stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2024-4553 (severity: MEDIUM, weakness: CWE-79)
The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'su_members' shortcode in all versions up to, and including, 7.1.5 due to insufficient input sanitization and output escaping on user supplied 'color' attribute. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-45537 (severity: MEDIUM, weakness: CWE-20)
Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionality allows trusted users to set up Druid lookups or run ingestion tasks. Druid also allows administrators to configure a list of allowed properties that users are able to provide for their JDBC connections. By default, this allowed properties list restricts users to TLS-related properties only. However, when configuration a MySQL JDBC connection, users can use a particularly-crafted JDBC connection string to provide properties that are not on this allow list. Users without the permission to configure JDBC connections are not able to exploit this vulnerability. CVE-2021-26919 describes a similar vulnerability which was partially addressed in Apache Druid 0.20.2. This issue is fixed in Apache Druid 30.0.1.
CVE-2024-4554 (severity: MEDIUM, weakness: CWE-79)
Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. This issue affects NetIQ Access Manager before 5.0.4.1 and 5.1.
CVE-2024-45540 (severity: MEDIUM, weakness: CWE-416)
Memory corruption while invoking IOCTL map buffer request from userspace.
CVE-2024-45541 (severity: HIGH, weakness: CWE-120)
Memory corruption when IOCTL call is invoked from user-space to read board data.
CVE-2024-45542 (severity: HIGH, weakness: CWE-121)
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
CVE-2024-45543 (severity: MEDIUM, weakness: CWE-787)
Memory corruption while accessing MSM channel map and mixer functions.
CVE-2024-45544 (severity: MEDIUM, weakness: CWE-416)
Memory corruption while processing IOCTL calls to add route entry in the HW.
CVE-2024-45546 (severity: HIGH, weakness: CWE-126)
Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space.
CVE-2024-45547 (severity: HIGH, weakness: CWE-120)
Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality.
CVE-2024-45548 (severity: HIGH, weakness: CWE-126)
Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call.
CVE-2024-45549 (severity: HIGH, weakness: CWE-497)
Information disclosure while creating MQ channels.
CVE-2024-4555 (severity: HIGH, weakness: CWE-269)
Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affects NetIQ Access Manager before 5.0.4.1 and before 5.1
CVE-2024-45550 (severity: HIGH, weakness: CWE-129)
Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls.
CVE-2024-45551 (severity: MEDIUM, weakness: CWE-1390)
Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.
CVE-2024-45552 (severity: HIGH, weakness: CWE-126)
Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.
CVE-2024-45553 (severity: HIGH, weakness: CWE-416)
Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise.
CVE-2024-45554 (severity: HIGH, weakness: CWE-416)
Memory corruption during concurrent SSR execution due to race condition on the global maps list.
CVE-2024-45555 (severity: HIGH, weakness: CWE-787)
Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system image.
CVE-2024-45556 (severity: MEDIUM, weakness: CWE-1262)
Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.
CVE-2024-45557 (severity: HIGH, weakness: CWE-823)
Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.
CVE-2024-45558 (severity: HIGH, weakness: CWE-126)
Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.
CVE-2024-45559 (severity: MEDIUM, weakness: CWE-126)
Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.
CVE-2024-4556 (severity: HIGH, weakness: CWE-22)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Manager allows access the sensitive information. This issue affects NetIQ Access Manager before 5.0.4 and before 5.1.
CVE-2024-45560 (severity: HIGH, weakness: CWE-367)
Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer.
CVE-2024-45561 (severity: HIGH, weakness: CWE-126)
Memory corruption while handling IOCTL call from user-space to set latency level.
CVE-2024-45562 (severity: HIGH, weakness: CWE-416)
Memory corruption during concurrent access to server info object due to unprotected critical field.
CVE-2024-45563 (severity: HIGH, weakness: CWE-787)
Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.
CVE-2024-45564 (severity: HIGH, weakness: CWE-416)
Memory corruption during concurrent access to server info object due to incorrect reference count update.
CVE-2024-45565 (severity: HIGH, weakness: CWE-367)
Memory corruption when blob structure is modified by user-space after kernel verification.
CVE-2024-45566 (severity: HIGH, weakness: CWE-416)
Memory corruption during concurrent buffer access due to modification of the reference count.
CVE-2024-45567 (severity: HIGH, weakness: CWE-416)
Memory corruption while encoding JPEG format.
CVE-2024-45568 (severity: HIGH, weakness: CWE-126)
Memory corruption due to improper bounds check while command handling in camera-kernel driver.
