yahoo-inc/cve-impacts huggingface dataset:
CVE-2024-2211: Cross-Site Scripting stored vulnerability in Gophish affecting version 0.12.1. This vulnerability could allow an attacker to store a malicious JavaScript payload in the campaign menu and trigger the payload when the campaign is removed from the menu.
Key phrases: store a malicious JavaScript payload in the campaign, cross-site scripting
CVE-2024-22113: Open redirect vulnerability in Access analysis CGI An-Analyzer released in 2023 December 31 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary websites and conduct phishing attacks via a specially crafted URL.
Key phrases: redirect users to arbitrary websites and conduct phishing, open redirect
CVE-2024-22119: The cause of vulnerability is improper validation of form input field Name on Graph page in Items section.
CVE-2024-2212: In Eclipse ThreadX before 6.4.0,  xQueueCreate() and xQueueCreateSet() functions from the FreeRTOS compatibility API (utility/rtos_compatibility_layers/FreeRTOS/tx_freertos.c) were missing parameter checks. This could lead to integer wraparound, under-allocations and heap buffer overflows.
Key phrases: integer wraparound, under-allocations, heap buffer overflows
CVE-2024-22124: Under certain conditions,Internet Communication Manager (ICM) orSAP Web Dispatcher - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22_EXT, WEBDISP 7.22_EXT, WEBDISP 7.53, WEBDISP 7.54, couldallow an attacker to access information which would otherwise be restricted causing high impact on confidentiality.
Key phrases: high impact, confidentiality
CVE-2024-22125: Under certain conditions the Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge)- version 1.0, allows an attacker to access highly sensitive information which would otherwise be restricted causing high impact on confidentiality.
Key phrases: access highly sensitive information which would otherwise be, confidentiality
CVE-2024-22126: The User Admin application of SAP NetWeaver AS for Java - version 7.50, insufficiently validates and improperly encodesthe incoming URL parameters before including them into the redirect URL. This results in Cross-Site Scripting (XSS) vulnerability, leading to a high impact on confidentiality and mild impact on integrity and availability.
Key phrases: cross-site scripting (xss), high impact on confidentiality, integrity, integrity and availability
CVE-2024-22127: SAP NetWeaver Administrator AS Java (Administrator Log Viewer plug-in) - version 7.50, allows an attacker with high privileges to upload potentially dangerous fileswhich leads to command injection vulnerability. This would enable the attacker to run commands which can cause high impact on confidentiality, integrity and availability of the application.
Key phrases: upload potentially dangerous fileswhich leads to command injection, high impact, run commands, confidentiality, confidentiality and integrity, integrity and availability
CVE-2024-22128: SAP NWBC for HTML - versions SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_UI 758, SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. An unauthenticated attacker can inject malicious javascript to cause limited impact to confidentiality and integrity of the application data after successful exploitation.
Key phrases: cross-site scripting (xss), limited impact, confidentiality, confidentiality and integrity
CVE-2024-22129: SAP Companion - version <3.1.38, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information and cause minor impact on the integrity of the web application.
Key phrases: retrieve the sensitive information and cause minor impact, xss, integrity
CVE-2024-22130: Print preview option inSAP CRM WebClient UI - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, S4FND 108, WEBCUIF 700, WEBCUIF 701, WEBCUIF 730, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability. An attacker with low privileges can cause limited impact to confidentiality and integrity of the appliaction data after successful exploitation.
Key phrases: cross-site scripting, limited impact, confidentiality, confidentiality and integrity
CVE-2024-22131: In SAP ABA (Application Basis) - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75I, an attacker authenticated as a user with a remote execution authorization can use a vulnerable interface. This allows the attacker to use the interface toinvokean application function to perform actions which they would not normally be permitted to perform. Depending on the function executed, the attack can read or modify any user/business data and can make the entire system unavailable.
Key phrases: use the interface toinvokean application function to perform, vulnerable interface, unavailable
CVE-2024-22132: SAP IDES ECC-systems contain code that permits the execution of arbitrary program code of user's choice.An attacker can therefore control the behaviour of the system by executing malicious code which can potentially escalate privileges with low impact on confidentiality, integrity and availability of the system.
Key phrases: malicious code, low impact, escalate privilege, confidentiality, confidentiality and integrity, integrity and availability
CVE-2024-22133: SAP Fiori Front End Server - version 605, allows altering of approver details on the read-only field when sending leave request information. This could lead to creation of request with incorrect approver causing low impact on Confidentiality and Integrity with no impact onAvailability of the application.
