rainbutterfly/cve_corpus huggingface dataset:
CVE-2024-41979 
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not enforce mandatory authorization on some functionality level at server side. This could allow an authenticated attacker to gain complete access of the application.
Problem types: cwe_id: CWE-863
description: CWE-863: Incorrect Authorization
Affected products: vendor: Siemens
product: SmartClient modules Opcenter QL Home (SC)
default_status: unknown
vendor: Siemens
product: SOA Audit
default_status: unknown
vendor: Siemens
product: SOA Cockpit
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
baseScore: 7.1
baseSeverity: HIGH
Published: 2025-08-12T11:16:34.660Z
CVE-2024-41980 
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application do not encrypt the communication in LDAP interface by default. This could allow an authenticated attacker to gain unauthorized access to sensitive information.
Problem types: cwe_id: CWE-311
description: CWE-311: Missing Encryption of Sensitive Data
Affected products: vendor: Siemens
product: SmartClient modules Opcenter QL Home (SC)
default_status: unknown
vendor: Siemens
product: SOA Audit
default_status: unknown
vendor: Siemens
product: SOA Cockpit
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N
baseScore: 3.1
baseSeverity: LOW
Published: 2025-08-12T11:16:35.999Z
CVE-2024-41981 
A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted BDF files. This could allow an attacker to execute code in the context of the current process.
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: Siemens
product: Simcenter Femap V2306
default_status: unknown
vendor: Siemens
product: Simcenter Femap V2401
default_status: unknown
vendor: Siemens
product: Simcenter Femap V2406
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
baseScore: 7.8
baseSeverity: HIGH
Published: 2024-10-08T08:40:19.414Z
CVE-2024-41982 
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not have adequate encryption of sensitive information. This could allow an authenticated attacker to gain access of sensitive information.
Problem types: cwe_id: CWE-311
description: CWE-311: Missing Encryption of Sensitive Data
Affected products: vendor: Siemens
product: SmartClient modules Opcenter QL Home (SC)
default_status: unknown
vendor: Siemens
product: SOA Audit
default_status: unknown
vendor: Siemens
product: SOA Cockpit
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
baseScore: 4.8
baseSeverity: MEDIUM
Published: 2025-08-12T11:16:37.292Z
CVE-2024-41983 
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application displays SQL statement in the error messages encountered during the generation of reports using Cockpit tool.
Problem types: cwe_id: CWE-209
description: CWE-209: Generation of Error Message Containing Sensitive Information
Affected products: vendor: Siemens
product: SmartClient modules Opcenter QL Home (SC)
default_status: unknown
vendor: Siemens
product: SOA Audit
default_status: unknown
vendor: Siemens
product: SOA Cockpit
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
baseScore: 3.5
baseSeverity: LOW
Published: 2025-08-12T11:16:38.616Z
CVE-2024-41984 
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application improperly handles error while accessing an inaccessible resource leading to exposing the system applications.
Problem types: cwe_id: CWE-209
description: CWE-209: Generation of Error Message Containing Sensitive Information
Affected products: vendor: Siemens
product: SmartClient modules Opcenter QL Home (SC)
default_status: unknown
vendor: Siemens
product: SOA Audit
default_status: unknown
vendor: Siemens
product: SOA Cockpit
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
baseScore: 2.6
baseSeverity: LOW
Published: 2025-08-12T11:16:39.989Z
CVE-2024-41985 
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not expire the session without logout. This could allow an attacker to get unauthorized access if the session is left idle.
Problem types: cwe_id: CWE-613
description: CWE-613: Insufficient Session Expiration
Affected products: vendor: Siemens
product: SmartClient modules Opcenter QL Home (SC)
default_status: unknown
vendor: Siemens
product: SOA Audit
default_status: unknown
vendor: Siemens
product: SOA Cockpit
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
baseScore: 2.6
baseSeverity: LOW
Published: 2025-08-12T11:16:41.301Z
CVE-2024-41986 
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application support insecure TLS 1.0 and 1.1 protocol. An attacker could achieve a man-in-the-middle attack and compromise confidentiality and integrity of data.
