rainbutterfly/cve_corpus huggingface dataset:
CVE-2024-34006 moodle: unsanitized HTML in site log for config_log_created
The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.
Problem types: cwe_id: CWE-838
description: CWE-838 Inappropriate Encoding for Output Context
Affected products: default_status: unknown
Credits: lang: en
value: Leon Stringer
Published: 2024-05-31T20:36:08.390Z
CVE-2024-34007 moodle: logout CSRF in admin/tool/mfa/auth.php
The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: default_status: unknown
Credits: lang: en
value: Petr Skoda
Published: 2024-05-31T20:40:23.608Z
CVE-2024-34008 moodle: CSRF risk in analytics management of models
Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk.
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: default_status: unknown
Credits: lang: en
value: Paul Holden
Published: 2024-05-31T20:44:28.973Z
CVE-2024-34009 moodle: ReCAPTCHA can be bypassed on the login page
Insufficient checks whether ReCAPTCHA was enabled made it possible to bypass the checks on the login page. This did not affect other pages where ReCAPTCHA is utilized.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: default_status: unknown
Credits: lang: en
value: caglaroflazoglu
Published: 2024-05-31T20:49:05.538Z
CVE-2024-34010 
Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758, Acronis Cyber Protect 16 (Windows) before build 38690, Acronis True Image (Windows) before build 42386, Acronis True Image OEM (Windows) before build 42575.
Problem types: cwe_id: CWE-428
description: CWE-428
Affected products: vendor: Acronis
product: Acronis Cyber Protect Cloud Agent
default_status: unaffected
vendor: Acronis
product: Acronis Cyber Protect 16
default_status: unaffected
vendor: Acronis
product: Acronis True Image
default_status: unaffected
vendor: Acronis
product: Acronis True Image OEM
default_status: unaffected
Credits: lang: en
value: @cyberexplorer (https://hackerone.com/cyberexplorer)
Published: 2024-04-29T15:48:14.398Z
CVE-2024-34011 
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758.
Problem types: cwe_id: CWE-276
description: CWE-276
Affected products: vendor: Acronis
product: Acronis Cyber Protect Cloud Agent
default_status: unaffected
Published: 2024-04-29T15:48:24.248Z
CVE-2024-34012 
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.24135.272.
Problem types: cwe_id: CWE-276
description: CWE-276
Affected products: vendor: Acronis
product: Acronis Cloud Manager
default_status: unaffected
Credits: lang: en
value: @tkoyeung (https://hackerone.com/tkoyeung)
Published: 2024-06-14T09:43:12.271Z
CVE-2024-34013 
Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image (macOS) before build 41396, Acronis True Image OEM (macOS) before build 42571.
Problem types: cwe_id: CWE-78
description: CWE-78
Affected products: vendor: Acronis
product: Acronis True Image
default_status: unaffected
vendor: Acronis
product: Acronis True Image OEM
default_status: unaffected
Credits: lang: en
value: @redwise (https://hackerone.com/redwise)
Published: 2024-07-18T13:36:39.924Z
CVE-2024-34014 
Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.6.599, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.2.181.
Problem types: cwe_id: CWE-61
description: CWE-61
Affected products: vendor: Acronis
product: Acronis Backup plugin for cPanel & WHM
default_status: unaffected
vendor: Acronis
product: Acronis Backup plugin for cPanel & WHM
default_status: unaffected
vendor: Acronis
product: Acronis Backup extension for Plesk
default_status: unaffected
vendor: Acronis
product: Acronis Backup plugin for DirectAdmin
default_status: unaffected
Credits: lang: en
value: Milos Colakovic (mailto:mcolakovic@godaddy.com)
lang: en
value: Nikola Nikolic (mailto:nnikolic@godaddy.com)
Published: 2024-11-11T13:20:33.777Z
CVE-2024-34015 
Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892.
Problem types: cwe_id: CWE-61
description: CWE-61
Affected products: vendor: Acronis
product: Acronis Backup plugin for cPanel & WHM
default_status: unaffected
vendor: Acronis
product: Acronis Backup plugin for cPanel & WHM
default_status: unaffected
Credits: lang: en
value: Milos Colakovic (mailto:mcolakovic@godaddy.com)
lang: en
value: Nikola Nikolic (mailto:nnikolic@godaddy.com)
Published: 2024-11-11T13:21:00.396Z
CVE-2024-34016 
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 38235.
Problem types: cwe_id: CWE-427
description: CWE-427
Affected products: vendor: Acronis
product: Acronis Cyber Protect Cloud Agent
default_status: unaffected
Credits: lang: en
value: @satz4797 (https://hackerone.com/satz4797)
Published: 2024-09-16T19:44:40.674Z