Key phrases: creation of request with incorrect approver causing low, approver details, confidentiality and integrity
CVE-2024-22134: Server-Side Request Forgery (SSRF) vulnerability in Renzo Johnson Contact Form 7 Extension For Mailchimp.This issue affects Contact Form 7 Extension For Mailchimp: from n/a through 0.5.70.
Key phrases: server-side request forgery (ssrf)
CVE-2024-22135: Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Order Export & Order Import for WooCommerce.This issue affects Order Export & Order Import for WooCommerce: from n/a through 2.4.3.
Key phrases: dangerous type
CVE-2024-22136: Cross-Site Request Forgery (CSRF) vulnerability in DroitThemes Droit Elementor Addons  Widgets, Blocks, Templates Library For Elementor Builder.This issue affects Droit Elementor Addons  Widgets, Blocks, Templates Library For Elementor Builder: from n/a through 3.1.5.
Key phrases: cross-site request forgery (csrf)
CVE-2024-22137: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MailMunch Constant Contact Forms by MailMunch allows Stored XSS.This issue affects Constant Contact Forms by MailMunch: from n/a through 2.0.11.
Key phrases: Stored XSS.This issue affects Constant Contact Forms by, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2024-22138: Insertion of Sensitive Information into Log File vulnerability in Seraphinite Solutions Seraphinite Accelerator.This issue affects Seraphinite Accelerator: from n/a through 2.20.47.
Key phrases: insertion of sensitive information
CVE-2024-2214: In Eclipse ThreadX before version 6.4.0, the _Mtxinit() function in the Xtensa port was missing an array size check causing a memory overwrite. The affected file was ports/xtensa/xcc/src/tx_clib_lock.c
Key phrases: memory overwrite
CVE-2024-22140: Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder Pro: from n/a through 3.10.0.
Key phrases: cross-site request forgery (csrf)
CVE-2024-22141: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder Pro: from n/a through 3.10.0.
Key phrases: exposure of sensitive information
CVE-2024-22142: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Profile Builder Pro allows Reflected XSS.This issue affects Profile Builder Pro: from n/a through 3.10.0.
Key phrases: Reflected XSS.This issue affects Profile Builder Pro:, improper neutralization of input during web page generation, cross-site scripting, reflected xss
CVE-2024-22143: Cross-Site Request Forgery (CSRF) vulnerability in WP Spell Check.This issue affects WP Spell Check: from n/a through 9.17.
Key phrases: cross-site request forgery (csrf)
CVE-2024-22146: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.25.
Key phrases: Stored XSS.This issue affects Schema & Structured Data, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2024-22147: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce.This issue affects PDF Invoices & Packing Slips for WooCommerce: from n/a through 3.7.5.
Key phrases: sql command, sql injection
CVE-2024-22148: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Smart Editor JoomUnited allows Reflected XSS.This issue affects JoomUnited: from n/a through 1.3.3.
Key phrases: Reflected XSS.This issue affects JoomUnited: from n, improper neutralization of input during web page generation, cross-site scripting, reflected xss
CVE-2024-22149: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oliver Seidel, Bastian Germann CformsII allows Stored XSS.This issue affects CformsII: from n/a through 15.0.5.
Key phrases: Stored XSS.This issue affects CformsII: from n, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2024-2215: A cross-site request forgery (CSRF) vulnerability in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers to connect to an attacker-specified TCP or Unix socket URL, and to reconfigure the plugin using the provided connection test parameters, affecting future build step executions.
Key phrases: connect to an attacker-specified TCP or, cross-site request forgery (csrf), future build step executions, cross site request forgery
CVE-2024-22150: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PWR Plugins Portfolio & Image Gallery for WordPress | PowerFolio allows Stored XSS.This issue affects Portfolio & Image Gallery for WordPress | PowerFolio: from n/a through 3.1.
Key phrases: Stored XSS.This issue affects Portfolio & Image Gallery, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2024-22152: Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This issue affects Product Import Export for WooCommerce: from n/a through 2.3.7.
Key phrases: dangerous type
CVE-2024-22153: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood & Alexandre Faustino Stock Locations for WooCommerce allows Stored XSS.This issue affects Stock Locations for WooCommerce: from n/a through 2.5.9.
Key phrases: Stored XSS.This issue affects Stock Locations for WooCommerce, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2024-22154: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SNP Digital SalesKing.This issue affects SalesKing: from n/a through 1.6.15.
