stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2024-32981 (severity: MEDIUM, weakness: CWE-79)
Silverstripe framework is the PHP framework forming the base for the Silverstripe CMS. In affected versions a bad actor with access to edit content in the CMS could add send a specifically crafted encoded payload to the server, which could be used to inject a JavaScript payload on the front end of the site. The payload would be sanitised on the client-side, but server-side sanitisation doesn't catch it. The server-side sanitisation logic has been updated to sanitise against this type of attack in version 5.2.16. All users are advised to upgrade. There are no known workarounds for this vulnerability.
CVE-2024-32982 (severity: HIGH, weakness: CWE-22)
Litestar and Starlite is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.8.3, 2.7.2, and 2.6.4, a Local File Inclusion (LFI) vulnerability has been discovered in the static file serving component of LiteStar. This vulnerability allows attackers to exploit path traversal flaws, enabling unauthorized access to sensitive files outside the designated directories. Such access can lead to the disclosure of sensitive information or potentially compromise the server. The vulnerability is located in the file path handling mechanism within the static content serving function, specifically at `litestar/static_files/base.py`. This vulnerability is fixed in versions 2.8.3, 2.7.2, and 2.6.4.
CVE-2024-32983 (severity: HIGH, weakness: CWE-863)
Misskey is an open source, decentralized microblogging platform. Misskey doesn't perform proper normalization on the JSON structures of incoming signed ActivityPub activity objects before processing them, allowing threat actors to spoof the contents of signed activities and impersonate the authors of the original activities. This vulnerability is fixed in 2024.5.0.
CVE-2024-32984 (severity: HIGH, weakness: CWE-400)
Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. The Rust implementation of the Yamux stream multiplexer uses a vector for pending frames. This vector is not bounded in length. Every time the Yamux protocol requires sending of a new frame, this frame gets appended to this vector. This can be remotely triggered in a number of ways, for example by: 1. Opening a new libp2p Identify stream. This causes the node to send its Identify message. Of course, every other protocol that causes the sending of data also works. The larger the response, the more data is enqueued. 2. Sending a Yamux Ping frame. This causes a Pong frame to be enqueued. Under normal circumstances, this queue of pending frames would be drained once they’re sent out over the network. However, the attacker can use TCP’s receive window mechanism to prevent the victim from sending out any data: By not reading from the TCP connection, the receive window will never be increased, and the victim won’t be able to send out any new data (this is how TCP implements backpressure). Once this happens, Yamux’s queue of pending frames will start growing indefinitely. The queue will only be drained once the underlying TCP connection is closed. An attacker can cause a remote node to run out of memory, which will result in the corresponding process getting terminated by the operating system.
CVE-2024-32985 (severity: MEDIUM, weakness: CWE-362)
Stellar-core is a reference implementation for the peer-to-peer agent that manages the Stellar network. Prior to 20.4.0, core nodes could be randomly crashed due to a race condition with a 3rd party library. The likelihood of affecting the network is low since crashed nodes come back up online right away. Code fix mitigation is part of Stellar-core v20.4.0 release
CVE-2024-32986 (severity: CRITICAL, weakness: CWE-74)
PWAsForFirefox is a tool to install, manage and use Progressive Web Apps (PWAs) in Mozilla Firefox. Due to improper sanitization of web app properties (such as name, description, shortcuts), web apps were able to inject additional lines into XDG Desktop Entries (on Linux) and `AppInfo.ini` (on PortableApps.com). This allowed malicious web apps to introduce keys like `Exec`, which could run arbitrary code when the affected web app was launched. This vulnerability affects all Linux and PortableApps.com users of all PWAsForFirefox versions up to (excluding) 2.12.0. Windows and macOS users are not affected. This vulnerability has been fixed in commit `9932d4b` which has been included in release in v2.12.0. The main fix is implemented in the native part, but the extension also contains additional fixes. All Linux and PortableApps.com users are advised to update to this version as soon as possible. It is also recommended for Windows and macOS users to update to this version, as it contains additional fixes related to properties sanitization. There are no known workarounds for this vulnerability.
