yahoo-inc/cve-impacts huggingface dataset:
CVE-2024-21488: Versions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the child_process exec function without input sanitization. If (attacker-controlled) user input is given to the mac_address_for function of the package, it is possible for the attacker to execute arbitrary commands on the operating system that this package is being run on.
Key phrases: execute arbitrary commands, arbitrary command injection
CVE-2024-2149: A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0. This vulnerability affects unknown code of the file settings.php. The manipulation of the argument currency leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-255502 is the identifier assigned to this vulnerability.
Key phrases: sql injection
CVE-2024-21490: This affects versions of the package angular from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in catastrophic backtracking and cause a denial of service. **Note:**This package is EOL and will not receive any updates to address this issue. Users should migrate to [@angular/core](https://www.npmjs.com/package/@angular/core).
Key phrases: super-linear runtime, catastrophic backtracking, denial of service
CVE-2024-21491: Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures of different lengths are incorrectly compared. An attacker can bypass signature verification by providing a shorter signature that matches the beginning of the actual signature.**Note:**The attacker would need to know a victim uses the Rust library for verification,no easy way to automatically check that; and uses webhooks by a service that uses Svix, and then figure out a way to craft a malicious payload that will actually include all of the correct identifiers needed to trick the receivers to cause actual issues.
Key phrases: Bypass due to an issue in the verify function, bypass signature verification, Authentication Bypass, authentication bypass, malicious payload, issues
CVE-2024-21492: All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient Session Expiration due to improper user session invalidation upon clicking the "Sign Out" button. User sessions remain valid even after requests are sent to /logout and /oauth2/google/logout. Attackers who gain access to an active but supposedly logged-out session can perform unauthorized actions on behalf of the user.
Key phrases: gain access, insufficient session expiration
CVE-2024-21493: All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Validation of Array Index when parsing a Caddyfile. Multiple parsing functions in the affected library do not validate whether their input values are nil before attempting to access elements, which can lead to a panic (index out of range). Panics during the parsing of a configuration file may introduce ambiguity and vulnerabilities, hindering the correct interpretation and configuration of the web server.
Key phrases: improper validation of array index
CVE-2024-21494: All versions of the package github.com/greenpau/caddy-security are vulnerable to Authentication Bypass by Spoofing via the X-Forwarded-For header due to improper input sanitization. An attacker can spoof an IP address used in the user identity module (/whoami API endpoint). This could lead to unauthorized access if the system trusts this spoofed IP address.
Key phrases: Bypass by Spoofing via the X-Forwarded, Authentication Bypass, authentication bypass by spoofing via the x-forwarded-for header, unauthorized access
CVE-2024-21495: Versions of the package github.com/greenpau/caddy-security before 1.0.42 are vulnerable to Insecure Randomness due to using an insecure random number generation library which could possibly be predicted via a brute-force search. Attackers could use the potentially predictable nonce value used for authentication purposes in the OAuth flow to conduct OAuth replay attacks. In addition, insecure randomness is used while generating multifactor authentication (MFA) secrets and creating API keys in the database package.
Key phrases: insecure randomness, brute-force search, oauth replay
CVE-2024-21496: All versions of the package github.com/greenpau/caddy-security are vulnerable to Cross-site Scripting (XSS) via the Referer header, due to improper input sanitization. Although the Referer header is sanitized by escaping some characters that can allow XSS (e.g., [&], [<], [>], ["], [']), it does not account for the attack based on the JavaScript URL scheme (e.g., javascript:alert(document.domain)// payload). Exploiting this vulnerability may not be trivial, but it could lead to the execution of malicious scripts in the context of the target users browser, compromising user sessions.
Key phrases: the execution of malicious scripts in the context, cross-site scripting (xss), javascript url scheme, compromising user sessions
CVE-2024-21497: All versions of the package github.com/greenpau/caddy-security are vulnerable to Open Redirect via the redirect_url parameter. An attacker could perform a phishing attack and trick users into visiting a malicious website by crafting a convincing URL with this parameter. To exploit this vulnerability, the user must take an action, such as clicking on a portal button or using the browsers back button, to trigger the redirection.
Key phrases: open redirect, phishing
CVE-2024-21498: All versions of the package github.com/greenpau/caddy-security are vulnerable to Server-side Request Forgery (SSRF) via X-Forwarded-Host header manipulation. An attacker can expose sensitive information, interact with internal services, or exploit other vulnerabilities within the network by exploiting this vulnerability.
Key phrases: server-side request forgery (ssrf), x-forwarded-host header manipulation, sensitive information
CVE-2024-21499: All versions of the package github.com/greenpau/caddy-security are vulnerable to HTTP Header Injection via the X-Forwarded-Proto header due to redirecting to the injected protocol.Exploiting this vulnerability could lead to bypass of security mechanisms or confusion in handling TLS.
Key phrases: bypass of security mechanisms or confusion in handling TLS, http header injection, confusion in handling tls, bypass security
CVE-2024-2150: A vulnerability, which was classified as critical, has been found in SourceCodester Insurance Management System 1.0. This issue affects some unknown processing. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255503.