CVE-2024-34017 
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 4569.
Problem types: cwe_id: CWE-427
description: CWE-427
Affected products: vendor: Acronis
product: Acronis Snap Deploy
default_status: unaffected
Published: 2024-08-29T19:14:19.067Z
CVE-2024-34018 
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) before build 4569.
Problem types: cwe_id: CWE-276
description: CWE-276
Affected products: vendor: Acronis
product: Acronis Snap Deploy
default_status: unaffected
Credits: lang: en
value: @mmg (https://hackerone.com/mmg)
Published: 2024-08-29T19:15:08.649Z
CVE-2024-34019 
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 4569.
Problem types: cwe_id: CWE-427
description: CWE-427
Affected products: vendor: Acronis
product: Acronis Snap Deploy
default_status: unaffected
Credits: lang: en
value: @mmg (https://hackerone.com/mmg)
Published: 2024-08-29T19:12:46.700Z
CVE-2024-34020 
A stack-based buffer overflow was found in the putSDN() function of mail.c in hcode through 2.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-29T00:00:00.000Z
CVE-2024-34021 
Unrestricted upload of file with dangerous type vulnerability exists in ELECOM wireless LAN routers. A specially crafted file may be uploaded to the affected product by a logged-in user with an administrative privilege, resulting in an arbitrary OS command execution.
Problem types: cwe_id: CWE-434
description: Unrestricted upload of file with dangerous type
Affected products: vendor: ELECOM CO.,LTD.
product: WRC-1167GST2
vendor: ELECOM CO.,LTD.
product: WRC-2533GS2V-B
vendor: ELECOM CO.,LTD.
product: WRC-2533GS2-B
vendor: ELECOM CO.,LTD.
product: WRC-2533GS2-W
vendor: ELECOM CO.,LTD.
product: WRC-2533GST2
vendor: ELECOM CO.,LTD.
product: WRC-1167GS2-B
vendor: ELECOM CO.,LTD.
product: WRC-1167GS2H-B
vendor: ELECOM CO.,LTD.
product: WRC-X3200GST3-B
vendor: ELECOM CO.,LTD.
product: WRC-G01-W
vendor: ELECOM CO.,LTD.
product: WMC-2LX-B
vendor: ELECOM CO.,LTD.
product: WMC-X1800GST-B
Published: 2024-08-01T01:15:56.174Z
CVE-2024-34022 
Improper Access Control in some Thunderbolt(TM) Share software before version 1.0.49.9 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: escalation of privilege
cwe_id: CWE-284
description: Improper Access Control
Affected products: vendor: n/a
product: Thunderbolt(TM) Share software
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 6.7
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
Published: 2024-11-13T21:12:02.246Z
CVE-2024-34023 
Untrusted pointer dereference in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: escalation of privilege
cwe_id: CWE-822
description: Untrusted pointer dereference
Affected products: vendor: n/a
product: Intel(R) Graphics Drivers
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 8.4
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: HIGH
availabilityImpact: HIGH
Published: 2024-11-13T21:06:01.955Z
CVE-2024-34024 
Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not.
Problem types: description: Observable response discrepancy
Affected products: vendor: Fsas Technologies Inc.
product: FUJITSU Business Application ID Link Manager II
vendor: Fsas Technologies Inc.
product: FUJITSU Software ID Link Manager
vendor: Fsas Technologies Inc.
product: FUJITSU Software TIME CREATOR ID Link Manager
vendor: Fsas Technologies Inc.
product: FUJITSU Software TIME CREATOR ID Link Manager
vendor: Fsas Technologies Inc.
product: FUJITSU Software TIME CREATOR ID Link Manager SaaS
Published: 2024-06-18T05:44:59.077Z
CVE-2024-34025 CyberPower PowerPanel business Use of Hard-coded Password
CyberPower PowerPanel business application code contains a hard-coded set of authentication 
credentials. This could result in an attacker bypassing authentication 
and gaining administrator privileges.
Problem types: cwe_id: CWE-259
description: CWE-259
Affected products: vendor: CyberPower
product: PowerPanel business
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Amir Preminger and Noam Moshe of Claroty Team82 Research reported these vulnerabilities to CISA.
Published: 2024-05-15T19:17:37.188Z
CVE-2024-34026 
A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted EtherNet/IP request can lead to remote code execution. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: OpenPLC
product: OpenPLC_v3
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 9
baseSeverity: CRITICAL
Credits: lang: en
value: Discovered by Jared Rittle of Cisco Talos.
Published: 2024-09-18T14:35:55.073Z
CVE-2024-34027 f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
In the Linux kernel, the following vulnerability has been resolved:

