stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2024-38385 (severity: MEDIUM, weakness: CWE-416)
In the Linux kernel, the following vulnerability has been resolved: genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after() irq_find_at_or_after() dereferences the interrupt descriptor which is returned by mt_find() while neither holding sparse_irq_lock nor RCU read lock, which means the descriptor can be freed between mt_find() and the dereference: CPU0 CPU1 desc = mt_find() delayed_free_desc(desc) irq_desc_get_irq(desc) The use-after-free is reported by KASAN: Call trace: irq_get_next_irq+0x58/0x84 show_stat+0x638/0x824 seq_read_iter+0x158/0x4ec proc_reg_read_iter+0x94/0x12c vfs_read+0x1e0/0x2c8 Freed by task 4471: slab_free_freelist_hook+0x174/0x1e0 __kmem_cache_free+0xa4/0x1dc kfree+0x64/0x128 irq_kobj_release+0x28/0x3c kobject_put+0xcc/0x1e0 delayed_free_desc+0x14/0x2c rcu_do_batch+0x214/0x720 Guard the access with a RCU read lock section.
CVE-2024-38386 (severity: HIGH, weakness: CWE-787)
in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.
CVE-2024-38387 (severity: MEDIUM, weakness: CWE-427)
Uncontrolled search path in the Intel(R) Graphics Driver installers for versions 15.40 and 15.45 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-38388 (severity: LOW, weakness: CWE-401)
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup Use the control private_free callback to free the associated data block. This ensures that the memory won't leak, whatever way the control gets destroyed. The original implementation didn't actually remove the ALSA controls in hda_cs_dsp_control_remove(). It only freed the internal tracking structure. This meant it was possible to remove/unload the amp driver while leaving its ALSA controls still present in the soundcard. Obviously attempting to access them could cause segfaults or at least dereferencing stale pointers.
CVE-2024-38389 (severity: HIGH, weakness: CWE-125)
There is an Out-of-bounds read vulnerability in TELLUS (v4.0.19.0 and earlier) and TELLUS Lite (v4.0.19.0 and earlier). If a user opens a specially crafted file, information may be disclosed and/or arbitrary code may be executed.
CVE-2024-3839 (severity: MEDIUM, weakness: CWE-125)
Out of bounds read in Fonts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2024-38390 (severity: MEDIUM, weakness: CWE-476)
In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails Calling a6xx_destroy() before adreno_gpu_init() leads to a null pointer dereference on: msm_gpu_cleanup() : platform_set_drvdata(gpu->pdev, NULL); as gpu->pdev is only assigned in: a6xx_gpu_init() |_ adreno_gpu_init |_ msm_gpu_init() Instead of relying on handwavy null checks down the cleanup chain, explicitly de-allocate the LLC data and free a6xx_gpu instead. Patchwork: https://patchwork.freedesktop.org/patch/588919/
CVE-2024-38392 (severity: CRITICAL, weakness: CWE-863)
Pexip Infinity Connect before 1.13.0 lacks sufficient authenticity checks during the loading of resources, and thus remote attackers can cause the application to run untrusted code.
CVE-2024-38394 (severity: MEDIUM, weakness: NVD-CWE-Other)
Mismatches in interpreting USB authorization policy between GNOME Settings Daemon (GSD) through 46.0 and the Linux kernel's underlying device matching logic allow a physically proximate attacker to access some unintended Linux kernel USB functionality, such as USB device-specific kernel modules and filesystem implementations. NOTE: the GSD supplier indicates that consideration of a mitigation for this within GSD would be in the context of "a new feature, not a CVE."
CVE-2024-38395 (severity: CRITICAL, weakness: CWE-94)
In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially exploitable."
CVE-2024-38396 (severity: CRITICAL, weakness: CWE-94)
An issue was discovered in iTerm2 3.5.x before 3.5.2. Unfiltered use of an escape sequence to report a window title, in combination with the built-in tmux integration feature (enabled by default), allows an attacker to inject arbitrary code into the terminal, a different vulnerability than CVE-2024-38395.
CVE-2024-38397 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing probe response and assoc response frame.
CVE-2024-38399 (severity: HIGH, weakness: CWE-416)
Memory corruption while processing user packets to generate page faults.
CVE-2024-3840 (severity: MEDIUM, weakness: CWE-285)
Insufficient policy enforcement in Site Isolation in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2024-38401 (severity: HIGH, weakness: CWE-416)
Memory corruption while processing concurrent IOCTL calls.
CVE-2024-38402 (severity: HIGH, weakness: CWE-416)
Memory corruption while processing IOCTL call for getting group info.
