stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2024-28861 (severity: CRITICAL, weakness: CWE-502)
Symfony 1 is a community-driven fork of the 1.x branch of Symfony, a PHP framework for web projects. Starting in version 1.1.0 and prior to version 1.5.19, Symfony 1 has a gadget chain due to dangerous deserialization in `sfNamespacedParameterHolder` class that would enable an attacker to get remote code execution if a developer deserializes user input in their project. Version 1.5.19 contains a patch for the issue.
CVE-2024-28862 (severity: MEDIUM, weakness: CWE-276)
The Ruby One Time Password library (ROTP) is an open source library for generating and validating one time passwords. Affected versions had overly permissive default permissions. Users should patch to version 6.3.0. Users unable to patch may correct file permissions after installation.
CVE-2024-28863 (severity: MEDIUM, weakness: CWE-400)
node-tar is a Tar for Node.js. node-tar prior to version 6.2.1 has no limit on the number of sub-folders created in the folder creation process. An attacker who generates a large number of sub-folders can consume memory on the system running node-tar and even crash the Node.js client within few seconds of running it using a path with too many sub-folders inside. Version 6.2.1 fixes this issue by preventing extraction in excessively deep sub-folders.
CVE-2024-28864 (severity: LOW, weakness: CWE-1333)
SecureProps is a PHP library designed to simplify the encryption and decryption of property data in objects. A vulnerability in SecureProps version 1.2.0 and 1.2.1 involves a regex failing to detect tags during decryption of encrypted data. This occurs when the encrypted data has been encoded with `NullEncoder` and passed to `TagAwareCipher`, and contains special characters such as `\n`. As a result, the decryption process is skipped since the tags are not detected. This causes the encrypted data to be returned in plain format. The vulnerability affects users who implement `TagAwareCipher` with any base cipher that has `NullEncoder` (not default). The patch for the issue has been released. Users are advised to update to version 1.2.2. As a workaround, one may use the default `Base64Encoder` with the base cipher decorated with `TagAwareCipher` to prevent special characters in the encrypted string from interfering with regex tag detection logic. This workaround is safe but may involve double encoding since `TagAwareCipher` uses `NullEncoder` by default.
CVE-2024-28865 (severity: HIGH, weakness: CWE-1333)
django-wiki is a wiki system for Django. Installations of django-wiki prior to version 0.10.1 are vulnerable to maliciously crafted article content that can cause severe use of server CPU through a regular expression loop. Version 0.10.1 fixes this issue. As a workaround, close off access to create and edit articles by anonymous users.
CVE-2024-28866 (severity: LOW, weakness: CWE-79)
GoCD is a continuous delivery server. GoCD versions from 19.4.0 to 23.5.0 (inclusive) are potentially vulnerable to a reflected cross-site scripting vulnerability on the loading page displayed while GoCD is starting, via abuse of a `redirect_to` query parameter with inadequate validation. Attackers could theoretically abuse the query parameter to steal session tokens or other values from the user's browser. In practice exploiting this to perform privileged actions is likely rather difficult to exploit because the target user would need to be triggered to open an attacker-crafted link in the period where the server is starting up (but not completely started), requiring chaining with a separate denial-of-service vulnerability. Additionally, GoCD server restarts invalidate earlier session tokens (i.e GoCD does not support persistent sessions), so a stolen session token would be unusable once the server has completed restart, and executed XSS would be done within a logged-out context. The issue is fixed in GoCD 24.1.0. As a workaround, it is technically possible in earlier GoCD versions to override the loading page with an earlier version which is not vulnerable, by starting GoCD with the Java system property override as either `-Dloading.page.resource.path=/loading_pages/default.loading.page.html` (simpler early version of loading page without GoCD introduction) or `-Dloading.page.resource.path=/does_not_exist.html` (to display a simple message with no interactivity).