Key phrases: exposure of sensitive information
CVE-2024-22156: Missing Authorization vulnerability in SNP Digital SalesKing.This issue affects SalesKing: from n/a through 1.6.15.
Key phrases: missing authorization
CVE-2024-22158: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PeepSo Community by PeepSo  Social Network, Membership, Registration, User Profiles allows Stored XSS.This issue affects Community by PeepSo  Social Network, Membership, Registration, User Profiles: from n/a before 6.3.1.0.
Key phrases: Stored XSS.This issue affects Community by PeepSo  , improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2024-22159: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WOLF  WordPress Posts Bulk Editor and Manager Professional allows Reflected XSS.This issue affects WOLF  WordPress Posts Bulk Editor and Manager Professional: from n/a through 1.0.8.
Key phrases: Reflected XSS.This issue affects WOLF  WordPress Posts, improper neutralization of input during web page generation, cross-site scripting, reflected xss
CVE-2024-2216: A missing permission check in an HTTP endpoint in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified TCP or Unix socket URL, and to reconfigure the plugin using the provided connection test parameters, affecting future build step executions.
Key phrases: connect to an attacker-specified TCP or, missing permission check, future build step executions
CVE-2024-22160: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bradley B. Dalina Image Tag Manager allows Reflected XSS.This issue affects Image Tag Manager: from n/a through 1.5.
Key phrases: Reflected XSS.This issue affects Image Tag Manager:, improper neutralization of input during web page generation, cross-site scripting, reflected xss
CVE-2024-22161: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Harmonic Design HD Quiz allows Stored XSS.This issue affects HD Quiz: from n/a through 1.8.11.
Key phrases: Stored XSS.This issue affects HD Quiz: from, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2024-22162: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM Shortcodes allows Reflected XSS.This issue affects WPZOOM Shortcodes: from n/a through 1.0.1.
Key phrases: Reflected XSS.This issue affects WPZOOM Shortcodes: from, improper neutralization of input during web page generation, cross-site scripting, reflected xss
CVE-2024-22163: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shield Security Shield Security  Smart Bot Blocking & Intrusion Prevention Security allows Stored XSS.This issue affects Shield Security  Smart Bot Blocking & Intrusion Prevention Security: from n/a through 18.5.7.
Key phrases: Stored XSS.This issue affects Shield Security  Smart, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2024-22164: In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service (DoS) to the Investigation. The attachment endpoint does not properly limit the size of the request which lets an attacker cause the Investigation to become inaccessible.
Key phrases: denial of service (DoS), investigation attachments, denial of service (dos), attachment endpoint, inaccessible
CVE-2024-22165: In Splunk Enterprise Security (ES) versions lower than 7.1.2, an attacker can create a malformed Investigation to perform a denial of service (DoS). The malformed investigation prevents the generation and rendering of the Investigations manager until it is deleted.<br>The vulnerability requires an authenticated session and access to create an Investigation. It only affects the availability of the Investigations manager, but without the manager, the Investigations functionality becomes unusable for most users.
Key phrases: denial of service (DoS), malformed investigation, availability, unusable
CVE-2024-22167: A potential DLL hijacking vulnerability in the SanDisk PrivateAccess application for Windows that could lead to arbitrary code execution in the context of the system user. This vulnerability is only exploitable locally if an attacker has access to a copy of the user's vault or has already gained access into a user's system. This attack is limited to the system in context and cannot be propagated.
Key phrases: dll hijacking, propagated, arbitrary code, arbitrary code execution
CVE-2024-22177: in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through get permission.
Key phrases: a local attacker cause apps crash through get
CVE-2024-22178: A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attacker can send a sequence of requests to trigger this vulnerability.
Key phrases: file write, network requests, arbitrary file creation, overwrite
CVE-2024-22180: in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through use after free.
Key phrases: a local attacker cause DOS through use after, dos, use after free
CVE-2024-22182: A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM causing the system to restart, interrupting service.
Key phrases: interrupting service
CVE-2024-22188: TYPO3 before 13.0.1 allows an authenticated admin user (with system maintainer privileges) to execute arbitrary shell commands (with the privileges of the web server) via a command injection vulnerability in form fields of the Install Tool. The fixed versions are 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, and 13.0.1.