CVE-2024-45569 (severity: CRITICAL, weakness: CWE-129)
Memory corruption while parsing the ML IE due to invalid frame content.
CVE-2024-4557 (severity: MEDIUM, weakness: CWE-400)
Multiple Denial of Service (DoS) conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1 which allowed an attacker to cause resource exhaustion via banzai pipeline.
CVE-2024-45570 (severity: HIGH, weakness: CWE-823)
Memory corruption may occur during IO configuration processing when the IO port count is invalid.
CVE-2024-45571 (severity: HIGH, weakness: CWE-416)
Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface.
CVE-2024-45573 (severity: HIGH, weakness: CWE-823)
Memory corruption may occour while generating test pattern due to negative indexing of display ID.
CVE-2024-45574 (severity: HIGH, weakness: CWE-129)
Memory corruption during array access in Camera kernel due to invalid index from invalid command data.
CVE-2024-45575 (severity: HIGH, weakness: CWE-190)
Memory corruption Camera kernel when large number of devices are attached through userspace.
CVE-2024-45576 (severity: HIGH, weakness: CWE-129)
Memory corruption while prociesing command buffer buffer in OPE module.
CVE-2024-45577 (severity: HIGH, weakness: CWE-20)
Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information.
CVE-2024-45578 (severity: HIGH, weakness: CWE-129)
Memory corruption while acquire and update IOCTLs during IFE output resource ID validation.
CVE-2024-45579 (severity: HIGH, weakness: CWE-20)
Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check.
CVE-2024-4558 (severity: HIGH, weakness: CWE-416)
Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2024-45580 (severity: HIGH, weakness: CWE-416)
Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.
CVE-2024-45581 (severity: HIGH, weakness: CWE-787)
Memory corruption while sound model registration for voice activation with audio kernel driver.
CVE-2024-45582 (severity: HIGH, weakness: CWE-129)
Memory corruption while validating number of devices in Camera kernel .
CVE-2024-45583 (severity: HIGH, weakness: CWE-416)
Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations.
CVE-2024-45584 (severity: HIGH, weakness: CWE-822)
Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.
CVE-2024-45586 (severity: CRITICAL, weakness: CWE-863)
This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS Web Trading and Mobile Trading platforms (version 2.0.0.1_P160). An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which could lead to unauthorized account take over belonging to other users.
CVE-2024-45587 (severity: CRITICAL, weakness: CWE-863)
This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Transaction module of vulnerable application. An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which could lead to compromise of other user accounts.
CVE-2024-45588 (severity: CRITICAL, weakness: CWE-863)
This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Preference module of the application. An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which could lead to unauthorized access and modification of sensitive information belonging to other users.
CVE-2024-45589 (severity: MEDIUM, weakness: CWE-307)
RapidIdentity LTS through 2023.0.2 and Cloud through 2024.08.0 improperly restricts excessive authentication attempts and allows a remote attacker to cause a denial of service via the username parameters.
CVE-2024-4559 (severity: HIGH, weakness: CWE-787)
Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2024-45590 (severity: HIGH, weakness: CWE-405)
body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue is patched in 1.20.3.
CVE-2024-45591 (severity: MEDIUM, weakness: CWE-359)
XWiki Platform is a generic wiki platform. The REST API exposes the history of any page in XWiki of which the attacker knows the name. The exposed information includes for each modification of the page the time of the modification, the version number, the author of the modification (both username and displayed name) and the version comment. This information is exposed regardless of the rights setup, and even when the wiki is configured to be fully private. On a private wiki, this can be tested by accessing /xwiki/rest/wikis/xwiki/spaces/Main/pages/WebHome/history, if this shows the history of the main page then the installation is vulnerable. This has been patched in XWiki 15.10.9 and XWiki 16.3.0RC1.
CVE-2024-45592 (severity: MEDIUM, weakness: CWE-79)
auditor-bundle, formerly known as DoctrineAuditBundle, integrates auditor library into any Symfony 3.4+ application. Prior to version 5.2.6, there is an unescaped entity property enabling Javascript injection. This is possible because `%source_label%` in twig macro is not escaped. Therefore script tags can be inserted and are executed. The vulnerability is fixed in versions 6.0.0 and 5.2.6.