CVE-2024-38403 (severity: MEDIUM, weakness: CWE-126)
Transient DOS while parsing BTM ML IE when per STA profile is not included.
CVE-2024-38404 (severity: HIGH, weakness: CWE-126)
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.
CVE-2024-38405 (severity: MEDIUM, weakness: CWE-126)
Transient DOS while processing the CU information from RNR IE.
CVE-2024-38406 (severity: HIGH, weakness: CWE-367)
Memory corruption while handling IOCTL calls in JPEG Encoder driver.
CVE-2024-38407 (severity: HIGH, weakness: CWE-367)
Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.
CVE-2024-38408 (severity: CRITICAL, weakness: CWE-310)
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
CVE-2024-38409 (severity: HIGH, weakness: CWE-120)
Memory corruption while station LL statistic handling.
CVE-2024-3841 (severity: HIGH, weakness: CWE-79)
Insufficient data validation in Browser Switcher in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to inject scripts or HTML into a privileged page via a malicious file. (Chromium security severity: Medium)
CVE-2024-38410 (severity: HIGH, weakness: CWE-121)
Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.
CVE-2024-38411 (severity: HIGH, weakness: CWE-416)
Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls.
CVE-2024-38412 (severity: HIGH, weakness: CWE-416)
Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors.
CVE-2024-38413 (severity: HIGH, weakness: CWE-20)
Memory corruption while processing frame packets.
CVE-2024-38414 (severity: MEDIUM, weakness: CWE-126)
Information disclosure while processing information on firmware image during core initialization.
CVE-2024-38415 (severity: HIGH, weakness: CWE-416)
Memory corruption while handling session errors from firmware.
CVE-2024-38416 (severity: MEDIUM, weakness: CWE-126)
Information disclosure during audio playback.
CVE-2024-38417 (severity: MEDIUM, weakness: CWE-126)
Information disclosure while processing IO control commands.
CVE-2024-38418 (severity: HIGH, weakness: CWE-367)
Memory corruption while parsing the memory map info in IOCTL calls.
CVE-2024-38419 (severity: HIGH, weakness: CWE-416)
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
CVE-2024-38420 (severity: HIGH, weakness: CWE-20)
Memory corruption while configuring a Hypervisor based input virtual device.
CVE-2024-38421 (severity: HIGH, weakness: CWE-416)
Memory corruption while processing GPU commands.
CVE-2024-38422 (severity: HIGH, weakness: CWE-680)
Memory corruption while processing voice packet with arbitrary data received from ADSP.
CVE-2024-38423 (severity: HIGH, weakness: CWE-120)
Memory corruption while processing GPU page table switch.
CVE-2024-38424 (severity: HIGH, weakness: CWE-416)
Memory corruption during GNSS HAL process initialization.
CVE-2024-38425 (severity: MEDIUM, weakness: CWE-285)
Information disclosure while sending implicit broadcast containing APP launch information.
CVE-2024-38426 (severity: MEDIUM, weakness: CWE-287)
While processing the authentication message in UE, improper authentication may lead to information disclosure.
CVE-2024-38427 (severity: HIGH, weakness: CWE-252)
In International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in CIccTagXmlProfileSequenceId::ParseXml in IccXML/IccLibXML/IccTagXml.cpp results in unconditionally returning false.
CVE-2024-38428 (severity: CRITICAL, weakness: CWE-436)
url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent.
CVE-2024-38429 (severity: HIGH, weakness: CWE-552)
Matrix Tafnit v8 - CWE-552: Files or Directories Accessible to External Parties
CVE-2024-3843 (severity: MEDIUM, weakness: CWE-290)
Insufficient data validation in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2024-38430 (severity: MEDIUM, weakness: CWE-79)
Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38431 (severity: HIGH, weakness: CWE-204)
Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy
CVE-2024-38432 (severity: CRITICAL, weakness: CWE-646)
Matrix Tafnit v8 - CWE-646: Reliance on File Name or Extension of Externally-Supplied File
CVE-2024-38433 (severity: MEDIUM, weakness: CWE-305)
Nuvoton - CWE-305: Authentication Bypass by Primary Weakness An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton BootBlock reference code can modify the u-boot image header on flash parsed by the BootBlock which could lead to arbitrary code execution.
CVE-2024-38434 (severity: MEDIUM, weakness: CWE-676)
Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass
CVE-2024-38435 (severity: HIGH, weakness: CWE-703)
Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service
CVE-2024-38436 (severity: MEDIUM, weakness: CWE-79)
Commugen SOX 365 – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38437 (severity: CRITICAL, weakness: CWE-288)
D-Link - CWE-288:Authentication Bypass Using an Alternate Path or Channel
CVE-2024-38438 (severity: CRITICAL, weakness: CWE-294)
D-Link - CWE-294: Authentication Bypass by Capture-replay
CVE-2024-38439 (severity: CRITICAL, weakness: CWE-787)
Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '\0' in FPLoginExt in login in etc/uams/uams_pam.c. 2.4.1 and 3.1.19 are also fixed versions.