Key phrases: execute arbitrary shell commands, execute arbitrary shell commands (with the privileges, command injection
CVE-2024-22190: GitPython is a python library used to interact with Git repositories. There is an incomplete fix for CVE-2023-40590. On Windows, GitPython uses an untrusted search path if it uses a shell to run `git`, as well as when it runs `bash.exe` to interpret hooks. If either of those features are used on Windows, a malicious `git.exe` or `bash.exe` may be run from an untrusted repository. This issue has been patched in version 3.1.41.
CVE-2024-22191: Avo is a framework to create admin panels for Ruby on Rails apps. A stored cross-site scripting (XSS) vulnerability was found in the key_value field of Avo v3.2.3 and v2.46.0. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the victim's browser. The value of the key_value is inserted directly into the HTML code. In the current version of Avo (possibly also older versions), the value is not properly sanitized before it is inserted into the HTML code. This vulnerability could be used to steal sensitive information from victims that could be used to hijack victims' accounts or redirect them to malicious websites. Avo 3.2.4 and 2.47.0 include a fix for this issue. Users are advised to upgrade.
Key phrases: execute arbitrary JavaScript code, execute arbitrary JavaScript code in the victim's, stored cross-site scripting (xss), sensitive information, hijack
CVE-2024-22192: Ursa is a cryptographic library for use with blockchains. The revocation scheme that is part of the Ursa CL-Signatures implementations has a flaw that could impact the privacy guarantees defined by the AnonCreds verifiable credential model. Notably, a malicious verifier may be able to generate a unique identifier for a holder providing a verifiable presentation that includes a Non-Revocation proof. The impact of the flaw is that a malicious verifier may be able to determine a unique identifier for a holder presenting a Non-Revocation proof. Ursa has moved to end-of-life status and no fix is expected.
CVE-2024-22193: The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). There are no checks on whether the input is encrypted if a task is created in an encrypted collaboration. Therefore, a user may accidentally create a task with sensitive input data that will then be stored unencrypted in a database.  Users should ensure they set the encryption setting correctly.  This vulnerability is patched in 4.2.0.
CVE-2024-22194: cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in `cdo-local-uuid` at version `0.4.0`, and in `case-utils` in unpatched versions (matching the pattern `0.x.0`) at and since `0.5.0`, before `0.15.0`. The vulnerability stems from a Python function, `cdo_local_uuid.local_uuid()`, and its original implementation `case_utils.local_uuid()`. 
Key phrases: information leakage
CVE-2024-22195: Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting (XSS). The Jinja `xmlattr` filter can be abused to inject arbitrary HTML attribute keys and values, bypassing the auto escaping mechanism and potentially leading to XSS. It may also be possible to bypass attribute validation checks if they are blacklist-based.
Key phrases: inject arbitrary HTML attribute keys, bypass attribute validation, Python syntax, cross-site scripting (xss)
CVE-2024-22196: Nginx-UI is an online statistics for Server Indicators?? Monitor CPU usage, memory usage, load average, and disk usage in real-time. This issue may lead to information disclosure. By using `DefaultQuery`, the `"desc"` and `"id"` values are used as default values if the query parameters are not set. Thus, the `order` and `sort_by` query parameter are user-controlled and are being appended to the `order` variable without any sanitization. This issue has been patched in version 2.0.0.beta.9.
Key phrases: information disclosure
CVE-2024-22197: Nginx-ui is online statistics for Server Indicators?? Monitor CPU usage, memory usage, load average, and disk usage in real-time. The `Home > Preference` page exposes a small list of nginx settings such as `Nginx Access Log Path` and `Nginx Error Log Path`. However, the API also exposes `test_config_cmd`, `reload_cmd` and `restart_cmd`. While the UI doesn't allow users to modify any of these settings, it is possible to do so by sending a request to the API. This issue may lead to authenticated Remote Code Execution, Privilege Escalation, and Information Disclosure. This issue has been patched in version 2.0.0.beta.9.
Key phrases: modify any of these settings, remote code execution, privilege escalation, information disclosure
CVE-2024-22198: Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to arbitrary command execution by abusing the configuration settings. The `Home > Preference` page exposes a list of system settings such as `Run Mode`, `Jwt Secret`, `Node Secret` and `Terminal Start Command`. While the UI doesn't allow users to modify the `Terminal Start Command` setting, it is possible to do so by sending a request to the API. This issue may lead to authenticated remote code execution, privilege escalation, and information disclosure. This vulnerability has been patched in version 2.0.0.beta.9.
