CVE-2024-7770

CVE-2024-7770

Título es
CVE-2024-7770

Mar, 10/09/2024 – 11:15

Tipo
CWE-434

Gravedad 2.0 Txt
Pendiente de análisis

Título en

CVE-2024-7770

Descripción es
El complemento Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress para WordPress es vulnerable a la carga de archivos arbitrarios debido a la falta de validación del tipo de archivo en la función de "carga" en todas las versiones hasta la 6.5.5 incluida. Esto hace posible que atacantes autenticados, con acceso de nivel de suscriptor o superior, y con permisos de carga otorgados por un administrador, carguen archivos arbitrarios en el servidor del sitio afectado, lo que puede hacer posible la ejecución remota de código.

Descripción en
The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload' function in all versions up to, and including, 6.5.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, and granted upload permissions by an administrator, to upload arbitrary files on the affected site's server which may make remote code execution possible.

10/09/2024
10/09/2024
Vector CVSS:3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Gravedad 3.1 (CVSS 3.1 Base Score)
8.80

Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
HIGH

Referencias

  • https://plugins.trac.wordpress.org/browser/file-manager/trunk/backend/app/Http/Controllers/FileManagerController.php#L26

  • https://plugins.trac.wordpress.org/browser/file-manager/trunk/libs/elFinder/php/elFinder.class.php#L1210

  • https://plugins.trac.wordpress.org/browser/file-manager/trunk/libs/elFinder/php/elFinder.class.php#L3257

  • https://plugins.trac.wordpress.org/browser/file-manager/trunk/libs/elFinder/php/elFinderConnector.class.php#L160

  • https://plugins.trac.wordpress.org/changeset/3138710/

  • https://www.wordfence.com/threat-intel/vulnerabilities/id/9cae7702-e531-45b9-9131-42edbc073a07?source=cve

    • Enviar en el boletín
    Off

    CVE-2024-45845

    CVE-2024-45845

    Título es
    CVE-2024-45845

    Mar, 10/09/2024 – 11:15

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-45845

    Descripción es
    nix 2.24 a 2.24.5 permite el directory traversal a través de un enlace simbólico en un archivo nar, debido al manejo incorrecto de un directorio que contiene un enlace simbólico y un directorio con el mismo nombre, también conocido como GHSA-h4vv-h3jq-v493.

    Descripción en
    nix 2.24 through 2.24.5 allows directory traversal via a symlink in a nar file, because of mishandling of a directory containing a symlink and a directory of the same name, aka GHSA-h4vv-h3jq-v493.

    10/09/2024
    10/09/2024
    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    Pendiente de análisis

    Referencias

  • https://github.com/NixOS/nix/tags

  • https://news.ycombinator.com/item?id=41492994

  • https://puckipedia.com/7hkj-98sq/qixt

    • Enviar en el boletín
    Off

    CVE-2024-40754

    CVE-2024-40754

    Título es
    CVE-2024-40754

    Mar, 10/09/2024 – 11:15

    Tipo
    CWE-122

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-40754

    Descripción es
    La vulnerabilidad de desbordamiento de búfer basado en montón en el motor JavaScript Escargot de código abierto de Samsung permite búferes de desbordamiento. Este problema afecta a Escargot: 4.0.0.

    Descripción en
    Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects Escargot: 4.0.0.

    10/09/2024
    10/09/2024
    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    Pendiente de análisis

    Referencias

  • https://github.com/Samsung/escargot/pull/1369

    • Enviar en el boletín
    Off

    CVE-2024-8369

    CVE-2024-8369

    Título es
    CVE-2024-8369

    Mar, 10/09/2024 – 12:15

    Tipo
    CWE-862

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-8369

    Descripción en
    The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access to Private or Password-protected events due to missing authorization checks in all versions up to, and including, 4.0.4.3. This makes it possible for unauthenticated attackers to view private or password-protected events.

    10/09/2024
    10/09/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

    Gravedad 3.1 (CVSS 3.1 Base Score)
    5.30

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    MEDIUM

    Referencias

  • EventPrime – Events Calendar, Bookings and Tickets



  • https://www.wordfence.com/threat-intel/vulnerabilities/id/97174ec0-a2b7-455e-9bf8-b6f51546beee?source=cve

    • Enviar en el boletín
    Off

    CVE-2024-6282

    CVE-2024-6282

    Título es
    CVE-2024-6282

    Mar, 10/09/2024 – 12:15

    Tipo
    CWE-79

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-6282

    Descripción en
    The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-jltma-wrapper-link element in all versions up to, and including 2.0.6.4 due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user clicks on the injected link.