CVE-2024-3844 (severity: MEDIUM, weakness: CWE-358)
Inappropriate implementation in Extensions in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low)
CVE-2024-38440 (severity: HIGH, weakness: CWE-193)
Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, because of incorrectly using FPLoginExt in BN_bin2bn in etc/uams/uams_dhx_pam.c. The original issue 1097 report stated: 'The latest version of Netatalk (v3.2.0) contains a security vulnerability. This vulnerability arises due to a lack of validation for the length field after parsing user-provided data, leading to an out-of-bounds heap write of one byte (\0). Under specific configurations, this can result in reading metadata of the next heap block, potentially causing a Denial of Service (DoS) under certain heap layouts or with ASAN enabled. ... The vulnerability is located in the FPLoginExt operation of Netatalk, in the BN_bin2bn function found in /etc/uams/uams_dhx_pam.c ... if (!(bn = BN_bin2bn((unsigned char *)ibuf, KEYSIZE, NULL))) ... threads ... [#0] Id 1, Name: "afpd", stopped 0x7ffff4304e58 in ?? (), reason: SIGSEGV ... [#0] 0x7ffff4304e58 mov BYTE PTR [r14+0x8], 0x0 ... mov rdx, QWORD PTR [rsp+0x18] ... afp_login_ext(obj=<optimized out>, ibuf=0x62d000010424 "", ibuflen=0xffffffffffff0015, rbuf=<optimized out>, rbuflen=<optimized out>) ... afp_over_dsi(obj=0x5555556154c0 <obj>).' 2.4.1 and 3.1.19 are also fixed versions.
CVE-2024-38441 (severity: CRITICAL, weakness: CWE-193)
Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to '\0' in FPMapName in afp_mapname in etc/afpd/directory.c. 2.4.1 and 3.1.19 are also fixed versions.
CVE-2024-38443 (severity: MEDIUM, weakness: CWE-121)
C/sorting/binary_insertion_sort.c in The Algorithms - C through e5dad3f has a segmentation fault for deep recursion, which may affect common use cases such as sorting an array of 50 elements.
CVE-2024-38446 (severity: MEDIUM, weakness: CWE-639)
NATO NCI ANET 3.4.1 mishandles report ownership. A user can create a report and, despite the restrictions imposed by the UI, change the author of that report to an arbitrary user (without their consent or knowledge) via a modified UUID in a POST request.
CVE-2024-38447 (severity: HIGH, weakness: CWE-639)
NATO NCI ANET 3.4.1 allows Insecure Direct Object Reference via a modified ID field in a request for a private draft report (that belongs to an arbitrary user).
CVE-2024-38448 (severity: CRITICAL, weakness: CWE-94)
htags in GNU Global through 6.6.12 allows code execution in situations where dbpath (aka -d) is untrusted, because shell metacharacters may be used.
CVE-2024-38449 (severity: HIGH, weakness: CWE-22)
A Directory Traversal vulnerability in KasmVNC 1.3.1.230e50f7b89663316c70de7b0e3db6f6b9340489 and possibly earlier versions allows remote authenticated attackers to browse parent directories and read the content of files outside the scope of the application.
CVE-2024-3845 (severity: CRITICAL, weakness: CWE-358)
Inappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass mixed content policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2024-38453 (severity: HIGH, weakness: CWE-522)
The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024.
CVE-2024-38454 (severity: MEDIUM, weakness: CWE-79)
ExpressionEngine before 7.4.11 allows XSS.
CVE-2024-38456 (severity: HIGH, weakness: CWE-732)
HIGH-LEIT V05.08.01.03 and HIGH-LEIT V04.25.00.00 to 4.25.01.01 for Windows from Vivavis contain an insecure file and folder permissions vulnerability in prunsrv.exe. A regular user (non-admin) can exploit the weak folder and file permissions to escalate privileges and execute arbitrary code in the context of NT AUTHORITY\SYSTEM.
CVE-2024-38457 (severity: HIGH, weakness: CWE-352)
Xenforo before 2.2.16 allows CSRF.
CVE-2024-38458 (severity: HIGH, weakness: CWE-94)
Xenforo before 2.2.16 allows code injection.
CVE-2024-38459 (severity: HIGH, weakness: CWE-276)
langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444.
