stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2024-43407 (severity: MEDIUM, weakness: CWE-79)
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A potential vulnerability has been discovered in CKEditor 4 Code Snippet GeSHi plugin. The vulnerability allowed a reflected XSS attack by exploiting a flaw in the GeSHi syntax highlighter library hosted by the victim. The GeSHi library was included as a vendor dependency in CKEditor 4 source files. In a specific scenario, an attacker could craft a malicious script that could be executed by sending a request to the GeSHi library hosted on a PHP web server. The GeSHi library is no longer actively maintained. Due to the lack of ongoing support and updates, potential security vulnerabilities have been identified with its continued use. To mitigate these risks and enhance the overall security of the CKEditor 4, we have decided to completely remove the GeSHi library as a dependency. This change aims to maintain a secure environment and reduce the risk of any security incidents related to outdated or unsupported software. The fix is be available in version 4.25.0-lts.
CVE-2024-43408 (severity: MEDIUM, weakness: CWE-79)
Discourse Placeholder Forms will let you build dynamic documentation. Unsanitized and stored user input was injected in the html of the post. The vulnerability is fixed in commit a62f711d5600e4e5d86f342d52932cb6221672e7.
CVE-2024-43409 (severity: MEDIUM, weakness: CWE-284)
Ghost is a Node.js content management system. Improper authentication on some endpoints used for member actions would allow an attacker to perform member-only actions, and read member information. This security vulnerability is present in Ghost v4.46.0-v5.89.4. v5.89.5 contains a fix for this issue.
CVE-2024-4341 (severity: MEDIUM, weakness: CWE-269)
Improper Privilege Management vulnerability in Ekstrem Bir Bilgisayar Danismanlik Ic Ve Dis Ticaret Ltd. Sti. Extreme XDS allows Collect Data as Provided by Users.This issue affects Extreme XDS: before 3928.
CVE-2024-43410 (severity: HIGH, weakness: CWE-770)
Russh is a Rust SSH client & server library. Allocating an untrusted amount of memory allows any unauthenticated user to OOM a russh server. An SSH packet consists of a 4-byte big-endian length, followed by a byte stream of this length. After parsing and potentially decrypting the 4-byte length, russh allocates enough memory for this bytestream, as a performance optimization to avoid reallocations later. But this length is entirely untrusted and can be set to any value by the client, causing this much memory to be allocated, which will cause the process to OOM within a few such requests. This vulnerability is fixed in 0.44.1.
CVE-2024-43411 (severity: LOW, weakness: CWE-79)
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A theoretical vulnerability has been identified in CKEditor 4.22 (and above). In a highly unlikely scenario where an attacker gains control over the https://cke4.ckeditor.com domain, they could potentially execute an attack on CKEditor 4 instances. The issue impacts only editor instances with enabled version notifications. Please note that this feature is disabled by default in all CKEditor 4 LTS versions. Therefore, if you use CKEditor 4 LTS, it is highly unlikely that you are affected by this vulnerability. If you are unsure, please contact us. The fix is available in version 4.25.0-lts.
CVE-2024-43412 (severity: MEDIUM, weakness: CWE-79)
Xibo is an open source digital signage platform with a web content management system (CMS). Prior to version 4.1.0, a cross-site scripting vulnerability in Xibo CMS allows authorized users to execute arbitrary JavaScript via the file preview function. Users can upload HTML/CSS/JS files into the Xibo Library via the Generic File module to be referenced on Displays and in Layouts. This is intended functionality. When previewing these resources from the Library and Layout editor they are executed in the users browser. This will be disabled in future releases, and users are encouraged to use the new developer tools in 4.1 to design their widgets which require this type of functionality. This behavior has been changed in 4.1.0 to preview previewing of generic files. There are no workarounds for this issue.
CVE-2024-43413 (severity: MEDIUM, weakness: CWE-79)
Xibo is an open source digital signage platform with a web content management system (CMS). Prior to version 4.1.0, a cross-site scripting vulnerability in Xibo CMS allows authorized users to execute JavaScript via the DataSet functionality. Users can design a DataSet with a HTML column which contains JavaScript, which is intended functionality. The JavaScript gets executed on the Data Entry page and in any Layouts which reference it. This behavior has been changed in 4.1.0 to show HTML/CSS/JS as code on the Data Entry page. There are no workarounds for this issue.
CVE-2024-43415 (severity: CRITICAL, weakness: CWE-89)
An improper neutralization of special elements used in an SQL command in the papertrail/version- model of the decidim_awesome-module <= v0.11.1 (> 0.9.0) allows an authenticated admin user to manipulate sql queries to disclose information, read and write files or execute commands.
