Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-45189 State: PUBLISHED Published: 2024-08-23T19:15:40.242Z Last Updated: 2024-11-25T12:41:45.529Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Problem Types: CWE-22 Description: Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://research.jfrog.com/vulnerabilities/mage-ai-git-content-request-remote-arbitrary-file-leak-jfsa-2024-001039604/
CVE ID: CVE-2024-45190 State: PUBLISHED Published: 2024-08-23T19:16:17.818Z Last Updated: 2024-11-25T12:34:23.043Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Problem Types: CWE-35 Description: Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://research.jfrog.com/vulnerabilities/mage-ai-pipeline-interaction-request-remote-arbitrary-file-leak-jfsa-2024-001039605/
CVE ID: CVE-2024-45191 State: PUBLISHED Published: 2024-08-22T00:00:00 Last Updated: 2024-09-10T18:21:17.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Matrix libolm through 3.2.16. The AES implementation is vulnerable to cache-timing attacks due to use of S-boxes. This is related to software that uses a lookup table for the SubWord step. This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library/ - https://gitlab.matrix.org/matrix-
References: - https://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library/ - https://gitlab.matrix.org/matrix-org/olm/ - https://news.ycombinator.com/item?id=41249371 - https://gitlab.matrix.org/matrix-org/olm/-/commit/6d4b5b07887821a95b144091c8497d09d377f985
CVE ID: CVE-2024-45192 State: PUBLISHED Published: 2024-08-22T00:00:00 Last Updated: 2024-09-10T18:26:13.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Matrix libolm through 3.2.16. Cache-timing attacks can occur due to use of base64 when decoding group session keys. This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library/ - https://gitlab.matrix.org/matrix-org/olm/ - https://news.ycombinator.com/item?id=41249371 - https://gitlab
lm-library/ - https://gitlab.matrix.org/matrix-org/olm/ - https://news.ycombinator.com/item?id=41249371 - https://gitlab.matrix.org/matrix-org/olm/-/commit/6d4b5b07887821a95b144091c8497d09d377f985
CVE ID: CVE-2024-45193 State: PUBLISHED Published: 2024-08-22T00:00:00 Last Updated: 2024-09-10T18:34:25.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Matrix libolm through 3.2.16. There is Ed25519 signature malleability due to lack of validation criteria (does not ensure that S < n). This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library/ - https://gitlab.matrix.org/matrix-org/olm/ - https://news.ycombinator.com/item?id=412493
issues-in-matrixs-olm-library/ - https://gitlab.matrix.org/matrix-org/olm/ - https://news.ycombinator.com/item?id=41249371 - https://gitlab.matrix.org/matrix-org/olm/-/commit/6d4b5b07887821a95b144091c8497d09d377f985
CVE ID: CVE-2024-45194 State: PUBLISHED Published: 2024-11-21T00:00:00 Last Updated: 2024-11-21T18:03:06.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zimbra Collaboration (ZCS) 9.0 and 10.0, a vulnerability in the Webmail Modern UI allows execution of stored Cross-Site Scripting (XSS) payloads. An attacker with administrative access to the Zimbra Administration Panel can inject malicious JavaScript code while configuring an email account. This injected code is stored on the server and executed in the context of the victim's browser when interacting with specific elements in the web interface. (The vulnerability can be mitigated by properly sanitizing input parameters to
h specific elements in the web interface. (The vulnerability can be mitigated by properly sanitizing input parameters to prevent the injection of malicious code.) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy - https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes - https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes - https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes
CVE ID: CVE-2024-45195 State: PUBLISHED Published: 2024-09-04T08:08:59.201Z Last Updated: 2025-10-21T22:55:46.145Z Vendors: Apache Software Foundation Products: Apache OFBiz Problem Types: CWE-425 Description: Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade to version 18.12.16, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ofbiz.apache.org/download.html - https://ofbiz.apache.org/security.html - https://issues.apache.org/jira/browse/OFBIZ-13130 - https://lists.apache.org/thread/o90dd9lbk1hh3t2557t2y2qvrh92p7wy