f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock

It needs to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
to avoid racing with checkpoint, otherwise, filesystem metadata including
blkaddr in dnode, inode fields and .total_valid_block_count may be
corrupted after SPO case.
Affected products: vendor: Linux
product: Linux
default_status: unaffected
vendor: Linux
product: Linux
default_status: affected
Published: 2024-06-24T13:56:49.389Z
CVE-2024-34028 
Uncontrolled search path in some Intel(R) Graphics Offline Compiler for OpenCL(TM) Code software for Windows before version 2024.1.0.142, graphics driver 31.0.101.5445 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: escalation of privilege
cwe_id: CWE-427
description: Uncontrolled search path
Affected products: vendor: n/a
product: Intel(R) Graphics Offline Compiler for OpenCL(TM) Code software for Windows
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 6.7
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
Published: 2024-11-13T21:09:03.608Z
CVE-2024-34029 AD/LDAP Group Members Leak
Mattermost versions 9.5.x <= 9.5.3, 9.7.x <= 9.7.1 and 8.1.x <= 8.1.12 fail to perform a proper authorization check in the /api/v4/groups/<group-id>/channels/<channel-id>/link endpoint which allows a user to learn the members of an AD/LDAP group that is linked to a team by adding the group to a channel, even if the user has no access to the team.
Problem types: cwe_id: CWE-200
description: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: Mattermost
product: Mattermost
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: vultza (vultza)
Published: 2024-05-26T13:27:27.082Z
CVE-2024-34030 PCI: of_property: Return error for int_map allocation failure
In the Linux kernel, the following vulnerability has been resolved:

PCI: of_property: Return error for int_map allocation failure

Return -ENOMEM from of_pci_prop_intr_map() if kcalloc() fails to prevent a
NULL pointer dereference in this case.

[bhelgaas: commit log]
Affected products: vendor: Linux
product: Linux
default_status: unaffected
vendor: Linux
product: Linux
default_status: affected
Published: 2024-06-24T13:56:50.042Z
CVE-2024-34031  SQL Injection vulnerability in Delta Electronics DIAEnergie 

Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the script Handler_CFG.ashx. An authenticated attacker can exploit this issue to potentially compromise the system on which DIAEnergie is deployed.


Problem types: cwe_id: CWE-89
description:  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CWE-89
Affected products: vendor: Delta Electronics
product: DIAEnergie 
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Michael Heinzl reported these vulnerabilities to CISA.
Published: 2024-05-03T00:18:13.497Z
CVE-2024-34032 SQL Injection in Delta Electronics DIAEnergie 

Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the GetDIACloudList endpoint. An authenticated attacker can exploit this issue to potentially compromise the system on which DIAEnergie is deployed.