Key phrases: file inclusion
CVE-2024-21500: All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Restriction of Excessive Authentication Attempts via the two-factor authentication (2FA). Although the application blocks the user after several failed attempts to provide 2FA codes, attackers can bypass this blocking mechanism by automating the applications full multistep 2FA process.
Key phrases: bypass this blocking mechanism by automating the applications, improper restriction of excessive authentication attempts
CVE-2024-21501: Versions of the package sanitize-html before 2.12.1 are vulnerable to Information Exposure when used on the backend and with the style attribute allowed, allowing enumeration of files in the system (including project dependencies). An attacker could exploit this vulnerability to gather details about the file system structure and dependencies of the targeted server.
Key phrases: gather details about the file system structure and, information exposure
CVE-2024-21502: Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemath_mul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual value it could be arbitrary free(), arbitrary realloc(), null pointer dereference and other. Since the stack can be controlled by the attacker, the vulnerability could be used to corrupt allocator structure, leading to possible heap exploitation. The attacker could cause denial of service by exploiting this vulnerability.
Key phrases: use of uninitialized variable on the stack, null pointer dereference, heap exploitation, denial of service
CVE-2024-21503: Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.Exploiting this vulnerability is possible when running Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings.
Key phrases: Denial of Service (ReDoS), regular expression denial of service (redos), malicious input, untrusted input
CVE-2024-21504: Versions of the package livewire/livewire from 3.3.5 and before 3.4.9 are vulnerable to Cross-site Scripting (XSS) when a page uses [Url] for a property. An attacker can inject HTML code in the context of the user's browser session by crafting a malicious link and convincing the user to click on it.
Key phrases: cross-site scripting (xss), malicious link, convince
CVE-2024-21505: Versions of the package web3-utils before 4.2.1 are vulnerable to Prototype Pollution via the utility functions format and mergeDeep, due to insecure recursive merge.An attacker can manipulate an object's prototype, potentially leading to the alteration of the behavior of all objects inheriting from the affected prototype by passing specially crafted input to these functions.
Key phrases: prototype pollution
CVE-2024-2151: A vulnerability classified as problematic was found in SourceCodester Online Mobile Management Store 1.0. Affected by this vulnerability is an unknown functionality of the component Product Price Handler. The manipulation of the argument quantity with the input -1 leads to business logic errors. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255583.
CVE-2024-2152: A vulnerability, which was classified as critical, has been found in SourceCodester Online Mobile Management Store 1.0. Affected by this issue is some unknown functionality of the file /admin/product/manage_product.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-255584.
Key phrases: sql injection
CVE-2024-2153: A vulnerability, which was classified as critical, was found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of the file /admin/orders/view_order.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-255585 was assigned to this vulnerability.
Key phrases: sql injection
CVE-2024-2154: A vulnerability has been found in SourceCodester Online Mobile Management Store 1.0 and classified as critical. This vulnerability affects unknown code of the file view_product.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-255586 is the identifier assigned to this vulnerability.
Key phrases: sql injection
CVE-2024-2155: A vulnerability was found in SourceCodester Best POS Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255587.
Key phrases: file inclusion
CVE-2024-2156: A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. Affected is an unknown function of the file admin_class.php. The manipulation of the argument img leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-255588.
Key phrases: sql injection
CVE-2024-21584: Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability. If an attacker tricks the user to access the product with a specially crafted URL and perform a specific operation, an arbitrary script may be executed on the web browser of the user.
Key phrases: cross-site scripting, arbitrary script
CVE-2024-21585: An Improper Handling of Exceptional Conditions vulnerability in BGP session processing of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker, using specific timing outside the attacker's control, to flap BGP sessions and cause the routing protocol daemon (rpd) process to crash and restart, leading to a Denial of Service (DoS) condition. Continued BGP session flapping will create a sustained Denial of Service (DoS) condition.This issue only affects routers configured with non-stop routing (NSR) enabled. Graceful Restart (GR) helper mode, enabled by default, is also required for this issue to be exploitable.Note: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability.When the BGP session flaps on the NSR-enabled router, the device enters GR-helper/LLGR-helper mode due to the peer having negotiated GR/LLGR-restarter capability and the backup BGP requests for replication of the GR/LLGR-helper session, master BGP schedules, and initiates replication of GR/LLGR stale routes to the backup BGP. In this state, if the BGP session with the BGP peer comes up again, unsolicited replication is initiated for the peer without cleaning up the ongoing GR/LLGR-helper mode replication. This parallel two instances of replication for the same peer leads to the assert if the BGP session flaps again.This issue affects:Juniper Networks Junos OS  *  All versions earlier than 20.4R3-S9;  *  21.2 versions earlier than 21.2R3-S7;  *  21.3 versions earlier than 21.3R3-S5;  *  21.4 versions earlier than 21.4R3-S5;  *  22.1 versions earlier than 22.1R3-S4;  *  22.2 versions earlier than 22.2R3-S3;  *  22.3 versions earlier than 22.3R3-S1;  *  22.4 versions earlier than 22.4R2-S2, 22.4R3;  *  23.2 versions earlier than 23.2R1-S1, 23.2R2.Juniper Networks Junos OS Evolved  *  All versions earlier than 21.3R3-S5-EVO;  *  21.4 versions earlier than 21.4R3-S5-EVO;  *  22.1 versions earlier than 22.1R3-S4-EVO;  *  22.2 versions earlier than 22.2R3-S3-EVO;  *  22.3 versions earlier than 22.3R3-S1-EVO;  *  22.4 versions earlier than 22.4R2-S2-EVO, 22.4R3-EVO;  *  23.2 versions earlier than 23.2R1-S1-EVO, 23.2R2-EVO.
