.jp/en/jp/JVN81442045/; https://webmin.com/; https://jvn.jp/en/jp/JVN81442045/
CVE: CVE-2024-36451
Published: 2024-07-10
Description: Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2.003. If this vulnerability is exploited, a console session may be hijacked by an unauthorized user. As a result, data within a system may be referred, a webpage may be altered, or a server may be permanently halted.
CVSS Score: 8.8 (HIGH)
CWE: CWE-280
References: https://jvn.jp/en/jp/JVN81442045/; https://webmin.com/; https://jvn.jp/en/jp/JVN81442045/
CVE: CVE-2024-36452
Published: 2024-07-10
Description: Cross-site request forgery vulnerability exists in ajaxterm module of Webmin versions prior to 2.003. If this vulnerability is exploited, unintended operations may be performed when a user views a malicious page while logged in. As a result, data within a system may be referred, a webpage may be altered, or a server may be permanently halted.
CVSS Score: 3.1 (LOW)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN81442045/; https://webmin.com/; https://jvn.jp/en/jp/JVN81442045/
CVE: CVE-2024-36453
Published: 2024-07-10
Description: Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970 and Usermin versions prior to 1.820. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a webpage may be altered or sensitive information such as a credential may be disclosed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN81442045/; https://webmin.com/; https://webmin.com/usermin/
CVE: CVE-2024-39886
Published: 2024-07-10
Description: TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel. Since TONE store App communicates with TONE store website in cleartext, a man-in-the-middle attack may allow an attacker to obtain and/or alter communications of the affected App.
CVSS Score: 3.7 (LOW)
CWE: CWE-419
References: https://jvn.jp/en/jp/JVN28515217/; https://tone.ne.jp/vulnerability/14492007.html; https://jvn.jp/en/jp/JVN28515217/
CVE: CVE-2024-39927
Published: 2024-07-10
Description: Out-of-bounds write vulnerability exists in Ricoh MFPs and printers. If a remote attacker sends a specially crafted request to the affected products, the products may be able to cause a denial-of-service (DoS) condition and/or user's data may be destroyed.
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2024-000008; https://jvn.jp/en/jp/JVN14294633/; https://jvn.jp/jp/JVN14294633/
CVE: CVE-2023-6813
Published: 2024-07-10
Description: The Login by Auth0 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘wle’ parameter in all versions up to, and including, 4.6.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3114611%40auth0&new=3114611%40auth0&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/0c4e0d48-fde1-45dd-8e06-4582cf677579?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3114611%40auth0&new=3114611%40auth0&sfp_email=&sfph_mail=
CVE: CVE-2024-39489
Published: 2024-07-10
Description: In the Linux kernel, the following vulnerability has been resolved:

ipv6: sr: fix memleak in seg6_hmac_init_algo

seg6_hmac_init_algo returns without cleaning up the previous allocations
if one fails, so it's going to leak all that memory and the crypto tfms.

Update seg6_hmac_exit to only free the memory when allocated, so we can
reuse the code directly.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/0e44d6cbe8de983470c3d2f[PII_REDACTED]84fdcb6; https://git.kernel.org/stable/c/4a3fcf53725b70010d1cf869a2ba549fed6b8fb3; https://git.kernel.org/stable/c/599a[PII_REDACTED]ac22bfc453f4fd3959c55ea821
CVE: CVE-2024-39490
Published: 2024-07-10
Description: In the Linux kernel, the following vulnerability has been resolved:

ipv6: sr: fix missing sk_buff release in seg6_input_core

The seg6_input() function is responsible for adding the SRH into a
packet, delegating the operation to the seg6_input_core(). This function
uses the skb_cow_head() to ensure that there is sufficient headroom in
the sk_buff for accommodating the link-layer header.
In the event that the skb_cow_header() function fails, the
seg6_input_core() catches the error but it does not release the sk_buff,
which will result in a memory leak.

This issue was introduced in commit af3b5158b89d ("ipv6: sr: fix BUG due
to headroom too small after SRH push") and persists even after commit
7a3f5b0de364 ("netfilter: add netfilter hooks to SRv6 data plane"),
where the entire seg6_input() code was refactored to deal with netfilter
hooks.