CVE-2024-28867 (severity: MEDIUM, weakness: CWE-74)
Swift Prometheus is a Swift client for the Prometheus monitoring system, supporting counters, gauges and histograms. In code which applies _un-sanitized string values into metric names or labels_, an attacker could make use of this and send a `?lang` query parameter containing newlines, `}` or similar characters which can lead to the attacker taking over the exported format -- including creating unbounded numbers of stored metrics, inflating server memory usage, or causing "bogus" metrics. This vulnerability is fixed in2.0.0-alpha.2.
CVE-2024-28868 (severity: MEDIUM, weakness: CWE-204)
Umbraco is an ASP.NET content management system. Umbraco 10 prior to 10.8.4 with access to the native login screen is vulnerable to a possible user enumeration attack. This issue was fixed in version 10.8.5. As a workaround, one may disable the native login screen by exclusively using external logins.
CVE-2024-28869 (severity: HIGH, weakness: CWE-755)
Traefik is an HTTP reverse proxy and load balancer. In affected versions sending a GET request to any Traefik endpoint with the "Content-length" request header results in an indefinite hang with the default configuration. This vulnerability can be exploited by attackers to induce a denial of service. This vulnerability has been addressed in version 2.11.2 and 3.0.0-rc5. Users are advised to upgrade. For affected versions, this vulnerability can be mitigated by configuring the readTimeout option.
CVE-2024-2887 (severity: HIGH, weakness: CWE-843)
Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2024-28870 (severity: HIGH, weakness: CWE-770)
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community. When parsing an overly long SSH banner, Suricata can use excessive CPU resources, as well as cause excessive logging volume in alert records. This issue has been patched in versions 6.0.17 and 7.0.4.
CVE-2024-28871 (severity: HIGH, weakness: CWE-770)
LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Version 0.5.46 may parse malformed request traffic, leading to excessive CPU usage. Version 0.5.47 contains a patch for the issue. No known workarounds are available.
CVE-2024-28872 (severity: HIGH, weakness: CWE-295)
The TLS certificate validation code is flawed. An attacker can obtain a TLS certificate from the Stork server and use it to connect to the Stork agent. Once this connection is established with the valid certificate, the attacker can send malicious commands to a monitored service (Kea or BIND 9), possibly resulting in confidential data loss and/or denial of service. It should be noted that this vulnerability is not related to BIND 9 or Kea directly, and only customers using the Stork management tool are potentially affected. This issue affects Stork versions 0.15.0 through 1.15.0.
CVE-2024-28875 (severity: HIGH, weakness: CWE-798)
A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain unauthorized access during the first 30 seconds post-boot. Other vulnerabilities can force a reboot, circumventing the initial time restriction for exploitation.The backdoor string can be found at address 0x80100910 80100910 40 6d 21 74 ds "@m!t2K1" 32 4b 31 00 It is referenced by the function located at 0x800b78b0 and is used as shown in the pseudocode below: if ((SECOND_FROM_BOOT_TIME < 300) && (is_equal = strcmp(password,"@m!t2K1")) { return 1;} Where 1 is the return value to admin-level access (0 being fail and 3 being user).
CVE-2024-28876 (severity: MEDIUM, weakness: CWE-427)
Uncontrolled search path for some Intel(R) MPI Library software before version 2021.12 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-28877 (severity: HIGH, weakness: CWE-121)
MicroDicom DICOM Viewer is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. User interaction is required to exploit this vulnerability.
CVE-2024-28878 (severity: CRITICAL, weakness: CWE-494)
IO-1020 Micro ELD downloads source code or an executable from an adjacent location and executes the code without sufficiently verifying the origin or integrity of the code.
CVE-2024-2888 (severity: MEDIUM, weakness: CWE-79)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor allows Stored XSS.This issue affects Post and Page Builder by BoldGrid – Visual Drag and Drop Editor: from n/a through 1.26.2.
CVE-2024-28880 (severity: MEDIUM, weakness: CWE-22)
Path traversal vulnerability in MosP kintai kanri V4.6.6 and earlier allows a remote attacker who can log in to the product to obtain sensitive information of the product.