CVE-2024-43416 (severity: MEDIUM, weakness: CWE-200)
GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an unauthenticated user can use an application endpoint to check if an email address corresponds to a valid GLPI user. Version 10.0.17 fixes the issue.
CVE-2024-43417 (severity: MEDIUM, weakness: CWE-79)
GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the Software form. Upgrade to 10.0.17.
CVE-2024-43418 (severity: MEDIUM, weakness: CWE-79)
GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability. Upgrade to 10.0.17.
CVE-2024-4342 (severity: MEDIUM, weakness: CWE-79)
The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's image hotspot, image accordion, off canvas, woogrid, and product mini cart widgets in all versions up to, and including, 1.3.975 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-43420 (severity: MEDIUM, weakness: NVD-CWE-Other)
Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2024-43423 (severity: CRITICAL, weakness: CWE-259)
The web application for ProGauge MAGLINK LX4 CONSOLE contains an administrative-level user account with a password that cannot be changed.
CVE-2024-43424 (severity: HIGH, weakness: CWE-125)
Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability. Crafted HTTP requests may cause affected products crashed.
CVE-2024-43425 (severity: HIGH, weakness: CWE-94)
A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions.
CVE-2024-43426 (severity: HIGH, weakness: CWE-1287)
A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.
CVE-2024-43427 (severity: LOW, weakness: CWE-922)
A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are not being excluded from the export, which could result in them unintentionally being leaked if the presets are shared with a third party.
CVE-2024-43428 (severity: HIGH, weakness: CWE-345)
To address a cache poisoning risk in Moodle, additional validation for local storage was required.
CVE-2024-43429 (severity: MEDIUM, weakness: CWE-312)
A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.
CVE-2024-4343 (severity: CRITICAL, weakness: CWE-78)
A Python command injection vulnerability exists in the `SagemakerLLM` class's `complete()` method within `./private_gpt/components/llm/custom/sagemaker.py` of the imartinez/privategpt application, versions up to and including 0.3.0. The vulnerability arises due to the use of the `eval()` function to parse a string received from a remote AWS SageMaker LLM endpoint into a dictionary. This method of parsing is unsafe as it can execute arbitrary Python code contained within the response. An attacker can exploit this vulnerability by manipulating the response from the AWS SageMaker LLM endpoint to include malicious Python code, leading to potential execution of arbitrary commands on the system hosting the application. The issue is fixed in version 0.6.0.
CVE-2024-43430 (severity: MEDIUM, weakness: CWE-276)
A flaw was found in moodle. External API access to Quiz can override contained insufficient access control.
CVE-2024-43431 (severity: HIGH, weakness: CWE-862)
A vulnerability was found in Moodle. Insufficient capability checks made it possible to delete badges that a user does not have permission to access.
CVE-2024-43432 (severity: MEDIUM, weakness: CWE-319)
A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.
CVE-2024-43433 (severity: MEDIUM, weakness: CWE-863)
A flaw was found in moodle. Matrix room membership and power levels are incorrectly applied and revoked for suspended Moodle users.
CVE-2024-43434 (severity: HIGH, weakness: CWE-22)
The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability.
CVE-2024-43435 (severity: MEDIUM, weakness: CWE-754)
A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary.
CVE-2024-43436 (severity: HIGH, weakness: CWE-89)
A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators.
CVE-2024-43437 (severity: MEDIUM, weakness: CWE-79)
A flaw was found in moodle. Insufficient sanitizing of data when performing a restore could result in a cross-site scripting (XSS) risk from malicious backup files.
CVE-2024-43438 (severity: HIGH, weakness: CWE-639)
A flaw was found in Feedback. Bulk messaging in the activity's non-respondents report did not verify message recipients belonging to the set of users returned by the report.
CVE-2024-43439 (severity: MEDIUM, weakness: CWE-79)
A flaw was found in moodle. H5P error messages require additional sanitizing to prevent a reflected cross-site scripting (XSS) risk.
CVE-2024-4344 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 19.1.13. This is due to missing or incorrect nonce validation on the exec function. This makes it possible for unauthenticated attackers to disable pin protection for the admin interface of the plugin via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVE-2024-43440 (severity: HIGH, weakness: CWE-22)
A flaw was found in moodle. A local file may include risks when restoring block backups.
CVE-2024-43441 (severity: CRITICAL, weakness: CWE-302)
Authentication Bypass by Assumed-Immutable Data vulnerability in Apache HugeGraph-Server. This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.5.0. Users are recommended to upgrade to version 1.5.0, which fixes the issue.
