stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2024-2136 (severity: MEDIUM, weakness: CWE-79)
The WPKoi Templates for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Advanced Heading widget in all versions up to, and including, 2.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-21360 (severity: HIGH, weakness: CWE-122)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21361 (severity: HIGH, weakness: CWE-122)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21362 (severity: MEDIUM, weakness: CWE-367)
Windows Kernel Security Feature Bypass Vulnerability
CVE-2024-21363 (severity: HIGH, weakness: CWE-843)
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2024-21364 (severity: CRITICAL, weakness: CWE-284)
Microsoft Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2024-21365 (severity: HIGH, weakness: CWE-122)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21366 (severity: HIGH, weakness: CWE-122)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21367 (severity: HIGH, weakness: CWE-122)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21368 (severity: HIGH, weakness: CWE-122)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21369 (severity: HIGH, weakness: CWE-122)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-2137 (severity: MEDIUM, weakness: CWE-79)
The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple pricing widgets (e.g. Pricing Single, Pricing Icon, Pricing Tab) in all versions up to, and including, 2.4.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-21370 (severity: HIGH, weakness: CWE-122)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21371 (severity: HIGH, weakness: CWE-367)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-21372 (severity: HIGH, weakness: CWE-190)
Windows OLE Remote Code Execution Vulnerability
CVE-2024-21373 (severity: HIGH, weakness: CWE-122)
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
CVE-2024-21374 (severity: MEDIUM, weakness: CWE-20)
Microsoft Teams for Android Information Disclosure Vulnerability
CVE-2024-21375 (severity: HIGH, weakness: CWE-416)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21376 (severity: CRITICAL, weakness: CWE-284)
Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability
CVE-2024-21377 (severity: MEDIUM, weakness: CWE-197)
Windows DNS Information Disclosure Vulnerability
CVE-2024-21378 (severity: HIGH, weakness: CWE-94)
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2024-21379 (severity: HIGH, weakness: CWE-190)
Microsoft Word Remote Code Execution Vulnerability
CVE-2024-2138 (severity: MEDIUM, weakness: CWE-79)
The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Animated Box widget in all versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-21380 (severity: HIGH, weakness: CWE-200)
Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
CVE-2024-21381 (severity: MEDIUM, weakness: CWE-352)
Microsoft Azure Active Directory B2C Spoofing Vulnerability
CVE-2024-21382 (severity: MEDIUM, weakness: CWE-942)
Microsoft Edge for Android Information Disclosure Vulnerability
CVE-2024-21383 (severity: LOW, weakness: CWE-347)
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2024-21384 (severity: HIGH, weakness: CWE-416)
Microsoft Office OneNote Remote Code Execution Vulnerability
CVE-2024-21385 (severity: HIGH, weakness: CWE-416)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2024-21386 (severity: HIGH, weakness: CWE-400)
.NET Denial of Service Vulnerability
CVE-2024-21387 (severity: MEDIUM, weakness: CWE-357)
Microsoft Edge for Android Spoofing Vulnerability
CVE-2024-21388 (severity: MEDIUM, weakness: CWE-20)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2024-21389 (severity: HIGH, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2024-2139 (severity: MEDIUM, weakness: CWE-79)
The Master Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Table widget in all versions up to, and including, 2.0.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-21390 (severity: HIGH, weakness: CWE-287)
Microsoft Authenticator Elevation of Privilege Vulnerability
CVE-2024-21391 (severity: HIGH, weakness: CWE-197)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21392 (severity: HIGH, weakness: CWE-400)
.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-21393 (severity: HIGH, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2024-21394 (severity: HIGH, weakness: CWE-79)
Dynamics 365 Field Service Spoofing Vulnerability
CVE-2024-21395 (severity: HIGH, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2024-21396 (severity: HIGH, weakness: CWE-79)
Dynamics 365 Sales Spoofing Vulnerability