CVE-2024-28881 (severity: MEDIUM, weakness: CWE-427)
Uncontrolled search path for some Intel(R) Fortran Compiler Classic software before version 2021.13 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-28882 (severity: MEDIUM, weakness: CWE-772)
OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session
CVE-2024-28883 (severity: HIGH, weakness: CWE-346)
An origin validation vulnerability exists in BIG-IP APM browser network access VPN client for Windows, macOS and Linux which may allow an attacker to bypass F5 endpoint inspection. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2024-28885 (severity: HIGH, weakness: CWE-203)
Observable discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access.
CVE-2024-28886 (severity: HIGH, weakness: CWE-94)
OS command injection vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product opens a crafted UTAU project file (.ust file), an arbitrary OS command may be executed.
CVE-2024-28887 (severity: MEDIUM, weakness: CWE-427)
Uncontrolled search path in some Intel(R) IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-28888 (severity: HIGH, weakness: CWE-416)
A use-after-free vulnerability exists in the way Foxit Reade 2024.1.0.23997 handles a checkbox field object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.
CVE-2024-28889 (severity: MEDIUM, weakness: CWE-825)
When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2024-2889 (severity: MEDIUM, weakness: CWE-79)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Lab WP-Lister Lite for Amazon allows Stored XSS.This issue affects WP-Lister Lite for Amazon: from n/a through 2.6.11.
CVE-2024-28890 (severity: MEDIUM, weakness: CWE-434)
Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability. If this vulnerability is exploited, a remote attacker may obtain sensitive information by accessing files on the server, alter the site that uses the plugin, and cause a denial-of-service (DoS) condition.
CVE-2024-28891 (severity: HIGH, weakness: CWE-89)
SQL injection vulnerability exists in the script Handler_CFG.ashx.
CVE-2024-28892 (severity: CRITICAL, weakness: CWE-78)
An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
CVE-2024-28893 (severity: HIGH, weakness: CWE-94)
Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been modified after extraction. HP has released updated software packages (SoftPaqs).
CVE-2024-28894 (severity: MEDIUM, weakness: CWE-125)
Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 headers exists in Cente middleware TCP/IP Network Series, which may allow an unauthenticated attacker to stop the device operations by sending a specially crafted packet.
CVE-2024-28895 (severity: MEDIUM, weakness: CWE-79)
'Yahoo! JAPAN' App for Android v2.3.1 to v3.161.1 and 'Yahoo! JAPAN' App for iOS v3.2.2 to v4.109.0 contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the WebView of 'Yahoo! JAPAN' App via other app installed on the user's device.
CVE-2024-28896 (severity: HIGH, weakness: CWE-122)
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-28897 (severity: MEDIUM, weakness: CWE-20)
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-28898 (severity: MEDIUM, weakness: CWE-121)
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-28899 (severity: HIGH, weakness: CWE-121)
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-2890 (severity: CRITICAL, weakness: CWE-434)
Unrestricted Upload of File with Dangerous Type vulnerability in Tumult Inc. Tumult Hype Animations.This issue affects Tumult Hype Animations: from n/a through 1.9.12.