Key phrases: modify the `Terminal Start Command` setting, arbitrary command execution, remote code execution, privilege escalation, information disclosure, arbitrary commands
CVE-2024-22199: This package provides universal methods to use multiple template engines with the Fiber web framework using the Views interface. This vulnerability specifically impacts web applications that render user-supplied data through this template engine, potentially leading to the execution of malicious scripts in users' browsers when visiting affected web pages. The vulnerability has been addressed, the template engine now defaults to having autoescape set to `true`, effectively mitigating the risk of XSS attacks.
Key phrases: xss
CVE-2024-22200: vantage6-UI is the User Interface for vantage6. The docker image used to run the UI leaks the nginx version. To mitigate the vulnerability, users can run the UI as an angular application.  This vulnerability was patched in 4.2.0.
CVE-2024-22201: Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file descriptors, eventually causing the server to stop accepting new connections from valid clients. The vulnerability is patched in 9.4.54, 10.0.20, 11.0.20, and 12.0.6.
Key phrases: tcp congested
CVE-2024-22202: phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. phpMyFAQ's user removal page allows an attacker to spoof another user's detail, and in turn make a compelling phishing case for removing another user's account. The front-end of this page doesn't allow changing the form details, an attacker can utilize a proxy to intercept this request and submit other data. Upon submitting this form, an email is sent to the administrator informing them that this user wants to delete their account. An administrator has no way of telling the difference between the actual user wishing to delete their account or the attacker issuing this for an account they do not control. This issue has been patched in version 3.2.5.
Key phrases: spoof another user's detail, intercept this request and submit other data, phishing case, spoofing
CVE-2024-22203: Whoogle Search is a self-hosted metasearch engine. In versions prior to 0.8.4, the `element` method in `app/routes.py` does not validate the user-controlled `src_type` and `element_url` variables and passes them to the `send` method which sends a GET request on lines 339-343 in `request.py`, which leads to a server-side request forgery. This issue allows for crafting GET requests to internal and external resources on behalf of the server. For example, this issue would allow for accessing resources on the internal network that the server has access to, even though these resources may not be accessible on the internet. This issue is fixed in version 0.8.4.
Key phrases: internal and external resources on behalf of the, server-side request forgery, server side request forgery
CVE-2024-22204: Whoogle Search is a self-hosted metasearch engine. Versions 0.8.3 and prior have a limited file write vulnerability when the configuration options in Whoogle are enabled. The `config` function in `app/routes.py` does not validate the user-controlled `name` variable on line 447 and `config_data` variable on line 437. The `name` variable is insecurely concatenated in `os.path.join`, leading to path manipulation. The POST data from the `config_data` variable is saved with `pickle.dump` which leads to a limited file write. However, the data that is saved is earlier transformed into a dictionary and the `url` key value pair is added before the file is saved on the system. All in all, the issue allows us to save and overwrite files on the system that the application has permissions to, with a dictionary containing arbitrary data and the `url` key value, which is a limited file write. Version 0.8.4 contains a patch for this issue.
Key phrases: containing arbitrary data, save and overwrite files on the system that, limited file write
CVE-2024-22205: Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `window` endpoint does not sanitize user-supplied input from the `location` variable and passes it to the `send` method which sends a `GET` request on lines 339-343 in `request.py,` which leads to a server-side request forgery. This issue allows for crafting GET requests to internal and external resources on behalf of the server. For example, this issue would allow for accessing resources on the internal network that the server has access to, even though these resources may not be accessible on the internet. This issue is fixed in version 0.8.4.
Key phrases: internal and external resources on behalf of the, server-side request forgery, server side request forgery
CVE-2024-22206: Clerk helps developers build user management. Unauthorized access or privilege escalation due to a logic flaw in auth() in the App Router or getAuth() in the Pages Router. This vulnerability was patched in version 4.29.3.
Key phrases: unauthorized access, privilege escalation, logic flaw
CVE-2024-22207: fastify-swagger-ui is a Fastify plugin for serving Swagger UI.  Prior to 2.1.0, the default configuration of `@fastify/swagger-ui` without `baseDir` set will lead to all files in the module's directory being exposed via http routes served by the module.  The vulnerability is fixed in v2.1.0. Setting the `baseDir` option can also work around this vulnerability.
CVE-2024-22208: phpMyFAQ is an Open Source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The 'sharing FAQ' functionality allows any unauthenticated actor to misuse the phpMyFAQ application to send arbitrary emails to a large range of targets. The phpMyFAQ application has a functionality where anyone can share a FAQ item to others. The front-end of this functionality allows any phpMyFAQ articles to be shared with 5 email addresses. Any unauthenticated actor can perform this action. There is a CAPTCHA in place, however the amount of people you email with a single request is not limited to 5 by the backend. An attacker can thus solve a single CAPTCHA and send thousands of emails at once. An attacker can utilize the target application's email server to send phishing messages. This can get the server on a blacklist, causing all emails to end up in spam. It can also lead to reputation damages. This issue has been patched in version 3.2.5.