    10/09/2024
    10/09/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

    Gravedad 3.1 (CVSS 3.1 Base Score)
    5.40

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    MEDIUM

    Referencias

  • https://plugins.trac.wordpress.org/browser/master-addons/tags/2.0.6.2/assets/js/master-addons-scripts.js#L3398

  • https://plugins.trac.wordpress.org/changeset/3146230/

  • https://www.wordfence.com/threat-intel/vulnerabilities/id/8bab0acc-5a5d-4dd4-9201-199b7f5aaa69?source=cve

    • Enviar en el boletín
    Off

    CVE-2024-6509

    CVE-2024-6509

    Título es
    CVE-2024-6509

    Mar, 10/09/2024 – 05:15

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-6509

    Descripción en
    Marinus Pfund, member of the AXIS OS Bug Bounty Program,
    has found the VAPIX API alwaysmulti.cgi was vulnerable for file globbing which could lead to resource exhaustion of the Axis device.
    Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

    10/09/2024
    10/09/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

    Gravedad 3.1 (CVSS 3.1 Base Score)
    6.50

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    MEDIUM

    Referencias

  • https://www.axis.com/dam/public/47/bf/2c/cve-2024-6509-en-US-448996.pdf

    • Enviar en el boletín
    Off

    CVE-2024-6173

    CVE-2024-6173

    Título es
    CVE-2024-6173

    Mar, 10/09/2024 – 05:15

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-6173

    Descripción en
    51l3nc3, member of the AXIS OS Bug Bounty Program, has found that a Guard Tour VAPIX API parameter allowed the use of arbitrary values allowing for an attacker to block access to the guard tour configuration page in the web interface of the Axis device.
    Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

    10/09/2024
    10/09/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

    Gravedad 3.1 (CVSS 3.1 Base Score)
    6.50

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    MEDIUM

    Referencias

  • https://www.axis.com/dam/public/33/0c/c8/cve-2024-6173-en-US-448995.pdf

    • Enviar en el boletín
    Off

    CVE-2024-45504

    CVE-2024-45504

    Título es
    CVE-2024-45504

    Mar, 10/09/2024 – 05:15

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-45504

    Descripción en
    Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthenticated attacker to hijack the authentication of the user and to perform unintended operations if the user views a malicious page while logged in.

    10/09/2024
    10/09/2024
    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    Pendiente de análisis

    Referencias

  • https://alsifaq.dga.jp/faq_detail.html?id=6494

  • https://jvn.jp/en/jp/JVN05579230/

  • https://success.trendmicro.com/ja-JP/solution/KA-0017618

  • https://www.motex.co.jp/news/notice/2024/release240909/

    • Enviar en el boletín
    Off

    CVE-2024-45285

    CVE-2024-45285

    Título es
    CVE-2024-45285

    Mar, 10/09/2024 – 05:15

    Tipo
    CWE-862

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-45285

    Descripción en
    The RFC enabled function module allows a low privileged user to perform denial of service on any user and also change or delete favourite nodes. By sending a crafted packet in the function module targeting specific parameters, the specific targeted user will no longer have access to any functionality of SAP GUI. There is low impact on integrity and availability of the application.

    10/09/2024
    10/09/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

    Gravedad 3.1 (CVSS 3.1 Base Score)
    5.40

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    MEDIUM

    Referencias

  • https://me.sap.com/notes/3488039

  • https://url.sap/sapsecuritypatchday

    • Enviar en el boletín
    Off

    CVE-2024-45284

    CVE-2024-45284

    Título es
    CVE-2024-45284

    Mar, 10/09/2024 – 05:15

    Tipo
    CWE-862

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-45284

    Descripción en
    An authenticated attacker with high privilege can use functions of SLCM transactions to which access should be restricted. This may result in an escalation of privileges causing low impact on integrity of the application.

    10/09/2024
    10/09/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

    Gravedad 3.1 (CVSS 3.1 Base Score)
    2.40

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    LOW

    Referencias

  • https://me.sap.com/notes/2256627

  • https://url.sap/sapsecuritypatchday

    • Enviar en el boletín
    Off