CVE-2024-32987 (severity: HIGH, weakness: CWE-918)
Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2024-32988 (severity: HIGH, weakness: CWE-798)
'OfferBox' App for Android versions 2.0.0 to 2.3.17 and 'OfferBox' App for iOS versions 2.1.7 to 2.6.14 use a hard-coded secret key for JWT. Secret key for JWT may be retrieved if the application binary is reverse-engineered.
CVE-2024-32989 (severity: HIGH, weakness: CWE-20)
Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2024-3299 (severity: HIGH, weakness: CWE-416)
Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted SLDDRW or SLDPRT file. NOTE: this vulnerability was SPLIT from CVE-2024-1847.
CVE-2024-32990 (severity: HIGH, weakness: CWE-20)
Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2024-32991 (severity: CRITICAL, weakness: CWE-16)
Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2024-32992 (severity: HIGH, weakness: CWE-20)
Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2024-32993 (severity: MEDIUM, weakness: CWE-362)
Out-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2024-32995 (severity: MEDIUM, weakness: CWE-248)
Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2024-32996 (severity: MEDIUM, weakness: CWE-264)
Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2024-32997 (severity: MEDIUM, weakness: CWE-362)
Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2024-32998 (severity: MEDIUM, weakness: CWE-824)
NULL pointer access vulnerability in the clock module Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2024-32999 (severity: MEDIUM, weakness: CWE-840)
Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2024-3300 (severity: CRITICAL, weakness: CWE-502)
An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to pre-authentication remote code execution.
CVE-2024-33000 (severity: LOW, weakness: CWE-862)
SAP Bank Account Management does not perform necessary authorization check for an authorized user, resulting in escalation of privileges. As a result, it has a low impact to confidentiality to the system.
CVE-2024-33001 (severity: MEDIUM, weakness: CWE-400)
SAP NetWeaver and ABAP platform allows an attacker to impede performance for legitimate users by crashing or flooding the service. An impact of this Denial of Service vulnerability might be long response delays and service interruptions, thus degrading the service quality experienced by legitimate users causing high impact on availability of the application.
CVE-2024-33002 (severity: MEDIUM, weakness: CWE-79)
Document Service handler (obsolete) in Data Provisioning Service does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability with low impact on Confidentiality and Integrity of the application.
CVE-2024-33003 (severity: CRITICAL, weakness: CWE-200)
Some OCC API endpoints in SAP Commerce Cloud allows Personally Identifiable Information (PII) data, such as passwords, email addresses, mobile numbers, coupon codes, and voucher codes, to be included in the request URL as query or path parameters. On successful exploitation, this could lead to a High impact on confidentiality and integrity of the application.
CVE-2024-33004 (severity: MEDIUM, weakness: CWE-524)
SAP Business Objects Business Intelligence Platform is vulnerable to Insecure Storage as dynamic web pages are getting cached even after logging out. On successful exploitation, the attacker can see the sensitive information through cache and can open the pages causing limited impact on Confidentiality, Integrity and Availability of the application.
CVE-2024-33005 (severity: MEDIUM, weakness: CWE-862)
Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server (ABAP and Java), and SAP Content Server can impersonate other users and may perform some unintended actions. This could lead to a low impact on confidentiality and a high impact on the integrity and availability of the applications.
CVE-2024-33006 (severity: CRITICAL, weakness: CWE-434)
An unauthenticated attacker can upload a malicious file to the server which when accessed by a victim can allow an attacker to completely compromise system.
CVE-2024-33007 (severity: LOW, weakness: CWE-79)
PDFViewer is a control delivered as part of SAPUI5 product which shows the PDF content in an embedded mode by default. If a PDF document contains embedded JavaScript (or any harmful client-side script), the PDFViewer will execute the JavaScript embedded in the PDF which can cause a potential security threat.
CVE-2024-33008 (severity: MEDIUM, weakness: CWE-787)
SAP Replication Server allows an attacker to use gateway for executing some commands to RSSD. This could result in crashing the Replication Server due to memory corruption with high impact on Availability of the system.