Key phrases: Denial of Service (DoS), flap BGP sessions and cause the routing protocol, improper handling of exceptional conditions, denial of service (dos), denial of service (dos) condition, crash
CVE-2024-21587: An Improper Handling of Exceptional Conditions vulnerability in the broadband edge subscriber management daemon (bbe-smgd) of Juniper Networks Junos OS on MX Series allows an attacker directly connected to the vulnerable system who repeatedly flaps DHCP subscriber sessions to cause a slow memory leak, ultimately leading to a Denial of Service (DoS). Memory can only be recovered by manually restarting bbe-smgd.This issue only occurs if BFD liveness detection for DHCP subscribers is enabled. Systems without BFD liveness detection enabled are not vulnerable to this issue.Indication of the issue can be observed by periodically executing the 'show system processes extensive' command, which will indicate an increase in memory allocation for bbe-smgd. A small amount of memory is leaked every time a DHCP subscriber logs in, which will become visible over time, ultimately leading to memory starvation.user@junos> show system processes extensive | match bbe-smgd13071 root 24 0 415M 201M select 0 0:41 7.28% bbe-smgd{bbe-smgd}13071 root 20 0 415M 201M select 1 0:04 0.00% bbe-smgd{bbe-smgd}...user@junos> show system processes extensive | match bbe-smgd13071 root 20 0 420M 208M select 0 4:33 0.10% bbe-smgd{bbe-smgd}13071 root 20 0 420M 208M select 0 0:12 0.00% bbe-smgd{bbe-smgd}...This issue affects Juniper Networks Junos OS on MX Series:  *  All versions earlier than 20.4R3-S9;  *  21.2 versions earlier than 21.2R3-S7;  *  21.3 versions earlier than 21.3R3-S5;  *  21.4 versions earlier than 21.4R3-S5;  *  22.1 versions earlier than 22.1R3-S4;  *  22.2 versions earlier than 22.2R3-S3;  *  22.3 versions earlier than 22.3R3-S2;  *  22.4 versions earlier than 22.4R2-S2, 22.4R3;  *  23.2 versions earlier than 23.2R1-S1, 23.2R2.
Key phrases: Denial of Service (DoS), the vulnerable system who repeatedly flaps DHCP subscriber, improper handling of exceptional conditions, memory leak, denial of service (dos)
CVE-2024-21589: An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated network-based attacker to access reports without authenticating, potentially containing sensitive configuration information.A feature was introduced in version 3.1.0 of the Paragon Active Assurance Control Center which allows users to selectively share account data. By exploiting this vulnerability, it is possible to access reports without being logged in, resulting in the opportunity for malicious exfiltration of user data.Note that the Paragon Active Assurance Control Center SaaS offering is not affected by this issue.This issue affects Juniper Networks Paragon Active Assurance versions 3.1.0, 3.2.0, 3.2.2, 3.3.0, 3.3.1, 3.4.0.This issue does not affect Juniper Networks Paragon Active Assurance versions earlier than 3.1.0.
Key phrases: access reports without authenticating, selectively share account data, improper access control, malicious exfiltration
CVE-2024-21591: An Out-of-bounds Write vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS), or Remote Code Execution (RCE) and obtain root privileges on the device.This issue is caused by use of an insecure function allowing an attacker to overwrite arbitrary memory.This issue affects Juniper Networks Junos OS SRX Series and EX Series:  *  Junos OS versions earlier than 20.4R3-S9;  *  Junos OS 21.2 versions earlier than 21.2R3-S7;  *  Junos OS 21.3 versions earlier than 21.3R3-S5;  *  Junos OS 21.4 versions earlier than 21.4R3-S5;  *  Junos OS 22.1 versions earlier than 22.1R3-S4;  *  Junos OS 22.2 versions earlier than 22.2R3-S3;  *  Junos OS 22.3 versions earlier than 22.3R3-S2;  *  Junos OS 22.4 versions earlier than 22.4R2-S2, 22.4R3.