CVE ID: CVE-2024-45198 State: PUBLISHED Published: 2025-04-03T00:00:00.000Z Last Updated: 2025-04-04T15:25:07.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: insightsoftware Spark JDBC 2.6.21 has a remote code execution vulnerability. Attackers can inject malicious parameters into the JDBC URL, triggering JNDI injection during the process when the JDBC Driver uses this URL to connect to the database. This can further lead to remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/azraelxuemo/ef11311ae0633cbd3d794f73c64e3877
CVE ID: CVE-2024-45199 State: PUBLISHED Published: 2025-04-03T00:00:00.000Z Last Updated: 2025-04-04T15:17:46.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: insightsoftware Hive JDBC through 2.6.13 has a remote code execution vulnerability. Attackers can inject malicious parameters into the JDBC URL, triggering JNDI injection during the process when the JDBC Driver uses this URL to connect to the database. This can further lead to remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/azraelxuemo/d019ad079d540ef28870dbd9552a7c62
CVE ID: CVE-2024-45200 State: PUBLISHED Published: 2024-09-30T00:00:00 Last Updated: 2024-09-30T17:40:34.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Nintendo Mario Kart 8 Deluxe before 3.0.3, the LAN/LDN local multiplayer implementation allows a remote attacker to exploit a stack-based buffer overflow upon deserialization of session information via a malformed browse-reply packet, aka KartLANPwn. The victim is not required to join a game session with an attacker. The victim must open the "Wireless Play" (or "LAN Play") menu from the game's title screen, and an attacker nearby (LDN) or on the same LAN network as the victim can send a crafted reply packet to the victim's
n, and an attacker nearby (LDN) or on the same LAN network as the victim can send a crafted reply packet to the victim's console. This enables a remote attacker to obtain complete denial-of-service on the game's process, or potentially, remote code execution on the victim's console. The issue is caused by incorrect use of the Nintendo Pia library, Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/latte-soft/kartlanpwn - https://hackerone.com/reports/2611669
CVE ID: CVE-2024-45201 State: PUBLISHED Published: 2024-08-22T00:00:00 Last Updated: 2024-11-25T18:19:38.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in llama_index before 0.10.38. download/integration.py includes an exec call for import {cls_name}. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/run-llama/llama_index/pull/13523 - https://github.com/run-llama/llama_index/compare/v0.10.37...v0.10.38
CVE ID: CVE-2024-45203 State: PUBLISHED Published: 2024-09-09T06:42:30.971Z Last Updated: 2025-03-13T19:35:38.439Z Vendors: istyle Inc. Products: "@cosme" App for Android, "@cosme" App for iOS Problem Types: Improper authorization in handler for custom URL scheme Description: Improper authorization in handler for custom URL scheme issue in "@cosme" App for Android versions prior 5.69.0 and "@cosme" App for iOS versions prior to 6.74.0 allows an attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/jp/JVN81570776/
CVE ID: CVE-2024-45204 State: PUBLISHED Published: 2024-12-04T01:06:05.328Z Last Updated: 2024-12-06T20:10:23.572Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Veeam Products: Backup & Replication Description: A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credentials. The exploitation involves using retrieved credentials to expose sensitive NTLM hashes, impacting systems beyond the initial target and potentially leading to broader security vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.veeam.com/kb4693
CVE ID: CVE-2024-45205 State: PUBLISHED Published: 2024-12-04T01:06:04.643Z Last Updated: 2024-12-04T16:29:27.075Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Ubiquiti Products: UniFi iOS App Description: An Improper Certificate Validation on the UniFi iOS App managing a standalone UniFi Access Point (not using UniFi Network Application) could allow a malicious actor with access to an adjacent network to take control of this UniFi Access Point. Affected Products: UniFi iOS App (Version 10.17.7 and earlier) Mitigation: UniFi iOS App (Version 10.18.0 or later). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases
on 10.18.0 or later). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/UniFi-iOS-10-18-0/42f02428-544c-4626-b5b3-5ae40308edc7
CVE ID: CVE-2024-45206 State: PUBLISHED Published: 2024-12-04T01:06:04.650Z Last Updated: 2025-03-13T18:36:04.573Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Veeam Products: Service Provider Console Description: A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbitrary HTTP requests to arbitrary hosts of the network and get information about internal resources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.veeam.com/kb4649