CVE-2024-33009 (severity: MEDIUM, weakness: CWE-89)
SAP Global Label Management is vulnerable to SQL injection. On exploitation the attacker can use specially crafted inputs to modify database commands resulting in the retrieval of additional information persisted by the system. This could lead to low impact on Confidentiality and Integrity of the application.
CVE-2024-3301 (severity: HIGH, weakness: CWE-502)
An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to post-authentication remote code execution.
CVE-2024-33010 (severity: HIGH, weakness: CWE-416)
Transient DOS while parsing fragments of MBSSID IE from beacon frame.
CVE-2024-33011 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.
CVE-2024-33012 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.
CVE-2024-33013 (severity: HIGH, weakness: CWE-126)
Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.
CVE-2024-33014 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing ESP IE from beacon/probe response frame.
CVE-2024-33015 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report.
CVE-2024-33016 (severity: MEDIUM, weakness: CWE-119)
memory corruption when an invalid firehose patch command is invoked.
CVE-2024-33018 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame.
CVE-2024-33019 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing the received TID-to-link mapping action frame.
CVE-2024-3302 (severity: LOW, weakness: CWE-770)
There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to create an Out of Memory condition in the browser. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.
CVE-2024-33020 (severity: HIGH, weakness: CWE-126)
Transient DOS while processing TID-to-link mapping IE elements.
CVE-2024-33021 (severity: HIGH, weakness: CWE-457)
Memory corruption while processing IOCTL call to set metainfo.
CVE-2024-33022 (severity: HIGH, weakness: CWE-190)
Memory corruption while allocating memory in HGSL driver.
CVE-2024-33023 (severity: HIGH, weakness: CWE-416)
Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.
CVE-2024-33024 (severity: HIGH, weakness: CWE-190)
Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length.
CVE-2024-33025 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
CVE-2024-33026 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.
CVE-2024-33027 (severity: HIGH, weakness: CWE-284)
Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.
CVE-2024-33028 (severity: HIGH, weakness: CWE-416)
Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.
CVE-2024-33029 (severity: MEDIUM, weakness: CWE-416)
Memory corruption while handling the PDR in driver for getting the remote heap maps.
CVE-2024-3303 (severity: MEDIUM, weakness: NVD-CWE-Other)
An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior to 17.8.2, which allows an attacker to exfiltrate contents of a private issue using prompt injection.
CVE-2024-33030 (severity: MEDIUM, weakness: CWE-120)
Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.
CVE-2024-33031 (severity: MEDIUM, weakness: CWE-20)
Memory corruption while processing the update SIM PB records request.
CVE-2024-33032 (severity: MEDIUM, weakness: CWE-129)
Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.
CVE-2024-33033 (severity: HIGH, weakness: CWE-416)
Memory corruption while processing IOCTL calls to unmap the buffers.
CVE-2024-33034 (severity: HIGH, weakness: CWE-416)
Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.
CVE-2024-33035 (severity: HIGH, weakness: CWE-190)
Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.
CVE-2024-33036 (severity: MEDIUM, weakness: CWE-823)
Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.
CVE-2024-33037 (severity: MEDIUM, weakness: CWE-126)
Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.
CVE-2024-33038 (severity: HIGH, weakness: CWE-822)
Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.
CVE-2024-33039 (severity: MEDIUM, weakness: CWE-822)
Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.
CVE-2024-33040 (severity: HIGH, weakness: CWE-416)
Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access.
CVE-2024-33041 (severity: HIGH, weakness: CWE-823)
Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,
CVE-2024-33042 (severity: HIGH, weakness: CWE-120)
Memory corruption when Alternative Frequency offset value is set to 255.
CVE-2024-33043 (severity: MEDIUM, weakness: CWE-126)
Transient DOS while handling PS event when Program Service name length offset value is set to 255.