Key phrases: overwrite arbitrary memory, Denial of Service (DoS), obtain root privileges, cause a Denial of Service (DoS), out-of-bounds write, denial of service (dos), remote code execution (rce), insecure function, out of bounds write
CVE-2024-21594: A Heap-based Buffer Overflow vulnerability in the Network Services Daemon (NSD) of Juniper Networks Junos OS allows authenticated, low privileged, local attacker to cause a Denial of Service (DoS).On an SRX 5000 Series device, when executing a specific command repeatedly, memory is corrupted, which leads to a Flow Processing Daemon (flowd) crash.The NSD process has to be restarted to restore services.If this issue occurs, it can be checked with the following command:user@host> request security policies checkThe following log message can also be observed:Error: policies are out of sync for PFE node<number>.fpc<number>.pic<number>.This issue affects:Juniper Networks Junos OS on SRX 5000 Series  *  All versions earlier than 20.4R3-S6;  *  21.1 versions earlier than 21.1R3-S5;  *  21.2 versions earlier than 21.2R3-S4;  *  21.3 versions earlier than 21.3R3-S3;  *  21.4 versions earlier than 21.4R3-S3;  *  22.1 versions earlier than 22.1R3-S1;  *  22.2 versions earlier than 22.2R3;  *  22.3 versions earlier than 22.3R2.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS).On an, heap-based buffer overflow, denial of service (dos)
CVE-2024-21595: An Improper Validation of Syntactic Correctness of Input vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS).If an attacker sends high rate of specific ICMP traffic to a device with VXLAN configured, this causes a deadlock of the PFE and results in the device becoming unresponsive. A manual restart will be required to recover the device.This issue only affects EX4100, EX4400, EX4600, QFX5000 Series devices.This issue affects:Juniper Networks Junos OS  *  21.4R3 versions earlier than 21.4R3-S4;  *  22.1R3 versions earlier than 22.1R3-S3;  *  22.2R2 versions earlier than 22.2R3-S1;  *  22.3 versions earlier than 22.3R2-S2, 22.3R3;  *  22.4 versions earlier than 22.4R2;  *  23.1 versions earlier than 23.1R2.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS).If an, improper validation of syntactic correctness of input, denial of service (dos), unresponsive
CVE-2024-21596: A Heap-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service (DoS).If an attacker sends a specific BGP UPDATE message to the device, this will cause a memory overwrite and therefore an RPD crash and restart in the backup Routing Engine (RE). Continued receipt of these packets will cause a sustained Denial of Service (DoS) condition in the backup RE.The primary RE is not impacted by this issue and there is no impact on traffic.This issue only affects devices with NSR enabled.Note: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability.This issue requires an attacker to have an established BGP session to a system affected by the issue. This issue affects both eBGP and iBGP implementations.This issue affects:Juniper Networks Junos OS  *  All versions earlier than 20.4R3-S9;  *  21.2 versions earlier than 21.2R3-S7;  *  21.3 versions earlier than 21.3R3-S5;  *  21.4 versions earlier than 21.4R3-S5;  *  22.1 versions earlier than 22.1R3-S4;  *  22.2 versions earlier than 22.2R3-S2;  *  22.3 versions earlier than 22.3R3-S1;  *  22.4 versions earlier than 22.4R2-S2, 22.4R3;  *  23.1 versions earlier than 23.1R2;  *  23.2 versions earlier than 23.2R1-S2, 23.2R2.Juniper Networks Junos OS Evolved  *  All versions earlier than 21.3R3-S5-EVO;  *  21.4-EVO versions earlier than 21.4R3-S5-EVO;  *  22.1-EVO versions earlier than 22.1R3-S4-EVO;  *  22.2-EVO versions earlier than 22.2R3-S2-EVO;  *  22.3-EVO versions later than 22.3R1-EVO;  *  22.4-EVO versions earlier than 22.4R2-S2-EVO, 22.4R3-EVO;  *  23.1-EVO versions earlier than 23.1R2-EVO;  *  23.2-EVO versions earlier than 23.2R1-S2-EVO, 23.2R2-EVO.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS).If an, heap-based buffer overflow, denial of service (dos), memory overwrite, crash
CVE-2024-21597: An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass the intended access restrictions.In an Abstracted Fabric (AF) scenario if routing-instances (RI) are configured, specific valid traffic destined to the device can bypass the configured lo0 firewall filters as it's received in the wrong RI context.This issue affects Juniper Networks Junos OS on MX Series:  *  All versions earlier than 20.4R3-S9;  *  21.2 versions earlier than 21.2R3-S3;  *  21.4 versions earlier than 21.4R3-S5;  *  22.1 versions earlier than 22.1R3;  *  22.2 versions earlier than 22.2R3;  *  22.3 versions earlier than 22.3R2.