Key phrases: send arbitrary emails, misuse the phpMyFAQ application to send arbitrary emails, be shared with 5 email addresses, reputation damages
CVE-2024-22209: Open edX Platform is a service-oriented platform for authoring and delivering online learning. A user with a JWT and more limited scopes could call endpoints exceeding their access. This vulnerability has been patched in commit 019888f.
CVE-2024-22211: FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in `freerdp_bitmap_planar_context_reset` leads to heap-buffer overflow. This affects FreeRDP based clients. FreeRDP based server implementations and proxy are not affected. A malicious server could prepare a `RDPGFX_RESET_GRAPHICS_PDU` to allocate too small buffers, possibly triggering later out of bound read/write. Data extraction over network is not possible, the buffers are used to display an image. This issue has been addressed in version 2.11.5 and 3.2.0. Users are advised to upgrade. there are no know workarounds for this vulnerability.
Key phrases: integer overflow, heap-buffer overflow, out of bound read write, data extraction over network, heap buffer overflow
CVE-2024-22212: Nextcloud Global Site Selector is a tool which allows you to run multiple small Nextcloud instances and redirect users to the right server. A problem in the password verification method allows an attacker to authenticate as another user. It is recommended that the Nextcloud Global Site Selector is upgraded to version 1.4.1, 2.1.2, 2.3.4 or 2.4.5. There are no known workarounds for this issue.
Key phrases: run multiple small Nextcloud instances and redirect users, authenticate as another user, password verification method
CVE-2024-22213: Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. In affected versions users could be tricked into executing malicious code that would execute in their browser via HTML sent as a comment. It is recommended that the Nextcloud Deck is upgraded to version 1.9.5 or 1.11.2. There are no known workarounds for this vulnerability.
Key phrases: malicious code
CVE-2024-22216: In default installations of Microchip maxView Storage Manager (for Adaptec Smart Storage Controllers) where Redfish server is configured for remote system management, unauthorized access can occur, with data modification and information disclosure. This affects 3.00.23484 through 4.14.00.26064 (except for the patched versions 3.07.23980 and 4.07.00.25339).
Key phrases: unauthorized access, data modification, information disclosure
CVE-2024-22220: An issue was discovered in Terminalfour 7.4 through 7.4.0004 QP3 and 8 through 8.3.19, and Formbank through 2.1.10-FINAL. Unauthenticated Stored Cross-Site Scripting can occur, with resultant Admin Session Hijacking. The attack vectors are Form Builder and Form Preview.
Key phrases: stored cross-site scripting, admin session hijacking, form builder, form preview
CVE-2024-22221: Dell Unity, versions prior to 5.4, contains SQL Injection vulnerability. An authenticated attacker could potentially exploit this vulnerability, leading to exposure of sensitive information.
Key phrases: sql injection, exposure of sensitive information
CVE-2024-22222: Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability within its svc_udoctor utility. An authenticated malicious user with local access could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application.
Key phrases: os command injection, arbitrary os command
CVE-2024-22223: Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability within its svc_cbr utility. An authenticated malicious user with local access could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application.
Key phrases: os command injection, arbitrary os command
CVE-2024-22224: Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_nas utility. An authenticated attacker could potentially exploit this vulnerability, escaping the restricted shell and execute arbitrary operating system commands with root privileges.
Key phrases: execute arbitrary operating system, os command injection, root privilege
CVE-2024-22225: Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_supportassist utility. An authenticated attacker could potentially exploit this vulnerability, leading to execution of arbitrary operating system commands with root privileges.
Key phrases: os command injection, root privilege
CVE-2024-22226: Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svc_supportassist utility. An authenticated attacker could potentially exploit this vulnerability, to gain unauthorized write access to the files stored on the server filesystem, with elevated privileges.
Key phrases: gain unauthorized write access, path traversal, elevate privileges
CVE-2024-22227: Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_dc utility. An authenticated attacker could potentially exploit this vulnerability, leading to the ability execute commands with root privileges.
Key phrases: os command injection, execute commands, root privilege
CVE-2024-22228: Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_cifssupport utility. An authenticated attacker could potentially exploit this vulnerability, escaping the restricted shell and execute arbitrary operating system commands with root privileges.