CVE-2024-28900 (severity: MEDIUM, weakness: CWE-126)
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-28901 (severity: MEDIUM, weakness: CWE-126)
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-28902 (severity: MEDIUM, weakness: CWE-126)
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-28903 (severity: MEDIUM, weakness: CWE-693)
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-28904 (severity: HIGH, weakness: CWE-269)
Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2024-28905 (severity: HIGH, weakness: CWE-269)
Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2024-28906 (severity: HIGH, weakness: CWE-122)
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28907 (severity: HIGH, weakness: CWE-59)
Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2024-28908 (severity: HIGH, weakness: CWE-122)
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28909 (severity: HIGH, weakness: CWE-122)
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-2891 (severity: HIGH, weakness: CWE-121)
A vulnerability, which was classified as critical, was found in Tenda AC7 15.03.06.44. Affected is the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-257934 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2024-28910 (severity: HIGH, weakness: CWE-122)
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28911 (severity: HIGH, weakness: CWE-122)
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28912 (severity: HIGH, weakness: CWE-122)
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28913 (severity: HIGH, weakness: CWE-122)
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28914 (severity: HIGH, weakness: CWE-122)
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28915 (severity: HIGH, weakness: CWE-122)
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28916 (severity: HIGH, weakness: CWE-59)
Xbox Gaming Services Elevation of Privilege Vulnerability
CVE-2024-28917 (severity: MEDIUM, weakness: CWE-284)
Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability
CVE-2024-28919 (severity: MEDIUM, weakness: CWE-693)
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-2892 (severity: HIGH, weakness: CWE-121)
A vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257935. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2024-28920 (severity: HIGH, weakness: CWE-693)
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-28921 (severity: MEDIUM, weakness: CWE-693)
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-28922 (severity: MEDIUM, weakness: CWE-284)
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-28923 (severity: MEDIUM, weakness: CWE-190)
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-28924 (severity: MEDIUM, weakness: CWE-121)
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-28925 (severity: HIGH, weakness: CWE-121)
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-28926 (severity: HIGH, weakness: CWE-122)
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28927 (severity: HIGH, weakness: CWE-122)
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28928 (severity: HIGH, weakness: CWE-121)
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
CVE-2024-28929 (severity: HIGH, weakness: CWE-190)
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-2893 (severity: HIGH, weakness: CWE-121)
A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical. Affected by this issue is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257936. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2024-28930 (severity: HIGH, weakness: CWE-191)
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28931 (severity: HIGH, weakness: CWE-190)
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28932 (severity: HIGH, weakness: CWE-122)
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28933 (severity: HIGH, weakness: CWE-191)
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28934 (severity: HIGH, weakness: CWE-121)
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28935 (severity: HIGH, weakness: CWE-122)
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28936 (severity: HIGH, weakness: CWE-190)
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28937 (severity: HIGH, weakness: CWE-122)
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28938 (severity: HIGH, weakness: CWE-125)
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28939 (severity: HIGH, weakness: CWE-209)
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-2894 (severity: HIGH, weakness: CWE-121)
A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. This affects the function formSetQosBand of the file /goform/SetNetControlList. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257937 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2024-28940 (severity: HIGH, weakness: CWE-122)
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28941 (severity: HIGH, weakness: CWE-122)
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28942 (severity: HIGH, weakness: CWE-190)
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28943 (severity: HIGH, weakness: CWE-122)
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28944 (severity: HIGH, weakness: CWE-197)
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28945 (severity: HIGH, weakness: CWE-191)
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28947 (severity: HIGH, weakness: CWE-20)
Improper input validation in kernel mode driver for some Intel(R) Server Board S2600ST Family firmware before version 02.01.0017 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2024-28948 (severity: HIGH, weakness: CWE-352)
Advantech ADAM-5630 contains a cross-site request forgery (CSRF) vulnerability. It allows an attacker to partly circumvent the same origin policy, which is designed to prevent different websites from interfering with each other.
CVE-2024-28949 (severity: MEDIUM, weakness: CWE-400)
Mattermost Server versions 9.5.x before 9.5.2, 9.4.x before 9.4.4, 9.3.x before 9.3.3, 8.1.x before 8.1.11 don't limit the number of user preferences which allows an attacker to send a large number of user preferences potentially causing denial of service.
CVE-2024-2895 (severity: HIGH, weakness: CWE-121)
A vulnerability was found in Tenda AC7 15.03.06.44. It has been declared as critical. This vulnerability affects the function formWifiWpsOOB of the file /goform/WifiWpsOOB. The manipulation of the argument index leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-257938 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2024-28950 (severity: MEDIUM, weakness: CWE-427)
Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software for Windows before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-28951 (severity: HIGH, weakness: CWE-416)
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free.
CVE-2024-28952 (severity: MEDIUM, weakness: CWE-427)
Uncontrolled search path for some Intel(R) IPP software for Windows before version 2021.12.0 may allow an authenticated user to potentially enable escalation of privilege via local access.