CVE-2024-21397 (severity: MEDIUM, weakness: CWE-59)
Microsoft Azure File Sync Elevation of Privilege Vulnerability
CVE-2024-21398 (severity: HIGH, weakness: CWE-122)
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
CVE-2024-21399 (severity: HIGH, weakness: CWE-416)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-2140 (severity: MEDIUM, weakness: CWE-79)
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Advanced Icons widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-21400 (severity: CRITICAL, weakness: CWE-22)
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
CVE-2024-21401 (severity: CRITICAL, weakness: CWE-284)
Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability
CVE-2024-21402 (severity: HIGH, weakness: CWE-285)
Microsoft Outlook Elevation of Privilege Vulnerability
CVE-2024-21403 (severity: CRITICAL, weakness: CWE-552)
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
CVE-2024-21404 (severity: HIGH, weakness: CWE-476)
.NET Denial of Service Vulnerability
CVE-2024-21405 (severity: HIGH, weakness: CWE-591)
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
CVE-2024-21406 (severity: HIGH, weakness: CWE-319)
Windows Printing Service Spoofing Vulnerability
CVE-2024-21407 (severity: HIGH, weakness: CWE-416)
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2024-21408 (severity: MEDIUM, weakness: CWE-835)
Windows Hyper-V Denial of Service Vulnerability
CVE-2024-21409 (severity: HIGH, weakness: CWE-416)
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2024-2141 (severity: MEDIUM, weakness: CWE-79)
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-21410 (severity: CRITICAL, weakness: CWE-287)
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2024-21411 (severity: HIGH, weakness: CWE-453)
Skype for Consumer Remote Code Execution Vulnerability
CVE-2024-21412 (severity: HIGH, weakness: CWE-693)
Internet Shortcut Files Security Feature Bypass Vulnerability
CVE-2024-21413 (severity: CRITICAL, weakness: CWE-20)
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2024-21414 (severity: HIGH, weakness: CWE-122)
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
CVE-2024-21415 (severity: HIGH, weakness: CWE-122)
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
CVE-2024-21416 (severity: CRITICAL, weakness: CWE-122)
Windows TCP/IP Remote Code Execution Vulnerability
CVE-2024-21417 (severity: HIGH, weakness: CWE-862)
Windows Text Services Framework Elevation of Privilege Vulnerability
CVE-2024-21418 (severity: HIGH, weakness: CWE-284)
Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability
CVE-2024-21419 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2024-2142 (severity: MEDIUM, weakness: CWE-79)
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Info Table widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-21420 (severity: HIGH, weakness: CWE-190)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21421 (severity: HIGH, weakness: NVD-CWE-Other)
Azure SDK Spoofing Vulnerability
CVE-2024-21423 (severity: MEDIUM, weakness: CWE-693)
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
CVE-2024-21424 (severity: MEDIUM, weakness: CWE-284)
Azure Compute Gallery Elevation of Privilege Vulnerability
CVE-2024-21425 (severity: HIGH, weakness: CWE-122)
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
CVE-2024-21426 (severity: HIGH, weakness: CWE-416)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2024-21427 (severity: HIGH, weakness: CWE-287)
Windows Kerberos Security Feature Bypass Vulnerability
CVE-2024-21428 (severity: HIGH, weakness: CWE-190)
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
CVE-2024-21429 (severity: MEDIUM, weakness: CWE-197)
Windows USB Hub Driver Remote Code Execution Vulnerability
CVE-2024-2143 (severity: MEDIUM, weakness: CWE-79)
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Heading widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-21430 (severity: MEDIUM, weakness: CWE-125)
Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
CVE-2024-21431 (severity: MEDIUM, weakness: CWE-732)
Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
CVE-2024-21432 (severity: HIGH, weakness: CWE-59)
Windows Update Stack Elevation of Privilege Vulnerability
CVE-2024-21433 (severity: HIGH, weakness: CWE-367)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2024-21434 (severity: HIGH, weakness: CWE-197)
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
CVE-2024-21435 (severity: HIGH, weakness: CWE-426)
Windows OLE Remote Code Execution Vulnerability
CVE-2024-21436 (severity: HIGH, weakness: CWE-284)
Windows Installer Elevation of Privilege Vulnerability