CVE ID: CVE-2024-45207 State: PUBLISHED Published: 2024-12-04T01:06:04.660Z Last Updated: 2024-12-04T15:21:30.380Z Severity: HIGH (CVSS 7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Veeam Products: Agent for Windows Description: DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the agent runs, it searches these directories for necessary DLLs. If an attacker places a malicious DLL in one of these directories, the Veeam Agent might load it inadvertently, allowing the attacker to execute harmful code. This could lead to unauthorized access, data theft, or disruption of services Additional Analyst Notes: - CISA ADP Vulnr
This could lead to unauthorized access, data theft, or disruption of services Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.veeam.com/kb4693
CVE ID: CVE-2024-45208 State: PUBLISHED Published: 2025-06-18T23:30:53.998Z Last Updated: 2025-06-23T16:04:55.377Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Versa Products: Director Description: The Versa Director SD-WAN orchestration platform which makes use of Cisco NCS application service. Active and Standby Directors communicate over TCP ports 4566 and 4570 to exchange High Availability (HA) information using a shared password. Affected versions of Versa Director bound to these ports on all interfaces. An attacker that can access the Versa Director could access the NCS service on port 4566 and exploit it to perform unauthorized administrative act
s the Versa Director could access the NCS service on port 4566 and exploit it to perform unauthorized administrative actions and perform remote code execution. Customers are recommended to follow the hardening guide. Versa Networks is not aware of any reported instance where this vulnerability was exploited. Proof of concept for this vulnerability has been disclosed by third party security researchers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-portal.versa-networks.com/emailbulletins/68526c3cdc94d6b9f2faf718 - https://support.versa-networks.com/support/solutions/articles/23000026724-versa-director-ha-port-exploit-discovery-remediation - https://support
tworks.com/support/solutions/articles/23000026724-versa-director-ha-port-exploit-discovery-remediation - https://support.versa-networks.com/support/solutions/articles/23000026708-release-22-1-4 - https://support.versa-networks.com/support/solutions/articles/23000026033-release-22-1-3 - https://support.versa-networks.com/support/solutions/articles/23000025680-release-22-1-2 - https://support.versa-networks.com/support/solutions/articles/23000024323-release-21-2-3 - https://docs.versa-networks.com/Solutions/System_Hardening/Perform_Manual_Hardening_for_Versa_Director#Harden_Port_4566
CVE ID: CVE-2024-45216 State: PUBLISHED Published: 2024-10-16T07:50:25.965Z Last Updated: 2024-11-08T04:55:08.457Z Vendors: Apache Software Foundation Products: Apache Solr Problem Types: CWE-287 Description: Improper Authentication vulnerability in Apache Solr. Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path. This fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API
ke ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing. This issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0. Users are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://solr.apache.org/security.html#cve-2024-45216-apache-solr-authentication-bypass-possible-using-a-fake-url-path-ending
CVE ID: CVE-2024-45217 State: PUBLISHED Published: 2024-10-16T07:51:16.558Z Last Updated: 2024-10-16T15:08:26.625Z Vendors: Apache Software Foundation Products: Apache Solr Problem Types: CWE-1188 Description: Insecure Default Initialization of Resource vulnerability in Apache Solr. New ConfigSets that are created via a Restore command, which copy a configSet from the backup and give it a new name, are created without setting the "trusted" metadata. ConfigSets that do not contain the flag are trusted implicitly if the metadata is missing, therefore this leads to "trusted" ConfigSets that may not have been created with an Authenticated request. "trusted" ConfigSets are able to load custom cod
onfigSets that may not have been created with an Authenticated request. "trusted" ConfigSets are able to load custom code into classloaders, therefore the flag is supposed to only be set when the request that uploads the ConfigSet is Authenticated & Authorized. This issue affects Apache Solr: from 6.6.0 before 8.11.4, from 9.0.0 before 9.7.0. This issue does not affect Solr instances that are secured via Authentication/Authorization. Users are primarily recommended to use Authentication and Authorization when running Solr. However, upgrading to version 9.7.0, or 8.11.4 will mitigate this issue otherwise. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