Problem types: cwe_id: CWE-89
description:  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CWE-89
Affected products: vendor: Delta Electronics
product: DIAEnergie 
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Michael Heinzl reported these vulnerabilities to CISA.
Published: 2024-05-03T00:16:40.017Z
CVE-2024-34033 Path Traversal vulnerability in Delta Electronics DIAEnergie 

Delta Electronics DIAEnergie has insufficient input validation which makes it possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file will be overwritten.


Problem types: cwe_id: CWE-22
description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Delta Electronics
product: DIAEnergie 
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Michael Heinzl reported these vulnerabilities to CISA.
Published: 2024-05-03T00:20:03.319Z
CVE-2024-34034 
An issue was discovered in FlexRIC 2.0.0. It crashes during a Subscription Request denial-of-service (DoS) attack, triggered by an assertion error. An attacker must send a high number of E42 Subscription Requests to the Near-RT RIC component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-02-25T00:00:00.000Z
CVE-2024-34035 
An issue was discovered in O-RAN Near Realtime RIC H-Release. To trigger the crashing of the e2mgr, an adversary must flood the system with a significant quantity of E2 Subscription Requests originating from an xApp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-02-25T00:00:00.000Z
CVE-2024-34036 
An issue was discovered in O-RAN Near Realtime RIC I-Release. To exploit this vulnerability, an attacker can disrupt the initial connection between a gNB and the Near RT-RIC by inundating the system with a high volume of subscription requests via an xApp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-02-25T00:00:00.000Z
CVE-2024-34043 
O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-29T00:00:00.000Z
CVE-2024-34044 
The O-RAN E2T I-Release buildPrometheusList function can have a NULL pointer dereference because peerInfo can be NULL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-29T00:00:00.000Z
CVE-2024-34045 
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo->counters[IN_INITI][MSG_COUNTER][ProcedureCode_id_E2setup]->Increment().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-29T00:00:00.000Z
CVE-2024-34046 
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo->sctpParams->e2tCounters[IN_SUCC][MSG_COUNTER][ProcedureCode_id_RICsubscription]->Increment().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-29T00:00:00.000Z
CVE-2024-34047 
O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-29T00:00:00.000Z
CVE-2024-34048 
O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-29T00:00:00.000Z
CVE-2024-34049 
Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return plmnIdString[0:3], plmnIdString[3:]" in reader.go.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-29T00:00:00.000Z
CVE-2024-34050 
Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return uint64(b[2])<<16 | uint64(b[1])<<8 | uint64(b[0])" in reader.go.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-29T00:00:00.000Z
CVE-2024-34051 
A Reflected Cross-site scripting (XSS) vulnerability located in htdocs/compta/paiement/card.php of Dolibarr before 19.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into the facid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-03T19:09:21.540Z
CVE-2024-34055 
Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-05T00:00:00.000Z
CVE-2024-34057 
Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages. The resulting buffer overflow can cause a crash, resulting in a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-18T00:00:00.000Z
CVE-2024-34058 
The WebTop package for NethServer 7 and 8 allows stored XSS (for example, via the Subject field if an e-mail message).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-05-17T00:00:00.000Z
CVE-2024-34060 Arbitrary File Write in IRIS EVTX Pipeline
IrisEVTXModule is an interface module for Evtx2Splunk and Iris in order to ingest Microsoft EVTX log files. The `iris-evtx-module` is a pipeline plugin of `iris-web` that processes EVTX files through IRIS web application. During the upload of an EVTX through this pipeline, the filename is not safely handled and may cause an Arbitrary File Write. This can lead to a remote code execution (RCE) when combined with a Server Side Template Injection (SSTI). This vulnerability has been patched in version 1.0.0.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: dfir-iris
product: iris-evtx-module
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-05-23T12:01:39.630Z