CVE-2024-45593 (severity: HIGH, weakness: CWE-22)
Nix is a package manager for Linux and other Unix systems. A bug in Nix 2.24 prior to 2.24.6 allows a substituter or malicious user to craft a NAR that, when unpacked by Nix, causes Nix to write to arbitrary file system locations to which the Nix process has access. This will be with root permissions when using the Nix daemon. This issue is fixed in Nix 2.24.6.
CVE-2024-45594 (severity: MEDIUM, weakness: CWE-79)
Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixed in 0.28.3 and 0.29.0.
CVE-2024-45595 (severity: CRITICAL, weakness: CWE-79)
D-Tale is a visualizer for Pandas data structures. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Users should upgrade to version 3.14.1 where the "Custom Filter" input is turned off by default.
CVE-2024-45596 (severity: HIGH, weakness: CWE-524)
Directus is a real-time API and App dashboard for managing SQL database content. An unauthenticated user can access credentials of last authenticated user via OpenID or OAuth2 where the authentication URL did not include redirect query string. This happens because on that endpoint for both OpenId and Oauth2 Directus is using the respond middleware, which by default will try to cache GET requests that met some conditions. Although, those conditions do not include this scenario, when an unauthenticated request returns user credentials. This vulnerability is fixed in 10.13.3 and 11.1.0.
CVE-2024-45597 (severity: MEDIUM, weakness: CWE-93)
Pluto is a superset of Lua 5.4 with a focus on general-purpose programming. Scripts passing user-controlled values to http.request header values are affected. An attacker could use this to send arbitrary requests, potentially leveraging authentication tokens provided in the same headers table.
CVE-2024-45598 (severity: MEDIUM, weakness: CWE-22)
Cacti is an open source performance and fault management framework. Prior to 1.2.29, an administrator can change the `Poller Standard Error Log Path` parameter in either Installation Step 5 or in Configuration->Settings->Paths tab to a local file inside the server. Then simply going to Logs tab and selecting the name of the local file will show its content on the web UI. This vulnerability is fixed in 1.2.29.
CVE-2024-45599 (severity: LOW, weakness: CWE-277)
Cursor is an artificial intelligence code editor. Prior to version 0.41.0, if a user on macOS has granted Cursor access to the camera or microphone, any program that is run on the machine is able to access the camera or the microphone without explicitly being granted access, through a DyLib Injection using DYLD_INSERT_LIBRARIES environment variable. The usage of `com.apple.security.cs.allow-dyld-environment-variables` and `com.apple.security.cs.disable-library-validation` allows an external dynamic library to be injected into the application using DYLD_INSERT_LIBRARIES environment variable. Moreover, the entitlement `com.apple.security.device.camera` allows the application to use the host camera and `com.apple.security.device.audio-input` allows the application to use the microphone. This means that untrusted code that is executed on the user's machine can access the camera or the microphone, if the user has already given permission for Cursor to do so. In version 0.41.0, the entitlements have been split by process: the main process gets the camera and microphone entitlements, but not the DyLib entitlements, whereas the extension host process gets the DyLib entitlements but not the camera or microphone entitlements. As a workaround, do not explicitly give Cursor the permission to access the camera or microphone if untrusted users can run arbitrary commands on the affected machine.
CVE-2024-4560 (severity: CRITICAL, weakness: NVD-CWE-Other)
The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the chatbot_chatgpt_upload_file_to_assistant function in all versions up to, and including, 1.9.9. This makes it possible for unauthenticated attackers, with to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVE-2024-45600 (severity: HIGH, weakness: CWE-89)
Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to 1.21.13, an authenticated user can perform a SQL injection when the plugin is active. The vulnerability is fixed in 1.21.13.
CVE-2024-45601 (severity: HIGH, weakness: CWE-20)
Mesop is a Python-based UI framework designed for rapid web apps development. A vulnerability has been discovered and fixed in Mesop that could potentially allow unauthorized access to files on the server hosting the Mesop application. The vulnerability was related to insufficient input validation in a specific endpoint. This could have allowed an attacker to access files not intended to be served. Users are strongly advised to update to the latest version of Mesop immediately. The latest version includes a fix for this vulnerability. At time of publication 0.12.4 is the most recently available version of Mesop.
CVE-2024-45604 (severity: MEDIUM, weakness: CWE-22)
Contao is an Open Source CMS. In affected versions authenticated users in the back end can list files outside the document root in the file selector widget. Users are advised to update to Contao 4.13.49. There are no known workarounds for this vulnerability.