Key phrases: bypass the intended access restrictions, bypass the configured lo0 firewall filters, exposure of resource
CVE-2024-21599: A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS).If an MX Series device receives PTP packets on an MPC3E that doesn't support PTP this causes a memory leak which will result in unpredictable behavior and ultimately in an MPC crash and restart.To monitor for this issue, please use the following FPC vty level commands:show heapshows an increase in "LAN buffer" utilization andshow clksync ptp nbr-upd-infoshows non-zero "Pending PFEs" counter.This issue affects Juniper Networks Junos OS on MX Series with MPC3E:  *  All versions earlier than 20.4R3-S3;  *  21.1 versions earlier than 21.1R3-S4;  *  21.2 versions earlier than 21.2R3;  *  21.3 versions earlier than 21.3R2-S1, 21.3R3;  *  21.4 versions earlier than 21.4R2;  *  22.1 versions earlier than 22.1R2.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS).If an, missing release of memory, effective lifetime, memory leak, unpredictable behavior, crash
CVE-2024-21600: An Improper Neutralization of Equivalent Special Elements vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on PTX Series allows a unauthenticated, adjacent attacker to cause a Denial of Service (DoS).When MPLS packets are meant to be sent to a flexible tunnel interface (FTI) and if the FTI tunnel is down, these will hit the reject NH, due to which the packets get sent to the CPU and cause a host path wedge condition. This will cause the FPC to hang and requires a manual restart to recover.Please note that this issue specifically affects PTX1000, PTX3000, PTX5000 with FPC3, PTX10002-60C, and PTX10008/16 with LC110x. Other PTX Series devices and Line Cards (LC) are not affected.The following log message can be seen when the issue occurs:Cmerror Op Set: Host Loopback: HOST LOOPBACK WEDGE DETECTED IN PATH ID <id> (URI: /fpc/<fpc>/pfe/<pfe>/cm/<cm>/Host_Loopback/<cm>/HOST_LOOPBACK_MAKE_CMERROR_ID[<id>])This issue affects Juniper Networks Junos OS:  *  All versions earlier than 20.4R3-S8;  *  21.1 versions earlier than 21.1R3-S4;  *  21.2 versions earlier than 21.2R3-S6;  *  21.3 versions earlier than 21.3R3-S3;  *  21.4 versions earlier than 21.4R3-S5;  *  22.1 versions earlier than 22.1R2-S2, 22.1R3;  *  22.2 versions earlier than 22.2R2-S1, 22.2R3.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS).When MPLS, improper neutralization of equivalent special elements, denial of service (dos), hang
CVE-2024-21601: A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the Flow-processing Daemon (flowd) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (Dos).On SRX Series devices when two different threads try to simultaneously process a queue which is used for TCP events flowd will crash. One of these threads can not be triggered externally, so the exploitation of this race condition is outside the attackers direct control.Continued exploitation of this issue will lead to a sustained DoS.This issue affects Juniper Networks Junos OS:  *  21.2 versions earlier than 21.2R3-S5;  *  21.3 versions earlier than 21.3R3-S5;  *  21.4 versions earlier than 21.4R3-S4;  *  22.1 versions earlier than 22.1R3-S3;  *  22.2 versions earlier than 22.2R3-S1;  *  22.3 versions earlier than 22.3R2-S2, 22.3R3;  *  22.4 versions earlier than 22.4R2-S1, 22.4R3.This issue does not affect Juniper Networks Junos OS versions earlier than 21.2R1.
Key phrases: cause a Denial-of-Service (, concurrent execution, race condition, sustained dos, crash
CVE-2024-21602: A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS Evolved on ACX7024, ACX7100-32C and ACX7100-48L allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).If a specific IPv4 UDP packet is received and sent to the Routing Engine (RE) packetio crashes and restarts which causes a momentary traffic interruption. Continued receipt of such packets will lead to a sustained DoS.This issue does not happen with IPv6 packets.This issue affects Juniper Networks Junos OS Evolved on ACX7024, ACX7100-32C and ACX7100-48L:  *  21.4-EVO versions earlier than 21.4R3-S6-EVO;  *  22.1-EVO versions earlier than 22.1R3-S5-EVO;  *  22.2-EVO versions earlier than 22.2R2-S1-EVO, 22.2R3-EVO;  *  22.3-EVO versions earlier than 22.3R2-EVO.This issue does not affect Juniper Networks Junos OS Evolved versions earlier than 21.4R1-EVO.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS).If a, null pointer dereference, crash
CVE-2024-21603: An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Network Junos OS on MX Series allows a network based attacker with low privileges to cause a denial of service.If a scaled configuration for Source class usage (SCU) / destination class usage (DCU) (more than 10 route classes) is present and the SCU/DCU statistics are gathered by executing specific SNMP requests or CLI commands, a 'vmcore' for the RE kernel will be seen which leads to a device restart. Continued exploitation of this issue will lead to a sustained DoS.This issue only affects MX Series devices with MPC10, MPC11 or LC9600, and MX304. No other MX Series devices are affected.This issue affects Juniper Networks Junos OS:  *  All versions earlier than 20.4R3-S9;  *  21.2 versions earlier than 21.2R3-S6;  *  21.3 versions earlier than 21.3R3-S5;  *  21.4 versions earlier than 21.4R3;  *  22.1 versions earlier than 22.1R3;  *  22.2 versions earlier than 22.2R2;  *  22.3 versions earlier than 22.3R2.