CVE-2024-43442 (severity: MEDIUM, weakness: CWE-790)
Improper Neutralization of Input done by an attacker with admin privileges ('Cross-site Scripting') in OTRS (System Configuration modules) and ((OTRS)) Community Edition allows Cross-Site Scripting (XSS) within the System Configuration targeting other admins. This issue affects: * OTRS from 7.0.X through 7.0.50 * OTRS 8.0.X * OTRS 2023.X * OTRS from 2024.X through 2024.5.X * ((OTRS)) Community Edition: 6.0.x Products based on the ((OTRS)) Community Edition also very likely to be affected
CVE-2024-43443 (severity: MEDIUM, weakness: CWE-790)
Improper Neutralization of Input done by an attacker with admin privileges ('Cross-site Scripting') in Process Management modules of OTRS and ((OTRS)) Community Edition allows Cross-Site Scripting (XSS) within the Process Management targeting other admins. This issue affects: * OTRS from 7.0.X through 7.0.50 * OTRS 8.0.X * OTRS 2023.X * OTRS from 2024.X through 2024.5.X * ((OTRS)) Community Edition: 6.0.x Products based on the ((OTRS)) Community Edition also very likely to be affected
CVE-2024-43444 (severity: HIGH, weakness: CWE-532)
Passwords of agents and customers are displayed in plain text in the OTRS admin log module if certain configurations regarding the authentication sources match and debugging for the authentication backend has been enabled. This issue affects: * OTRS from 7.0.X through 7.0.50 * OTRS 8.0.X * OTRS 2023.X * OTRS from 2024.X through 2024.5.X * ((OTRS)) Community Edition: 6.0.x Products based on the ((OTRS)) Community Edition also very likely to be affected
CVE-2024-43445 (severity: MEDIUM, weakness: CWE-20)
A vulnerability exists in OTRS and ((OTRS Community Edition)) that fail to set the HTTP response header X-Content-Type-Options to nosniff. An attacker could exploit this vulnerability by uploading or inserting content that would be treated as a different MIME type than intended. This issue affects: * OTRS 7.0.X * OTRS 8.0.X * OTRS 2023.X * OTRS 2024.X * ((OTRS)) Community Edition: 6.0.x Products based on the ((OTRS)) Community Edition also very likely to be affected
CVE-2024-43446 (severity: LOW, weakness: CWE-269)
An improper privilege management vulnerability in OTRS Generic Interface module allows change of the Ticket status even if the user only has ro permissions. This issue affects: * OTRS 7.0.X * OTRS 8.0.X * OTRS 2023.X * OTRS 2024.X * ((OTRS)) Community Edition: 6.0.x Products based on the ((OTRS)) Community Edition also very likely to be affected
CVE-2024-43447 (severity: HIGH, weakness: CWE-415)
Windows SMBv3 Server Remote Code Execution Vulnerability
CVE-2024-43449 (severity: MEDIUM, weakness: CWE-125)
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVE-2024-4345 (severity: CRITICAL, weakness: NVD-CWE-Other)
The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'process' function in the 'startklarDropZoneUploadProcess' class in versions up to, and including, 1.7.13. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVE-2024-43450 (severity: HIGH, weakness: CWE-924)
Windows DNS Spoofing Vulnerability
CVE-2024-43451 (severity: MEDIUM, weakness: CWE-73)
NTLM Hash Disclosure Spoofing Vulnerability
CVE-2024-43452 (severity: HIGH, weakness: CWE-367)
Windows Registry Elevation of Privilege Vulnerability
CVE-2024-43453 (severity: HIGH, weakness: CWE-122)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-43454 (severity: HIGH, weakness: CWE-23)
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVE-2024-43455 (severity: CRITICAL, weakness: CWE-20)
Windows Remote Desktop Licensing Service Spoofing Vulnerability
CVE-2024-43456 (severity: HIGH, weakness: CWE-284)
Windows Remote Desktop Services Tampering Vulnerability
CVE-2024-43457 (severity: HIGH, weakness: CWE-428)
Windows Setup and Deployment Elevation of Privilege Vulnerability
CVE-2024-43458 (severity: HIGH, weakness: CWE-908)
Windows Networking Information Disclosure Vulnerability
CVE-2024-43459 (severity: HIGH, weakness: CWE-416)
SQL Server Native Client Remote Code Execution Vulnerability
CVE-2024-4346 (severity: CRITICAL, weakness: NVD-CWE-Other)
The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 1.7.13. This is due to the plugin not properly validating the path of an uploaded file prior to deleting it. This makes it possible for unauthenticated attackers to delete arbitrary files, including the wp-config.php file, which can make site takeover and remote code execution possible.
CVE-2024-43460 (severity: HIGH, weakness: CWE-285)
Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network.