Problem types: cwe_id: CWE-327
description: CWE-327: Use of a Broken or Risky Cryptographic Algorithm
Affected products: vendor: Siemens
product: SmartClient modules Opcenter QL Home (SC)
default_status: unknown
vendor: Siemens
product: SOA Audit
default_status: unknown
vendor: Siemens
product: SOA Cockpit
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
baseScore: 6.4
baseSeverity: MEDIUM
Published: 2025-08-12T11:16:42.595Z
CVE-2024-41987 Cross-Site Request Forgery (CSRF) vulnerability in TEM Opera Plus FM Family Transmitter
The TEM Opera Plus FM Family Transmitter application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: TEM
product: Opera Plus FM Family Transmitter
default_status: unaffected
Credits: lang: en
value: CISA discovered a public Proof of Concept (PoC) as authored by Gjoko Krstic and reported it to TEM.
Published: 2024-10-03T17:38:49.500Z
CVE-2024-41988 Missing Authentication for Critical Function vulnerability in TEM Opera Plus FM Family Transmitter
TEM Opera Plus FM Family Transmitter allows access to an unprotected endpoint that allows MPFS File System binary image upload without authentication. This file system serves as the basis for the HTTP2 web server module but is also used by the SNMP module and is available to other applications that require basic read-only storage capabilities. This can be exploited to overwrite the flash program memory that holds the web server's main interfaces and execute arbitrary code.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: TEM
product: Opera Plus FM Family Transmitter
default_status: unaffected
Credits: lang: en
value: CISA discovered a public Proof of Concept (PoC) as authored by Gjoko Krstic and reported it to TEM.
Published: 2024-10-03T17:40:07.153Z
CVE-2024-41989 
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when given a string representation of a number in scientific notation with a large exponent.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-07T00:00:00.000Z
CVE-2024-41990 
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-07T00:00:00.000Z
CVE-2024-41991 
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-07T00:00:00.000Z
CVE-2024-41992 
Wi-Fi Alliance wfa_dut (in Wi-Fi Test Suite) through 9.0.0 allows OS command injection via 802.11x frames because the system() library function is used. For example, on Arcadyan FMIMG51AX000J devices, this leads to wfaTGSendPing remote code execution as root via traffic to TCP port 8000 or 8080 on a LAN interface. On other devices, this may be exploitable over a WAN interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-11T00:00:00.000Z
CVE-2024-41995 
Initialization of a resource with an insecure default vulnerability exists in JavaTM Platform Ver.12.89 and earlier. If this vulnerability is exploited, the product may be affected by some known TLS1.0 and TLS1.1 vulnerabilities. As for the specific products/models/versions of MFPs and printers that contain JavaTM Platform, see the information provided by the vendor.
Problem types: description: Initialization of a Resource with an Insecure Default
Affected products: vendor: Ricoh Company, Ltd.
product: JavaTM Platform
Published: 2024-08-06T06:51:51.329Z
CVE-2024-41996 
Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource consumption. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE and validate the order of the public key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-26T00:00:00.000Z
CVE-2024-41997 
An issue was discovered in version of Warp Terminal prior to 2024.07.18 (v0.2024.07.16.08.02). A command injection vulnerability exists in the Docker integration functionality. An attacker can create a specially crafted hyperlink using the `warp://action/docker/open_subshell` intent that when clicked by the victim results in command execution on the victim's machine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-14T00:00:00.000Z
CVE-2024-41999 
Smart-tab Android app installed April 2023 or earlier contains an active debug code vulnerability. If this vulnerability is exploited, an attacker with physical access to the device may exploit the debug function to gain access to the OS functions, escalate the privilege, change the device's settings, or spoof devices in other rooms.