CVE-2024-3846 (severity: MEDIUM, weakness: NVD-CWE-Other)
Inappropriate implementation in Prompts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2024-38460 (severity: MEDIUM, weakness: CWE-532)
In SonarQube before 10.4 and 9.9.4 LTA, encrypted values generated using the Settings Encryption feature are potentially exposed in cleartext as part of the URL parameters in the logs (such as SonarQube Access Logs, Proxy Logs, etc).
CVE-2024-38461 (severity: HIGH, weakness: CWE-754)
irodsServerMonPerf in iRODS before 4.3.2 attempts to proceed with use of a path even if it is not a directory.
CVE-2024-38462 (severity: CRITICAL, weakness: CWE-426)
iRODS before 4.3.2 provides an msiSendMail function with a problematic dependency on the mail binary, such as in the mailMS.cpp#L94-L106 reference.
CVE-2024-38465 (severity: MEDIUM, weakness: CWE-203)
Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus error.
CVE-2024-38466 (severity: CRITICAL, weakness: CWE-798)
Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password.
CVE-2024-38467 (severity: HIGH, weakness: CWE-200)
Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized user information retrieval via the queryUser API.
CVE-2024-38468 (severity: CRITICAL, weakness: CWE-640)
Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API.
CVE-2024-38469 (severity: MEDIUM, weakness: CWE-80)
zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /pay.php.
CVE-2024-3847 (severity: CRITICAL, weakness: CWE-79)
Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2024-38470 (severity: MEDIUM, weakness: CWE-79)
zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /own.php.
CVE-2024-38471 (severity: MEDIUM, weakness: CWE-78)
Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.
CVE-2024-38472 (severity: HIGH, weakness: CWE-918)
SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue. Note: Existing configurations that access UNC paths will have to configure new directive "UNCList" to allow access during request processing.
CVE-2024-38473 (severity: HIGH, weakness: CWE-116)
Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version 2.4.60, which fixes this issue.
CVE-2024-38474 (severity: HIGH, weakness: CWE-116)
Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant to only to be executed as CGI. Users are recommended to upgrade to version 2.4.60, which fixes this issue. Some RewriteRules that capture and substitute unsafely will now fail unless rewrite flag "UnsafeAllow3F" is specified.
CVE-2024-38475 (severity: CRITICAL, weakness: CWE-116)
Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure. Substitutions in server context that use a backreferences or variables as the first segment of the substitution are affected. Some unsafe RewiteRules will be broken by this change and the rewrite flag "UnsafePrefixStat" can be used to opt back in once ensuring the substitution is appropriately constrained.
CVE-2024-38476 (severity: CRITICAL, weakness: CWE-829)
Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable. Users are recommended to upgrade to version 2.4.60, which fixes this issue.
CVE-2024-38477 (severity: HIGH, weakness: CWE-476)
null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request. Users are recommended to upgrade to version 2.4.60, which fixes this issue.
CVE-2024-38479 (severity: HIGH, weakness: CWE-20)
Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.
CVE-2024-3848 (severity: HIGH, weakness: CWE-29)
A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '#' character can be used to insert a path into the fragment, effectively skipping validation. This allows an attacker to construct a URL that, when processed, ignores the protocol scheme and uses the provided path for filesystem access. As a result, an attacker can read arbitrary files, including sensitive information such as SSH and cloud keys, by exploiting the way the application converts the URL into a filesystem path. The issue stems from insufficient validation of the fragment portion of the URL, leading to arbitrary file read through path traversal.
CVE-2024-38480 (severity: MEDIUM, weakness: CWE-798)
"Piccoma" App for Android and iOS versions prior to 6.20.0 uses a hard-coded API key for an external service, which may allow a local attacker to obtain the API key. Note that the users of the app are not directly affected by this vulnerability.
CVE-2024-38481 (severity: MEDIUM, weakness: CWE-125)
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Read Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event.
CVE-2024-38482 (severity: HIGH, weakness: CWE-703)
CloudLink, versions 7.1.x and 8.x, contain an Improper check or handling of Exceptional Conditions Vulnerability in Cluster Component. A highly privileged malicious user with remote access could potentially exploit this vulnerability, leading to execute unauthorized actions and retrieve sensitive information from the database.
CVE-2024-38483 (severity: MEDIUM, weakness: CWE-20)
Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
CVE-2024-38485 (severity: MEDIUM, weakness: CWE-601)
Dell ECS, versions prior to 3.8.0, contain(s) a Host Header Injection Vulnerability. A remote low-privileged attacker could potentially exploit this vulnerability to trigger redirections that leads to sensitive information leakage.
CVE-2024-38486 (severity: HIGH, weakness: CWE-77)
Dell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x , contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.