Key phrases: cause a denial of service, improper check for unusual or exceptional conditions, sustained dos
CVE-2024-21604: An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).If a high rate of specific valid packets are processed by the routing engine (RE) this will lead to a loss of connectivity of the RE with other components of the chassis and thereby a complete and persistent system outage. Please note that a carefully designed lo0 firewall filter will block or limit these packets which should prevent this issue from occurring.The following log messages can be seen when this issue occurs:<host> kernel: nf_conntrack: nf_conntrack: table full, dropping packetThis issue affects Juniper Networks Junos OS Evolved:  *  All versions earlier than 20.4R3-S7-EVO;  *  21.2R1-EVO and later versions;  *  21.4-EVO versions earlier than 21.4R3-S5-EVO;  *  22.1-EVO versions earlier than 22.1R3-S2-EVO;  *  22.2-EVO versions earlier than 22.2R3-EVO;  *  22.3-EVO versions earlier than 22.3R2-EVO;  *  22.4-EVO versions earlier than 22.4R2-EVO.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS).If a, allocation of resources without limits, throttling, denial of service (dos), system outage
CVE-2024-21606: A Double Free vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS).In a remote access VPN scenario, if a "tcp-encap-profile" is configured and a sequence of specific packets is received, a flowd crash and restart will be observed.This issue affects Juniper Networks Junos OS on SRX Series:  *  All versions earlier than 20.4R3-S8;  *  21.2 versions earlier than 21.2R3-S6;  *  21.3 versions earlier than 21.3R3-S5;  *  21.4 versions earlier than 21.4R3-S5;  *  22.1 versions earlier than 22.1R3-S3;  *  22.2 versions earlier than 22.2R3-S3;  *  22.3 versions earlier than 22.3R3-S1;  *  22.4 versions earlier than 22.4R2-S2, 22.4R3.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS).In a, double free, denial of service (dos), sequence of specific packets, crash
CVE-2024-21607: An Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on MX Series and EX9200 Series allows an unauthenticated, network-based attacker to cause partial impact to the integrity of the device.If the "tcp-reset" option is added to the "reject" action in an IPv6 filter which matches on "payload-protocol", packets are permitted instead of rejected. This happens because the payload-protocol match criteria is not supported in the kernel filter causing it to accept all packets without taking any other action. As a fix the payload-protocol match will be treated the same as a "next-header" match to avoid this filter bypass.This issue doesn't affect IPv4 firewall filters.This issue affects Juniper Networks Junos OS on MX Series and EX9200 Series:  *  All versions earlier than 20.4R3-S7;  *  21.1 versions earlier than 21.1R3-S5;  *  21.2 versions earlier than 21.2R3-S5;  *  21.3 versions earlier than 21.3R3-S4;  *  21.4 versions earlier than 21.4R3-S4;  *  22.1 versions earlier than 22.1R3-S2;  *  22.2 versions earlier than 22.2R3-S2;  *  22.3 versions earlier than 22.3R2-S2, 22.3R3;  *  22.4 versions earlier than 22.4R1-S2, 22.4R2-S2, 22.4R3.
Key phrases: filter bypass, cause partial impact to the integrity of the, ui
CVE-2024-2161: Use of Hard-coded Credentials in Kiloview NDI allows un-authenticated users to bypass authenticationThis issue affectsKiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version2.02.0227 .
Key phrases: bypass authenticationThis, bypass authenticationThis issue affectsKiloview NDI N3, hard-coded credentials
CVE-2024-21611: A Missing Release of Memory after Effective Lifetime vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).In a Juniper Flow Monitoring (jflow) scenario route churn that causes BGP next hops to be updated will cause a slow memory leak and eventually a crash and restart of rpd.Thread level memory utilization for the areas where the leak occurs can be checked using the below command:user@host> show task memory detail | match so_inso_in6 28 32 344450 11022400 344760 11032320so_in 8 16 1841629 29466064 1841734 29467744This issue affects:Junos OS  *  21.4 versions earlier than 21.4R3;  *  22.1 versions earlier than 22.1R3;  *  22.2 versions earlier than 22.2R3.Junos OS Evolved  *  21.4-EVO versions earlier than 21.4R3-EVO;  *  22.1-EVO versions earlier than 22.1R3-EVO;  *  22.2-EVO versions earlier than 22.2R3-EVO.This issue does not affect:Juniper Networks Junos OS versions earlier than 21.4R1.Juniper Networks Junos OS Evolved versions earlier than 21.4R1.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS).In a, missing release of memory after effective lifetime, denial of service (dos), memory leak, crash
CVE-2024-21612: An Improper Handling of Syntactically Invalid Structure vulnerability in Object Flooding Protocol (OFP) service of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).On all Junos OS Evolved platforms, when specific TCP packets are received on an open OFP port, the OFP crashes leading to a restart of Routine Engine (RE). Continuous receipt of these specific TCP packets will lead to a sustained Denial of Service (DoS) condition.This issue affects:Juniper Networks Junos OS Evolved  *  All versions earlier than 21.2R3-S7-EVO;  *  21.3 versions earlier than 21.3R3-S5-EVO ;  *  21.4 versions earlier than 21.4R3-S5-EVO;  *  22.1 versions earlier than 22.1R3-S4-EVO;  *  22.2 versions earlier than 22.2R3-S3-EVO ;  *  22.3 versions earlier than 22.3R3-EVO;  *  22.4 versions earlier than 22.4R2-EVO, 22.4R3-EVO.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS).On all, syntactically invalid structure, denial of service (dos), crash
CVE-2024-21613: A Missing Release of Memory after Effective Lifetime vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause an rpd crash, leading to Denial of Service (DoS).On all Junos OS and Junos OS Evolved platforms, when traffic engineering is enabled for OSPF or ISIS, and a link flaps, a patroot memory leak is observed. This memory leak, over time, will lead to an rpd crash and restart.The memory usage can be monitored using the below command.user@host> show task memory detail | match patrootThis issue affects:Juniper Networks Junos OS  *  All versions earlier than 21.2R3-S3;  *  21.3 versions earlier than 21.3R3-S5;  *  21.4 versions earlier than 21.4R3-S3;  *  22.1 versions earlier than 22.1R3;  *  22.2 versions earlier than 22.2R3.Juniper Networks Junos OS Evolved  *  All versions earlier than 21.3R3-S5-EVO;  *  21.4 versions earlier than 21.4R3-EVO;  *  22.1 versions earlier than 22.1R3-EVO;  *  22.2 versions earlier than 22.2R3-EVO.