CVE-2024-33044 (severity: HIGH, weakness: CWE-129)
Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
CVE-2024-33045 (severity: HIGH, weakness: CWE-562)
Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
CVE-2024-33047 (severity: HIGH, weakness: CWE-126)
Memory corruption when the captureRead QDCM command is invoked from user-space.
CVE-2024-33048 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.
CVE-2024-33049 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.
CVE-2024-3305 (severity: HIGH, weakness: CWE-200)
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Utarit Information SoliClub allows Retrieve Embedded Sensitive Data.This issue affects SoliClub: before 4.4.0 for iOS, before 5.2.1 for Android.
CVE-2024-33050 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
CVE-2024-33051 (severity: HIGH, weakness: CWE-126)
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
CVE-2024-33052 (severity: HIGH, weakness: CWE-120)
Memory corruption when user provides data for FM HCI command control operations.
CVE-2024-33053 (severity: MEDIUM, weakness: CWE-416)
Memory corruption when multiple threads try to unregister the CVP buffer at the same time.
CVE-2024-33054 (severity: HIGH, weakness: CWE-120)
Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.
CVE-2024-33055 (severity: HIGH, weakness: CWE-416)
Memory corruption while invoking IOCTL calls to unmap the DMA buffers.
CVE-2024-33056 (severity: HIGH, weakness: CWE-126)
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
CVE-2024-33057 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.
CVE-2024-33058 (severity: HIGH, weakness: CWE-1220)
Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.
CVE-2024-33059 (severity: HIGH, weakness: CWE-416)
Memory corruption while processing frame command IOCTL calls.
CVE-2024-3306 (severity: HIGH, weakness: CWE-639)
Authorization Bypass Through User-Controlled Key vulnerability in Utarit Information SoliClub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SoliClub: before 4.4.0 for iOS, before 5.2.1 for Android.
CVE-2024-33060 (severity: HIGH, weakness: CWE-416)
Memory corruption when two threads try to map and unmap a single node simultaneously.
CVE-2024-33061 (severity: MEDIUM, weakness: CWE-126)
Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process.
CVE-2024-33063 (severity: HIGH, weakness: CWE-190)
Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present.
CVE-2024-33064 (severity: HIGH, weakness: CWE-126)
Information disclosure while parsing the multiple MBSSID IEs from the beacon.
CVE-2024-33065 (severity: HIGH, weakness: CWE-20)
Memory corruption while taking snapshot when an offset variable is set by camera driver.
CVE-2024-33066 (severity: CRITICAL, weakness: CWE-20)
Memory corruption while redirecting log file to any file location with any file name.
CVE-2024-33067 (severity: MEDIUM, weakness: CWE-126)
Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.
CVE-2024-33068 (severity: MEDIUM, weakness: CWE-416)
Transient DOS while parsing fragments of MBSSID IE from beacon frame.
CVE-2024-33069 (severity: HIGH, weakness: CWE-416)
Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host.
CVE-2024-3307 (severity: MEDIUM, weakness: CWE-79)
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown widget's attributes in all versions up to, and including, 2.4.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-33070 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing ESP IE from beacon/probe response frame.
CVE-2024-33071 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0.
CVE-2024-33073 (severity: HIGH, weakness: CWE-126)
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
CVE-2024-33078 (severity: CRITICAL, weakness: CWE-680)
Tencent Libpag v4.3 is vulnerable to Buffer Overflow. A user can send a crafted image to trigger a overflow leading to remote code execution.
CVE-2024-3308 (severity: MEDIUM, weakness: CWE-79)
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid widget's attributes in all versions up to, and including, 2.4.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-3309 (severity: MEDIUM, weakness: CWE-79)
The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Widget's attributes in all versions up to, and including, 1.7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-33101 (severity: MEDIUM, weakness: CWE-79)
A stored cross-site scripting (XSS) vulnerability in the component /action/anti.php of ThinkSAAS v3.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the word parameter.
CVE-2024-33102 (severity: MEDIUM, weakness: CWE-79)
A stored cross-site scripting (XSS) vulnerability in the component /pubs/counter.php of ThinkSAAS v3.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the code parameter.