Key phrases: execute arbitrary operating system, os command injection, root privilege
CVE-2024-22229: Dell Unity, versions prior to 5.4, contain a vulnerability whereby log messages can be spoofed by an authenticated attacker. An attacker could exploit this vulnerability to forge log entries, create false alarms, and inject malicious content into logs that compromise logs integrity. A malicious attacker could also prevent the product from logging information while malicious actions are performed or implicate an arbitrary user for malicious activities.
Key phrases: compromise logs integrity, spoofing
CVE-2024-22230: Dell Unity, versions prior to 5.4, contains a Cross-site scripting vulnerability. An authenticated attacker could potentially exploit this vulnerability, stealing session information, masquerading as the affected user or carry out any actions that this user could perform, or to generally control the victim's browser.
Key phrases: cross-site scripting
CVE-2024-22233: In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.Specifically, an application is vulnerable when all of the following are true:  *  the application uses Spring MVC  *  Spring Security 6.1.6+ or 6.2.1+ is on the classpathTypically, Spring Boot applications need the org.springframework.boot:spring-boot-starter-weband org.springframework.boot:spring-boot-starter-securitydependencies to meet all conditions.
Key phrases: denial-of-service (dos) condition, denial of service
CVE-2024-22234: In Spring Security, versions 6.1.x prior to 6.1.7 and versions 6.2.x prior to 6.2.2, an application is vulnerable to broken access control when it directly uses the AuthenticationTrustResolver.isFullyAuthenticated(Authentication)method.Specifically, an application is vulnerable if:  *  The application uses AuthenticationTrustResolver.isFullyAuthenticated(Authentication)directly and a nullauthentication parameter is passed to it resulting in an erroneous truereturn value.An application is not vulnerable if any of the following is true:  *  The application does not use AuthenticationTrustResolver.isFullyAuthenticated(Authentication)directly.  *  The application does not pass nullto AuthenticationTrustResolver.isFullyAuthenticated  *  The application only uses isFullyAuthenticatedvia  Method Security https://docs.spring.io/spring-security/reference/servlet/authorization/method-security.html or  HTTP Request Security https://docs.spring.io/spring-security/reference/servlet/authorization/authorize-http-requests.html 
Key phrases: broken access control
CVE-2024-22235: VMware Aria Operations contains a local privilege escalation vulnerability.A malicious actor with administrative access to the local system can escalate privileges to 'root'.
Key phrases: local privilege escalation, escalate privilege
CVE-2024-22236: In Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.10, test execution is vulnerable to local information disclosure via temporary directory created with unsafe permissions through the shaded com.google.guava:guavadependency in the org.springframework.cloud:spring-cloud-contract-shadedependency.
Key phrases: local information disclosure
CVE-2024-22237: Aria Operations for Networks contains a local privilege escalation vulnerability.A console user with access to Aria Operations for Networks may exploit this vulnerability to escalate privileges to gain root access to the system. 
Key phrases: gain root access, local privilege escalation, escalate privilege
CVE-2024-22238: Aria Operations for Networks contains a cross site scripting vulnerability.A malicious actor with admin privileges may be able to inject malicious code into user profile configurations due to improper input sanitization.  
Key phrases: cross site scripting, cross-site scripting
CVE-2024-22239: Aria Operations for Networks contains a local privilege escalation vulnerability.A console user with access to Aria Operations for Networks may exploit this vulnerability to escalate privileges to gain regular shell access.   
Key phrases: gain regular shell, local privilege escalation, regular shell access, escalate privilege
CVE-2024-22240: Aria Operations for Networks contains a local file read vulnerability.A malicious actor with admin privileges may exploit this vulnerability leading to unauthorized access to sensitive information.    
Key phrases: local file read, unauthorized access to sensitive information, access sensitive information
CVE-2024-22241: Aria Operations for Networks contains a cross site scripting vulnerability.A malicious actor with admin privileges can inject a malicious payload into the login banner and takeover the user account.     
Key phrases: cross site scripting, cross-site scripting
CVE-2024-22243: Applications that use UriComponentsBuilderto parse an externally provided URL (e.g. through a query parameter) ANDperform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html attack or to a SSRF attack if the URL is used after passing validation checks.
Key phrases: open redirect, ssrf
CVE-2024-22245: Arbitrary Authentication Relay and Session Hijack vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in (EAP) could allowamalicious actor that could trick a target domain user with EAP installed in their web browser into requesting and relaying service tickets for arbitrary Active Directory Service Principal Names (SPNs).