CVE-2024-43461 (severity: HIGH, weakness: CWE-451)
Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-43462 (severity: HIGH, weakness: CWE-122)
SQL Server Native Client Remote Code Execution Vulnerability
CVE-2024-43463 (severity: HIGH, weakness: CWE-416)
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2024-43464 (severity: HIGH, weakness: CWE-502)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2024-43465 (severity: HIGH, weakness: CWE-416)
Microsoft Excel Elevation of Privilege Vulnerability
CVE-2024-43466 (severity: HIGH, weakness: CWE-502)
Microsoft SharePoint Server Denial of Service Vulnerability
CVE-2024-43467 (severity: HIGH, weakness: CWE-362)
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVE-2024-43468 (severity: CRITICAL, weakness: CWE-89)
Microsoft Configuration Manager Remote Code Execution Vulnerability
CVE-2024-43469 (severity: HIGH, weakness: CWE-94)
Azure CycleCloud Remote Code Execution Vulnerability
CVE-2024-4347 (severity: HIGH, weakness: NVD-CWE-Other)
The WP Fastest Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.6 via the specificDeleteCache function. This makes it possible for authenticated attackers to delete arbitrary files on the server, which can include wp-config.php files of the affected site or other sites in a shared hosting environment.
CVE-2024-43470 (severity: HIGH, weakness: CWE-59)
Azure Network Watcher VM Agent Elevation of Privilege Vulnerability
CVE-2024-43472 (severity: HIGH, weakness: CWE-416)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2024-43474 (severity: HIGH, weakness: CWE-170)
Microsoft SQL Server Information Disclosure Vulnerability
CVE-2024-43475 (severity: HIGH, weakness: CWE-126)
Microsoft Windows Admin Center Information Disclosure Vulnerability
CVE-2024-43476 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2024-43477 (severity: HIGH, weakness: CWE-284)
Improper access control in Decentralized Identity Services resulted in a vulnerability that allows an unauthenticated attacker to disable Verifiable ID's on another tenant.
CVE-2024-43479 (severity: HIGH, weakness: CWE-284)
Microsoft Power Automate Desktop Remote Code Execution Vulnerability
CVE-2024-4348 (severity: MEDIUM, weakness: CWE-79)
A vulnerability, which was classified as problematic, was found in osCommerce 4. Affected is an unknown function of the file /catalog/all-products. The manipulation of the argument cat leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-262488. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2024-43480 (severity: MEDIUM, weakness: CWE-122)
Azure Service Fabric for Linux Remote Code Execution Vulnerability
CVE-2024-43481 (severity: HIGH, weakness: CWE-79)
Power BI Report Server Spoofing Vulnerability
CVE-2024-43482 (severity: MEDIUM, weakness: CWE-285)
Microsoft Outlook for iOS Information Disclosure Vulnerability
CVE-2024-43483 (severity: HIGH, weakness: CWE-407)
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVE-2024-43484 (severity: HIGH, weakness: CWE-407)
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVE-2024-43485 (severity: HIGH, weakness: CWE-407)
.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-43487 (severity: MEDIUM, weakness: CWE-693)
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2024-43488 (severity: CRITICAL, weakness: CWE-306)
Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.
CVE-2024-43489 (severity: HIGH, weakness: CWE-843)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-4349 (severity: HIGH, weakness: CWE-434)
A vulnerability has been found in SourceCodester Pisay Online E-Learning System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /lesson/controller.php. The manipulation of the argument file leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-262489 was assigned to this vulnerability.
CVE-2024-43491 (severity: CRITICAL, weakness: CWE-416)
Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10, version 1507 (initial version released July 2015). This means that an attacker could exploit these previously mitigated vulnerabilities on Windows 10, version 1507 (Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB) systems that have installed the Windows security update released on March 12, 2024—KB5035858 (OS Build 10240.20526) or other updates released until August 2024. All later versions of Windows 10 are not impacted by this vulnerability. This servicing stack vulnerability is addressed by installing the September 2024 Servicing stack update (SSU KB5043936) AND the September 2024 Windows security update (KB5043083), in that order. Note: Windows 10, version 1507 reached the end of support (EOS) on May 9, 2017 for devices running the Pro, Home, Enterprise, Education, and Enterprise IoT editions. Only Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB editions are still under support.
CVE-2024-43492 (severity: HIGH, weakness: CWE-284)
Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
CVE-2024-43495 (severity: HIGH, weakness: CWE-190)
Windows libarchive Remote Code Execution Vulnerability
CVE-2024-43496 (severity: HIGH, weakness: CWE-787)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-43497 (severity: HIGH, weakness: CWE-77)
DeepSpeed Remote Code Execution Vulnerability
CVE-2024-43498 (severity: CRITICAL, weakness: CWE-843)
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-43499 (severity: HIGH, weakness: CWE-409)
.NET and Visual Studio Denial of Service Vulnerability