The proposed patch addresses the identified memory leak by requiring the
seg6_input_core() function to release the sk_buff in the event that
skb_cow_head() fails.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/5447f9708d9e4c17a647b16a9cb29e9e02820bd9; https://git.kernel.org/stable/c/8f1fc3b86eaea70be6abcae2e9aa7e7b99453864; https://git.kernel.org/stable/c/e8688218e38111ace457509d8f0cad75f79c1a7a
CVE: CVE-2024-39491
Published: 2024-07-10
Description: In the Linux kernel, the following vulnerability has been resolved:

ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance

The cs_dsp instance is initialized in the driver probe() so it
should be freed in the driver remove(). Also fix a missing call
to cs_dsp_remove() in the error path of cs35l56_hda_common_probe().

The call to cs_dsp_remove() was being done in the component unbind
callback cs35l56_hda_unbind(). This meant that if the driver was
unbound and then re-bound it would be using an uninitialized cs_dsp
instance.

It is best to initialize the cs_dsp instance in probe() so that it
can return an error if it fails. The component binding API doesn't
have any error handling so there's no way to handle a failure if
cs_dsp was initialized in the bind.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://git.kernel.org/stable/c/60d5e087e5f334475b032ad7e6ad849fb998f303; https://git.kernel.org/stable/c/9054c474f9c219e58a441e401c0e6e38fe713ff1; https://git.kernel.org/stable/c/d344873c4cbde249b7152d36a273bcc45864001e
CVE: CVE-2024-39492
Published: 2024-07-10
Description: In the Linux kernel, the following vulnerability has been resolved:

mailbox: mtk-cmdq: Fix pm_runtime_get_sync() warning in mbox shutdown

The return value of pm_runtime_get_sync() in cmdq_mbox_shutdown()
will return 1 when pm runtime state is active, and we don't want to
get the warning message in this case.

So we change the return value < 0 for WARN_ON().
CVSS Score: 7.0 (HIGH)
CWE: CWE-252
References: https://git.kernel.org/stable/c/2d42a37a4518478f075ccf848242b4a50e313a46; https://git.kernel.org/stable/c/747a69a119c[PII_REDACTED]43f21c2d08562968ccc; https://git.kernel.org/stable/c/2d42a37a4518478f075ccf848242b4a50e313a46
CVE: CVE-2024-39493
Published: 2024-07-10
Description: In the Linux kernel, the following vulnerability has been resolved:

crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak

Using completion_done to determine whether the caller has gone
away only works after a complete call.  Furthermore it's still
possible that the caller has not yet called wait_for_completion,
resulting in another potential UAF.

Fix this by making the caller use cancel_work_sync and then freeing
the memory safely.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/0ce5964b82f212f4df6a9813f09a0b5de15bd9c8; https://git.kernel.org/stable/c/3fb4601e0db10d4fe25e46f3fa308d40d37366bd; https://git.kernel.org/stable/c/6396b33e98c096bff9c253ed49c[PII_REDACTED]92a
CVE: CVE-2024-5664
Published: 2024-07-10
Description: The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute within the plugin's sonaar_audioplayer shortcode in all versions up to, and including, 5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/mp3-music-player-by-sonaar/tags/5.4.0.2/includes/class-sonaar-music-widget.php#L1853; https://plugins.trac.wordpress.org/changeset/3115110/mp3-music-player-by-sonaar/trunk/includes/class-sonaar-music-widget.php; https://wordpress.org/plugins/mp3-music-player-by-sonaar/#developers
CVE: CVE-2024-6421
Published: 2024-07-10
Description: An unauthenticated remote attacker can read out sensitive device information through a incorrectly configured FTP service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: https://cert.vde.com/en/advisories/VDE-2024-038; https://cert.vde.com/en/advisories/VDE-2024-038
CVE: CVE-2024-6422
Published: 2024-07-10
Description: An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://cert.vde.com/en/advisories/VDE-2024-038; https://cert.vde.com/en/advisories/VDE-2024-038
CVE: CVE-2024-6556
Published: 2024-07-10
Description: The SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.10.8. This is due the plugin utilizing mobiledetect without preventing direct access to the files. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3115079%40smartcrawl-seo&new=3115079%40smartcrawl-seo&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/4d357096-25da-4cbf-9c6c-261bf1b29a9f?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3115079%40smartcrawl-seo&new=3115079%40smartcrawl-seo&sfp_email=&sfph_mail=
CVE: CVE-2024-3798
Published: 2024-07-10
Description: Insecure handling of GET header parameter file included in requests being sent to an instance of the open-source project Phoniebox allows an attacker to create a website, which – when visited by a user – will send malicious requests to multiple hosts on the local network. If such a request reaches the server, it will cause one of the following (depending on the chosen payload): shell command execution, reflected XSS or cross-site request forgery.