Problem types: cwe_id: CWE-489
description: Active debug code
Affected products: vendor: TECHNO SUPPORT COMPANY
product: Smart-tab Android app
Published: 2024-09-30T07:50:34.536Z
CVE-2024-42000 Unauthorized Access to view channels' details
Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1, 9.5.x <= 9.5.9 and 10.0.x <= 10.0.0 fail to properly authorize the requests to /api/v4/channels  which allows a User or System Manager, with "Read Groups" permission but with no access for channels to retrieve details about private channels that they were not a member of by sending a request to /api/v4/channels.
Problem types: cwe_id: CWE-863
description: CWE-863: Incorrect Authorization
Affected products: vendor: Mattermost
product: Mattermost
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 2.7
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: othman (3thm4n)
Published: 2024-11-09T17:17:25.038Z
CVE-2024-42001 Vonets WiFi Bridges Forced Browsing
An improper authentication vulnerability affecting Vonets





 

 industrial wifi bridge relays and wifi bridge repeaters, software versions 
3.3.23.6.9 and prior enables an unauthenticated remote attacker to 
bypass authentication via a specially crafted direct request when 
another user has an active session.
Problem types: cwe_id: CWE-425
description: CWE-425 Forced Browsing
Affected products: vendor: Vonets
product: VAR1200-H
default_status: unaffected
vendor: Vonets
product: VAR1200-L
default_status: unaffected
vendor: Vonets
product: VAR600-H
default_status: unaffected
vendor: Vonets
product: VAP11AC
default_status: unaffected
vendor: Vonets
product: VAP11G-500S
default_status: unaffected
vendor: Vonets
product: VBG1200
default_status: unaffected
vendor: Vonets
product: VAP11S-5G
default_status: unaffected
vendor: Vonets
product: VAP11S
default_status: unaffected
vendor: Vonets
product: VAR11N-300
default_status: unaffected
vendor: Vonets
product: VAP11G-300
default_status: unaffected
vendor: Vonets
product: VAP11N-300
default_status: unaffected
vendor: Vonets
product: VAP11G
default_status: unaffected
vendor: Vonets
product: VAP11G-500
default_status: unaffected
vendor: Vonets
product: VBG1200
default_status: unaffected
vendor: Vonets
product: VAP11AC
default_status: unaffected
vendor: Vonets
product: VGA-1000
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.6
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
version: 3.1
Credits: lang: en
value: Wodzen reported these vulnerabilities to CISA.
Published: 2024-08-08T19:39:49.024Z
CVE-2024-42004 
A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
Problem types: cwe_id: CWE-347
description: CWE-347: Improper Verification of Cryptographic Signature
Affected products: vendor: Microsoft
product: Teams (work or school)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
baseScore: 7.1
baseSeverity: HIGH
Credits: lang: en
value: Discovered by Francesco Benvenuto of Cisco Talos.
Published: 2024-12-18T22:40:14.307Z
CVE-2024-42005 
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values() and values_list() methods on models with a JSONField are subject to SQL injection in column aliases via a crafted JSON object key as a passed *arg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-07T00:00:00.000Z
CVE-2024-42006 
Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-20T00:00:00.000Z
CVE-2024-42007 
SPX (aka php-spx) through 0.4.15 allows SPX_UI_URI Directory Traversal to read arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:C/UI:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 5.8
baseSeverity: MEDIUM
Published: 2024-07-26T00:00:00.000Z
CVE-2024-42008 
A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a malicious e-mail attachment served with a dangerous Content-Type header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-05T00:00:00.000Z
CVE-2024-42009 
A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_body() in program/actions/mail/show.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-05T00:00:00.000Z
CVE-2024-42010 
mod_css_styles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 insufficiently filters Cascading Style Sheets (CSS) token sequences in rendered e-mail messages, allowing a remote attacker to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-05T00:00:00.000Z
CVE-2024-42011 
The Spotify app 8.9.58 for iOS has a buffer overflow in its use of strcat.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-28T00:00:00.000Z
CVE-2024-42012 