Key phrases: Denial of Service (DoS), cause an rpd crash, missing release of memory, lifetime, denial of service (dos), patroot memory leak
CVE-2024-21614: An Improper Check for Unusual or Exceptional Conditions vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause rpd to crash, leading to Denial of Service (DoS).On all Junos OS and Junos OS Evolved platforms, when NETCONF and gRPC are enabled, and a specific query is executed via Dynamic Rendering (DREND), rpd will crash and restart. Continuous execution of this specific query will cause a sustained Denial of Service (DoS) condition.This issue affects:Juniper Networks Junos OS  *  22.2 versions earlier than 22.2R2-S2, 22.2R3;  *  22.3 versions earlier than 22.3R2, 22.3R3.Juniper Networks Junos OS Evolved  *  22.2 versions earlier than 22.2R2-S2-EVO, 22.2R3-EVO;  *  22.3 versions earlier than 22.3R2-EVO, 22.3R3-EVO.This issue does not affect Juniper Networks:Junos OS versions earlier than 22.2R1;Junos OS Evolved versions earlier than 22.2R1-EVO.
Key phrases: Denial of Service (DoS), cause rpd to crash, unusual or exceptional conditions, denial of service (dos)
CVE-2024-21616: An Improper Validation of Syntactic Correctness of Input vulnerability in Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS).On all Junos OS MX Series and SRX Series platforms, when SIP ALG is enabled, and a specific SIP packet is received and processed, NAT IP allocation fails for genuine traffic, which causes Denial of Service (DoS). Continuous receipt of this specific SIP ALG packet will cause a sustained DoS condition.NAT IP usage can be monitored by running the following command.user@srx> show security nat resource-usage source-pool <source_pool_name>Pool name: source_pool_name..Address Factor-index Port-range Used Avail Total UsageX.X.X.X0 Single Ports 50258 52342 62464 96% <<<<<- Alg Ports 0 2048 2048 0%This issue affects:Juniper Networks Junos OS on MX Series and SRX Series  *  All versions earlier than 21.2R3-S6;  *  21.3 versions earlier than 21.3R3-S5;  *  21.4 versions earlier than 21.4R3-S5;  *  22.1 versions earlier than 22.1R3-S4;  *  22.2 versions earlier than 22.2R3-S3;  *  22.3 versions earlier than 22.3R3-S1;  *  22.4 versions earlier than 22.4R2-S2, 22.4R3;  *  23.2 versions earlier than 23.2R1-S1, 23.2R2.
Key phrases: Denial of Service (DoS), cause Denial of Service (DoS).On all Junos, improper validation of syntactic correctness of input, denial of service (dos)
CVE-2024-21617: An Incomplete Cleanup vulnerability in Nonstop active routing (NSR) component of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause memory leak leading to Denial of Service (DoS).On all Junos OS platforms, when NSR is enabled, a BGP flap will cause memory leak. A manual reboot of the system will restore the services.Note: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability.The memory usage can be monitored using the below commands.user@host> show chassis routing-engine no-forwardinguser@host> show system memory | no-moreThis issue affects:Juniper Networks Junos OS  *  21.2 versions earlier than 21.2R3-S5;  *  21.3 versions earlier than 21.3R3-S4;  *  21.4 versions earlier than 21.4R3-S4;  *  22.1 versions earlier than 22.1R3-S2;  *  22.2 versions earlier than 22.2R3-S2;  *  22.3 versions earlier than 22.3R2-S1, 22.3R3;  *  22.4 versions earlier than 22.4R1-S2, 22.4R2.This issue does not affect Junos OS versions earlier than 20.4R3-S7.
Key phrases: Denial of Service (DoS), cause memory leak leading to Denial of Service, incomplete cleanup, denial of service (dos), bgp flap, reboot
CVE-2024-21619: A Missing Authentication for Critical Function vulnerability combined with a Generation of Error Message Containing Sensitive Information vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based attacker to access sensitive system information.When a user logs in, a temporary file which contains the configuration of the device (as visible to that user) is created in the /cache folder. An unauthenticated attacker can then attempt to access such a file by sending a specific request to the device trying to guess the name of such a file. Successful exploitation will reveal configuration information.This issue affects Juniper Networks Junos OS on SRX Series and EX Series:  *  All versions earlier than 20.4R3-S9;  *  21.2 versions earlier than 21.2R3-S7;  *  21.3 versions earlier than 21.3R3-S5;  *  21.4 versions earlier than 21.4R3-S6;  *  22.1 versions earlier than 22.1R3-S5;  *  22.2 versions earlier than 22.2R3-S3;  *  22.3 versions earlier than 22.3R3-S2;  *  22.4 versions earlier than 22.4R3;  *  23.2 versions earlier than 23.2R1-S2, 23.2R2.