CVE-2024-21437 (severity: HIGH, weakness: CWE-416)
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2024-21438 (severity: HIGH, weakness: CWE-369)
Microsoft AllJoyn API Denial of Service Vulnerability
CVE-2024-21439 (severity: HIGH, weakness: CWE-416)
Windows Telephony Server Elevation of Privilege Vulnerability
CVE-2024-2144 (severity: MEDIUM, weakness: CWE-79)
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Separator widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-21440 (severity: HIGH, weakness: CWE-197)
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2024-21441 (severity: HIGH, weakness: CWE-190)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21442 (severity: HIGH, weakness: CWE-170)
Windows USB Print Driver Elevation of Privilege Vulnerability
CVE-2024-21443 (severity: HIGH, weakness: CWE-416)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-21444 (severity: HIGH, weakness: CWE-190)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21445 (severity: HIGH, weakness: CWE-415)
Windows USB Print Driver Elevation of Privilege Vulnerability
CVE-2024-21446 (severity: HIGH, weakness: CWE-591)
NTFS Elevation of Privilege Vulnerability
CVE-2024-21447 (severity: HIGH, weakness: CWE-59)
Windows Authentication Elevation of Privilege Vulnerability
CVE-2024-21448 (severity: MEDIUM, weakness: CWE-20)
Microsoft Teams for Android Information Disclosure Vulnerability
CVE-2024-21449 (severity: HIGH, weakness: CWE-122)
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
CVE-2024-2145 (severity: MEDIUM, weakness: CWE-79)
A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/update-tracker.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-255498 is the identifier assigned to this vulnerability.
CVE-2024-21450 (severity: HIGH, weakness: CWE-190)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21451 (severity: HIGH, weakness: CWE-197)
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2024-21452 (severity: HIGH, weakness: CWE-20)
Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions.
CVE-2024-21453 (severity: HIGH, weakness: CWE-20)
Transient DOS while decoding message of size that exceeds the available system memory.
CVE-2024-21454 (severity: HIGH, weakness: CWE-680)
Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics.
CVE-2024-21455 (severity: HIGH, weakness: CWE-822)
Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.
CVE-2024-21456 (severity: CRITICAL, weakness: CWE-126)
Information Disclosure while parsing beacon frame in STA.
CVE-2024-21457 (severity: HIGH, weakness: CWE-126)
INformation disclosure while handling Multi-link IE in beacon frame.
CVE-2024-21458 (severity: HIGH, weakness: CWE-126)
Information disclosure while handling SA query action frame.
CVE-2024-21459 (severity: HIGH, weakness: CWE-126)
Information disclosure while handling beacon or probe response frame in STA.
CVE-2024-2146 (severity: MEDIUM, weakness: CWE-79)
A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /?p=products. The manipulation of the argument search leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255499.
CVE-2024-21460 (severity: MEDIUM, weakness: CWE-330)
Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space.
CVE-2024-21461 (severity: HIGH, weakness: CWE-415)
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
CVE-2024-21462 (severity: MEDIUM, weakness: CWE-126)
Transient DOS while loading the TA ELF file.
CVE-2024-21463 (severity: CRITICAL, weakness: CWE-120)
Memory corruption while processing Codec2 during v13k decoder pitch synthesis.
CVE-2024-21464 (severity: HIGH, weakness: CWE-120)
Memory corruption while processing IPA statistics, when there are no active clients registered.
CVE-2024-21465 (severity: HIGH, weakness: CWE-126)
Memory corruption while processing key blob passed by the user.
CVE-2024-21466 (severity: HIGH, weakness: CWE-191)
Information disclosure while parsing sub-IE length during new IE generation.
CVE-2024-21467 (severity: HIGH, weakness: CWE-126)
Information disclosure while handling beacon probe frame during scan entry generation in client side.
CVE-2024-21468 (severity: HIGH, weakness: CWE-416)
Memory corruption when there is failed unmap operation in GPU.
CVE-2024-21469 (severity: HIGH, weakness: CWE-264)
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
CVE-2024-2147 (severity: CRITICAL, weakness: CWE-89)
A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-255500.
CVE-2024-21470 (severity: HIGH, weakness: CWE-680)
Memory corruption while allocating memory for graphics.
CVE-2024-21471 (severity: HIGH, weakness: CWE-416)
Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.