CVE-2024-45605 (severity: MEDIUM, weakness: CWE-639)
Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary users given a know alert ID. A patch was issued to ensure authorization checks are properly scoped on requests to delete user alert notifications. Sentry SaaS users do not need to take any action. Self-Hosted Sentry users should upgrade to version 24.9.0 or higher. There are no known workarounds for this vulnerability.
CVE-2024-45606 (severity: MEDIUM, weakness: CWE-639)
Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user can mute alert rules from arbitrary organizations and projects with a know rule ID. The user does not need to be a member of the organization or have permissions on the project. In our review, we have identified no instances where alerts have been muted by unauthorized parties. A patch was issued to ensure authorization checks are properly scoped on requests to mute alert rules. Authenticated users who do not have the necessary permissions are no longer able to mute alerts. Sentry SaaS users do not need to take any action. Self-Hosted Sentry users should upgrade to version **24.9.0** or higher. The rule mute feature was generally available as of 23.6.0 but users with early access may have had the feature as of 23.4.0. Affected users are advised to upgrade to version 24.9.0. There are no known workarounds for this vulnerability.
CVE-2024-45607 (severity: MEDIUM, weakness: CWE-347)
whatsapp-api-js is a TypeScript server agnostic Whatsapp's Official API framework. It's possible to check the payload validation using the WhatsAppAPI.verifyRequestSignature and expect false when the signature is valid. Incorrect Access Control, anyone using the post or verifyRequestSignature methods to handle messages is impacted. This vulnerability is fixed in 4.0.3.
CVE-2024-45608 (severity: HIGH, weakness: CWE-89)
GLPI is a free asset and IT management software package. An authenticated user can perfom a SQL injection by changing its preferences. Upgrade to 10.0.17.
CVE-2024-45609 (severity: MEDIUM, weakness: CWE-79)
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the reports pages. Upgrade to 10.0.17.
CVE-2024-4561 (severity: MEDIUM, weakness: CWE-918)
In WhatsUp Gold versions released before 2023.1.2 , a blind SSRF vulnerability exists in Whatsup Gold's FaviconController that allows an attacker to send arbitrary HTTP requests on behalf of the vulnerable server.
CVE-2024-45610 (severity: MEDIUM, weakness: CWE-79)
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the Cable form. Upgrade to 10.0.17.
CVE-2024-45611 (severity: MEDIUM, weakness: CWE-79)
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated user can bypass the access control policy to create a private RSS feed attached to another user account and use a malicious payload to triggger a stored XSS. Upgrade to 10.0.17.
CVE-2024-45612 (severity: MEDIUM, weakness: CWE-20)
Contao is an Open Source CMS. In affected versions an untrusted user can inject insert tags into the canonical tag, which are then replaced on the web page (front end). Users are advised to update to Contao 4.13.49, 5.3.15 or 5.4.3. Users unable to upgrade should disable canonical tags in the root page settings.
CVE-2024-45613 (severity: MEDIUM, weakness: CWE-79)
CKEditor 5 is a JavaScript rich-text editor. Starting in version 40.0.0 and prior to version 43.1.1, a Cross-Site Scripting (XSS) vulnerability is present in the CKEditor 5 clipboard package. This vulnerability could be triggered by a specific user action, leading to unauthorized JavaScript code execution, if the attacker managed to insert a malicious content into the editor, which might happen with a very specific editor configuration. This vulnerability only affects installations where the Block Toolbar plugin is enabled and either the General HTML Support (with a configuration that permits unsafe markup) or the HTML Embed plugin is also enabled. A fix for the problem is available in version 43.1.1. As a workaround, one may disable the block toolbar plugin.
CVE-2024-45614 (severity: MEDIUM, weakness: CWE-639)
Puma is a Ruby/Rack web server built for parallelism. In affected versions clients could clobber values set by intermediate proxies (such as X-Forwarded-For) by providing a underscore version of the same header (X-Forwarded_For). Any users relying on proxy set variables is affected. v6.4.3/v5.6.9 now discards any headers using underscores if the non-underscore version also exists. Effectively, allowing the proxy defined headers to always win. Users are advised to upgrade. Nginx has a underscores_in_headers configuration variable to discard these headers at the proxy level as a mitigation. Any users that are implicitly trusting the proxy defined headers for security should immediately cease doing so until upgraded to the fixed versions.
CVE-2024-45615 (severity: LOW, weakness: CWE-457)
A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. The problem is missing initialization of variables expected to be initialized (as arguments to other functions, etc.).