Key phrases: access sensitive system information, missing authentication for critical function, generation of error message containing sensitive information
CVE-2024-2162: An OS Command Injection vulnerability in Kiloview NDI allows a low-privileged user to execute arbitrary code remotely on the device with high privileges.This issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227 .
Key phrases: execute arbitrary code, execute arbitrary code remotely on the device with, os command injection
CVE-2024-21620: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an attacker to construct a URL that when visited by another user enables the attacker to execute commands with the target's permissions, including an administrator.A specific invocation of the emit_debug_note method in webauth_operation.php will echo back the data it receives.This issue affects Juniper Networks Junos OS on SRX Series and EX Series:  *  All versions earlier than 20.4R3-S10;  *  21.2 versions earlier than 21.2R3-S8;  *  21.4 versions earlier than 21.4R3-S6;  *  22.1 versions earlier than 22.1R3-S5;  *  22.2 versions earlier than 22.2R3-S3;  *  22.3 versions earlier than 22.3R3-S2;  *  22.4 versions earlier than 22.4R3-S1;  *  23.2 versions earlier than 23.2R2;  *  23.4 versions earlier than 23.4R2.
Key phrases: construct a URL that when visited by another, improper neutralization of input during web page generation, cross-site scripting, execute commands
CVE-2024-21622: Craft is a content management system. This is a potential moderate impact, low complexity privilege escalation vulnerability in Craft starting in 3.x prior to 3.9.6 and 4.x prior to 4.4.16 with certain user permissions setups. This has been fixed in Craft 4.4.16 and Craft 3.9.6. Users should ensure they are running at least those versions.
Key phrases: moderate impact, low complexity privilege escalation
CVE-2024-21623: OTCLient is an alternative tibia client for otserv. Prior to commit db560de0b56476c87a2f967466407939196dd254, the /mehah/otclient "`Analysis - SonarCloud`" workflow is vulnerable to an expression injection in Actions, allowing an attacker to run commands remotely on the runner, leak secrets, and alter the repository using this workflow. Commit db560de0b56476c87a2f967466407939196dd254 contains a fix for this issue.
Key phrases: run commands remotely on the runner, expression injection, leak secrets
CVE-2024-21624: nonebot2 is a cross-platform Python asynchronous chatbot framework written in Python. This security advisory pertains to a potential information leak (e.g., environment variables) in instances where developers utilize `MessageTemplate` and incorporate user-provided data into templates. The identified vulnerability has been remedied in pull request #2509 and will be included in versions released from 2.2.0. Users are strongly advised to upgrade to these patched versions to safeguard against the vulnerability. A temporary workaround involves filtering underscores before incorporating user input into the message template.
Key phrases: information leak
CVE-2024-21625: SideQuest is a place to get virtual reality applications for Oculus Quest. The SideQuest desktop application uses deep links with a custom protocol (`sidequest://`) to trigger actions in the application from its web contents. Because, prior to version 0.10.35, the deep link URLs were not sanitized properly in all cases, a one-click remote code execution can be achieved in cases when a device is connected, the user is presented with a malicious link and clicks it from within the application. As of version 0.10.35, the custom protocol links within the electron application are now being parsed and sanitized properly.
Key phrases: one-click remote code execution
CVE-2024-21626: runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a working directory in the host filesystem namespace, allowing for a container escape by giving access to the host filesystem ("attack 2"). The same attack could be used by a malicious image to allow a container process to gain access to the host filesystem through runc run ("attack 1"). Variants of attacks 1 and 2 could be also be used to overwrite semi-arbitrary host binaries, allowing for complete container escapes ("attack 3a" and "attack 3b"). runc 1.1.12 includes patches for this issue. 
Key phrases: gain access, the host filesystem ("attack 2", gain access to the host filesystem through runc, for complete container escapes ("attack 3a, internal file descriptor leak, variants of attacks and
CVE-2024-21627: PrestaShop is an open-source e-commerce platform. Prior to versions 8.1.3 and 1.7.8.11, some event attributes are not detected by the `isCleanHTML` method. Some modules using the `isCleanHTML` method could be vulnerable to cross-site scripting. Versions 8.1.3 and 1.7.8.11 contain a patch for this issue. The best workaround is to use the `HTMLPurifier` library to sanitize html input coming from users. The library is already available as a dependency in the PrestaShop project. Beware though that in legacy object models, fields of `HTML` type will call `isCleanHTML`.
Key phrases: cross-site scripting
CVE-2024-21628: PrestaShop is an open-source e-commerce platform. Prior to version 8.1.3, the isCleanHtml method is not used on this this form, which makes it possible to store a cross-site scripting payload in the database. The impact is low because the HTML is not interpreted in BO, thanks to twig's escape mechanism. In FO, the cross-site scripting attack is effective, but only impacts the customer sending it, or the customer session from which it was sent. This issue affects those who have a module fetching these messages from the DB and displaying it without escaping HTML. Version 8.1.3 contains a patch for this issue.
Key phrases: cross-site scripting payload