GRAU DATA Blocky before 3.1 stores passwords encrypted rather than hashed. At the login screen, the user's password is compared to the user's decrypted cleartext password. An attacker with Windows admin or debugging rights can therefore steal the user's Blocky password and from there impersonate that local user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-01-22T00:00:00.000Z
CVE-2024-42013 
In GRAU DATA Blocky before 3.1, Blocky-Gui has a Client-Side Enforcement of Server-Side Security vulnerability. An attacker with Windows administrative or debugging privileges can patch a binary in memory or on disk to bypass the password login requirement and gain full access to all functions of the program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-01-22T00:00:00.000Z
CVE-2024-42017 
An issue was discovered in Atos Eviden iCare 2.7.1 through 2.7.11. The application exposes a web interface locally. In the worst-case scenario, if the application is remotely accessible, it allows an attacker to execute arbitrary commands with system privilege on the endpoint hosting the application, without any authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 10
baseSeverity: CRITICAL
Published: 2024-09-30T00:00:00.000Z
CVE-2024-42018 
An issue was discovered in Atos Eviden SMC xScale before 1.6.6. During initialization of nodes, some configuration parameters are retrieved from management nodes. These parameters embed credentials whose integrity and confidentiality may be important to the security of the HPC configuration. Because these parameters are needed for initialization, there is no available mechanism to ensure access control on the management node, and a mitigation measure is normally put in place to prevent access to unprivileged users. It was discovered that this mitigation measure does not survive a reboot of diskful nodes. (Diskless nodes are not at risk.) The mistake lies in the cloudinit configuration: the iptables configuration should have been in the bootcmd instead of the runcmd section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-11T00:00:00.000Z
CVE-2024-42019 
A vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service service account. This attack requires user interaction and data collected from Veeam Backup & Replication.
Affected products: vendor: Veeam
product: One
default_status: unaffected
Published: 2024-09-07T16:11:22.117Z
CVE-2024-42020 
A Cross-site-scripting (XSS) vulnerability exists in the Reporter Widgets that allows HTML injection.
Affected products: vendor: Veeam
product: One
default_status: unaffected
Published: 2024-09-07T16:11:22.194Z
CVE-2024-42021 
An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials.
Affected products: vendor: Veeam
product: One
default_status: unaffected
Published: 2024-09-07T16:11:22.333Z
CVE-2024-42022 
An incorrect permission assignment vulnerability allows an attacker to modify product configuration files.
Affected products: vendor: Veeam
product: One
default_status: unaffected
Published: 2024-09-07T16:11:22.220Z
CVE-2024-42023 
An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remotely.
Affected products: vendor: Veeam
product: One
default_status: unaffected
Published: 2024-09-07T16:11:22.238Z
CVE-2024-42024 
A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on the machine where the Veeam ONE Agent is installed.
Affected products: vendor: Veeam
product: One
default_status: unaffected
Published: 2024-09-07T16:11:22.220Z
CVE-2024-42025 
A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.3.32 and earlier) allows a malicious actor with unifi user shell access to escalate privileges to root on the host device.
Affected products: vendor: Ubiquiti Inc
product: UniFi Network Application
default_status: unaffected
Published: 2024-09-13T15:47:19.568Z
CVE-2024-42027 
The E2EE password entropy generated by Rocket.Chat Mobile prior to version 4.5.1 is insufficient, allowing attackers to crack it if they have the appropriate time and resources.
Affected products: vendor: Rocket.Chat
product: Mobile
default_status: unaffected
Published: 2024-10-07T12:46:16.115Z
CVE-2024-42028 
A Local privilege escalation vulnerability found in a Self-Hosted UniFi Network Server with UniFi Network Application (Version 8.4.62 and earlier) allows a malicious actor with a local operational system user to execute high privilege actions on UniFi Network Server.
Affected products: vendor: Ubiquiti Inc
product: UniFi Network Application
default_status: unaffected
Published: 2024-10-28T15:54:15.384Z
CVE-2024-42029 
xdg-desktop-portal-hyprland (aka an XDG Desktop Portal backend for Hyprland) before 1.3.3 allows OS command execution, e.g., because single quotes are not used when sending a list of app IDs and titles via the environment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-27T00:00:00.000Z