Key phrases: arbitrary authentication relay, session hijack
CVE-2024-22246: VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially leading to remote code execution.A malicious actor with local access to the Edge Router UI during activation may be able to perform a command injection attack that could lead to full control of the router. 
Key phrases: unauthenticated command injection, full control
CVE-2024-22247: VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability.A malicious actor with physical access to the SD-WAN Edge appliance during activation can potentially exploit this vulnerability to access the BIOS configuration. In addition, the malicious actor may be able to exploit the default boot priority configured.
Key phrases: authentication and protection mechanism, missing authentication
CVE-2024-22248: VMware SD-WAN Orchestrator contains an open redirect vulnerability.A malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure.
Key phrases: open redirect, sensitive information disclosure
CVE-2024-22250: Session Hijack vulnerability in Deprecated VMware Enhanced Authentication Plug-in could allow amalicious actor with unprivileged local access to a windows operating system can hijack a privileged EAP session when initiated by a privileged domain user on the same system.
Key phrases: a windows operating system can hijack a privileged, session hijack
CVE-2024-22251: VMware Workstation and Fusion contain an out-of-bounds read vulnerability in the USB CCID (chip card interface device).A malicious actor with local administrative privileges on a virtual machine may trigger an out-of-bounds read leading to information disclosure.
Key phrases: out-of-bounds read, information disclosure, out of bounds read
CVE-2024-22252: VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller.A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.
Key phrases: use-after-free, code execution, use after free, execute code
CVE-2024-22253: VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller.A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.
Key phrases: use-after-free, code execution, use after free, execute code
CVE-2024-22254: VMware ESXi contains an out-of-bounds write vulnerability.A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.
Key phrases: out-of-bounds write, escape of the sandbox, out of bounds write
CVE-2024-22255: VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller.A malicious actor with administrative access to a virtual machine may be able to exploit this issue to leak memory from the vmx process.
Key phrases: information disclosure, leak memory
CVE-2024-22256: VMware Cloud Director contains a partial information disclosure vulnerability.A malicious actor can potentially gather information about organization names based on the behavior of the instance.
Key phrases: partial information disclosure
CVE-2024-22257: In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1.x prior to 6.1.8, versions 6.2.x prior to 6.2.3, an application is possible vulnerable to broken access control when it directly uses the AuthenticatedVoter#vote passing a null Authentication parameter.
Key phrases: broken access control, null authentication parameter
CVE-2024-22258: Spring Authorization Server versions 1.0.0 - 1.0.5, 1.1.0 - 1.1.5, 1.2.0 - 1.2.2 and older unsupported versions are susceptible to a PKCE Downgrade Attack for Confidential Clients.Specifically, an application is vulnerable when a Confidential Clientuses PKCE for the Authorization Code Grant.An application is not vulnerable when a Public Clientuses PKCE for the Authorization Code Grant.
Key phrases: pkce downgrade
CVE-2024-22259: Applications that use UriComponentsBuilder in Spring Frameworkto parse an externally provided URL (e.g. through a query parameter) ANDperform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html attack or to a SSRF attack if the URL is used after passing validation checks.This is the same as  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.
Key phrases: open redirect, ssrf
CVE-2024-2227: This vulnerability allows access to arbitrary files in the application server file system due to a path traversal vulnerability in JavaServer Faces (JSF) 2.2.20 documented in CVE-2020-6950. The remediation for this vulnerability contained in this security fix provides additional changes to the remediation announced in May 2021 tracked by ETN IIQSAW-3585 and January 2024 tracked by IIQFW-336. This vulnerability in IdentityIQ is assigned CVE-2024-2227.
Key phrases: arbitrary files in the application server file system, path traversal
CVE-2024-2228: This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user outside of the defined QuickLink Population.
Key phrases: perform a Lifecycle Manager flow or other QuickLink
CVE-2024-22282: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Torbert SimpleMap Store Locator allows Reflected XSS.This issue affects SimpleMap Store Locator: from n/a through 2.6.1.
Key phrases: Reflected XSS.This issue affects SimpleMap Store Locator:, improper neutralization of input during web page generation, cross-site scripting, reflected xss
CVE-2024-22283: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Delhivery Delhivery Logistics Courier.This issue affects Delhivery Logistics Courier: from n/a through 1.0.107.
Key phrases: sql command, sql injection