This issue affects Phoniebox in all releases through 2.7. Newer 2.x releases were not tested, but they might also be vulnerable. 
Phoniebox in version 3.0 and higher are not affected.
CWE: CWE-78, CWE-79, CWE-352
References: https://cert.pl/en/posts/2024/07/CVE-2024-3798; https://cert.pl/posts/2024/07/CVE-2024-3798; https://github.com/MiczFlor/RPi-Jukebox-RFID/issues/2342
CVE: CVE-2024-3799
Published: 2024-07-10
Description: Insecure handling of POST header parameter body included in requests being sent to an instance of the open-source project Phoniebox allows an attacker to create a website, which – when visited by a user – will send malicious requests to multiple hosts on the local network. If such a request reaches the server, it will cause a shell command execution.


This issue affects Phoniebox in all releases through 2.7. Newer 2.x releases were not tested, but they might also be vulnerable. 
Phoniebox in version 3.0 and higher are not affected.
CWE: CWE-78
References: https://cert.pl/en/posts/2024/07/CVE-2024-3798; https://cert.pl/posts/2024/07/CVE-2024-3798; https://github.com/MiczFlor/RPi-Jukebox-RFID/issues/2342
CVE: CVE-2024-28827
Published: 2024-07-10
Description: Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and <= 2.0.0p39 (EOL) allows a local attacker to gain SYSTEM privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732, CWE-732
References: https://checkmk.com/werk/16845; https://checkmk.com/werk/16845
CVE: CVE-2024-28828
Published: 2024-07-10
Description: Cross-Site request forgery in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and <= 2.0.0p39 (EOL) could lead to 1-click compromize of the site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://checkmk.com/werk/17090; https://checkmk.com/werk/17090
CVE: CVE-2024-40328
Published: 2024-07-10
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/memberOnline_deal.php?mudi=del&dataType=&dataID=6
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/Tank992/cms/blob/main/70/csrf.md; https://github.com/Tank992/cms/blob/main/70/csrf.md
CVE: CVE-2024-40329
Published: 2024-07-10
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=backup
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Tank992/cms/blob/main/67/csrf.md; https://github.com/Tank992/cms/blob/main/67/csrf.md
CVE: CVE-2024-40333
Published: 2024-07-10
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=del&dataID=2
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://github.com/Tank992/cms/blob/main/68/csrf.md; https://github.com/Tank992/cms/blob/main/68/csrf.md
CVE: CVE-2024-40334
Published: 2024-07-10
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/serverFile_deal.php?mudi=upFileDel&dataID=3
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/Tank992/cms/blob/main/69/csrf.md; https://github.com/Tank992/cms/blob/main/69/csrf.md
CVE: CVE-2024-6642
Published: 2024-07-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2024-40331
Published: 2024-07-10
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL_deal.php?mudi=backup
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Tank992/cms/blob/main/66/csrf.md; https://github.com/Tank992/cms/blob/main/66/csrf.md
CVE: CVE-2024-40332
Published: 2024-07-10
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecord
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/Tank992/cms/blob/main/65/csrf.md; https://github.com/Tank992/cms/blob/main/65/csrf.md
CVE: CVE-2024-40336
Published: 2024-07-10
Description: idccms v1.35 is vulnerable to Cross Site Scripting (XSS) within the 'Image Advertising Management.'
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Tank992/cms/blob/main/73/readme.md; https://github.com/Tank992/cms/blob/main/73/readme.md
CVE: CVE-2023-33859
Published: 2024-07-10
Description: IBM Security QRadar EDR 3.12 could disclose sensitive information due to an observable login response discrepancy.  IBM X-Force ID:  257697.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/257697; https://www.ibm.com/support/pages/node/7159770; https://exchange.xforce.ibmcloud.com/vulnerabilities/257697
CVE: CVE-2023-33860
Published: 2024-07-10
Description: IBM Security QRadar EDR 3.12 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-614
References: https://www.ibm.com/support/pages/node/7159770; https://exchange.xforce.ibmcloud.com/vulnerabilities/257702; https://www.ibm.com/support/pages/node/7159770