CVE-2024-21472 (severity: HIGH, weakness: CWE-416)
Memory corruption in Kernel while handling GPU operations.
CVE-2024-21473 (severity: CRITICAL, weakness: CWE-20)
Memory corruption while redirecting log file to any file location with any file name.
CVE-2024-21474 (severity: HIGH, weakness: CWE-121)
Memory corruption when size of buffer from previous call is used without validation or re-initialization.
CVE-2024-21475 (severity: HIGH, weakness: CWE-823)
Memory corruption when the payload received from firmware is not as per the expected protocol size.
CVE-2024-21476 (severity: HIGH, weakness: CWE-20)
Memory corruption when the channel ID passed by user is not validated and further used.
CVE-2024-21477 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.
CVE-2024-21478 (severity: MEDIUM, weakness: CWE-704)
transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA.
CVE-2024-21479 (severity: HIGH, weakness: CWE-126)
Transient DOS during music playback of ALAC content.
CVE-2024-2148 (severity: HIGH, weakness: CWE-434)
A vulnerability classified as critical has been found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of the file /classes/Users.php. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-255501 was assigned to this vulnerability.
CVE-2024-21480 (severity: CRITICAL, weakness: CWE-120)
Memory corruption while playing audio file having large-sized input buffer.
CVE-2024-21481 (severity: HIGH, weakness: CWE-119)
Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.
CVE-2024-21482 (severity: HIGH, weakness: CWE-119)
Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs image.
CVE-2024-21483 (severity: MEDIUM, weakness: CWE-284)
A vulnerability has been identified in SENTRON 7KM PAC3120 AC/DC (7KM3120-0BA01-1DA0) (All versions >= V3.2.3 < V3.2.4 only when manufactured between LQN231003... and LQN231215... ( with LQNYYMMDD...)), SENTRON 7KM PAC3120 DC (7KM3120-1BA01-1EA0) (All versions >= V3.2.3 < V3.2.4 only when manufactured between LQN231003... and LQN231215... ( with LQNYYMMDD...)), SENTRON 7KM PAC3220 AC/DC (7KM3220-0BA01-1DA0) (All versions >= V3.2.3 < V3.2.4 only when manufactured between LQN231003... and LQN231215... ( with LQNYYMMDD...)), SENTRON 7KM PAC3220 DC (7KM3220-1BA01-1EA0) (All versions >= V3.2.3 < V3.2.4 only when manufactured between LQN231003... and LQN231215... ( with LQNYYMMDD...)). The read out protection of the internal flash of affected devices was not properly set at the end of the manufacturing process. An attacker with physical access to the device could read out the data.
CVE-2024-21484 (severity: MEDIUM, weakness: CWE-203)
Versions of the package jsrsasign before 11.0.0 are vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process. An attacker can decrypt ciphertexts by exploiting the Marvin security flaw. Exploiting this vulnerability requires the attacker to have access to a large number of ciphertexts encrypted with the same key. Workaround The vulnerability can be mitigated by finding and replacing RSA and RSAOAEP decryption with another crypto library.
CVE-2024-21485 (severity: MEDIUM, weakness: CWE-79)
Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the package dash-html-components before 2.0.0; versions of the package dash-html-components before 2.0.16 are vulnerable to Cross-site Scripting (XSS) when the href of the a tag is controlled by an adversary. An authenticated attacker who stores a view that exploits this vulnerability could steal the data that's visible to another user who opens that view - not just the data already included on the page, but they could also, in theory, make additional requests and access other data accessible to this user. In some cases, they could also steal the access tokens of that user, which would allow the attacker to act as that user, including viewing other apps and resources hosted on the same server. **Note:** This is only exploitable in Dash apps that include some mechanism to store user input to be reloaded by a different user.
CVE-2024-21488 (severity: CRITICAL, weakness: CWE-77)
Versions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the child_process exec function without input sanitization. If (attacker-controlled) user input is given to the mac_address_for function of the package, it is possible for the attacker to execute arbitrary commands on the operating system that this package is being run on.
CVE-2024-21489 (severity: HIGH, weakness: CWE-1321)
Versions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the attribute resolves to the object prototype.