mitigate this issue otherwise. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://solr.apache.org/security.html#cve-2024-45217-apache-solr-configsets-created-during-a-backup-restore-command-are-trusted-implicitly
CVE ID: CVE-2024-45219 State: PUBLISHED Published: 2024-10-16T07:55:02.534Z Last Updated: 2024-10-16T14:48:18.087Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Apache Software Foundation Products: Apache CloudStack Problem Types: CWE-20 Description: Account users in Apache CloudStack by default are allowed to upload and register templates for deploying instances and volumes for attaching them as data disks to their existing instances. Due to missing validation checks for KVM-compatible templates or volumes in CloudStack 4.0.0 through 4.18.2.3 and 4.19.0.0 through 4.19.1.1, an attacker that can upload or register templates and volumes, can use them to deploy
2.3 and 4.19.0.0 through 4.19.1.1, an attacker that can upload or register templates and volumes, can use them to deploy malicious instances or attach uploaded volumes to their existing instances on KVM-based environments and exploit this to gain access to the host filesystems that could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of KVM-based infrastructure managed by CloudStack. Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue. Additionally, all user-uploaded or registered KVM-compatible templates and volumes can be scanned and checked that they are flat fi
y, all user-uploaded or registered KVM-compatible templates and volumes can be scanned and checked that they are flat files that should not be using any additional or unnecessary features. For example, operators can run this on their secondary storage(s) and inspect output. An empty output for the disk being validated means it has no references to the host filesystems; on the other hand, if the output for the disk being validated is not empty, it might indicate a compromised disk. for file in $(find /path/to/storage/ -type f -regex [a-f0-9\-]*.*); do echo "Retrieving file [$file] info. If the output is not empty, that might indicate a compromised disk; check it carefully."; qemu-img info -U
$file] info. If the output is not empty, that might indicate a compromised disk; check it carefully."; qemu-img info -U $file | grep file: ; printf "\n\n"; done The command can also be run for the file-based primary storages; however, bear in mind that (i) volumes created from templates will have references for the templates at first and (ii) volumes can be consolidated while migrating, losing their references to the templates. Therefore, the command execution for the primary storages can show both false positives and false negatives. For checking the whole template/volume features of each disk, operators can run the following command: for file in $(find /path/to/storage/ -type f -regex [a-f
features of each disk, operators can run the following command: for file in $(find /path/to/storage/ -type f -regex [a-f0-9\-]*.*); do echo "Retrieving file [$file] info."; qemu-img info -U $file; printf "\n\n"; done Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cloudstack.apache.org/blog/security-release-advisory-4.18.2.4-4.19.1.2 - https://lists.apache.org/thread/ktsfjcnj22x4kg49ctock3d9tq7jnvlo - https://www.shapeblue.com/shapeblue-security-advisory-apache-cloudstack-security-releases-4-18-2-4-and-4-19-1-2/
CVE ID: CVE-2024-45229 State: PUBLISHED Published: 2024-09-20T18:09:30.570Z Last Updated: 2024-09-20T18:53:08.178Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Versa Products: Director Description: The Versa Director offers REST APIs for orchestration and management. By design, certain APIs, such as the login screen, banner display, and device registration, do not require authentication. However, it was discovered that for Directors directly connected to the Internet, one of these APIs can be exploited by injecting invalid arguments into a GET request, potentially exposing the authentication tokens of other currently logged-in users. These tokens can then
a GET request, potentially exposing the authentication tokens of other currently logged-in users. These tokens can then be used to invoke additional APIs on port 9183. This exploit does not disclose any username or password information. Currently, there are no workarounds in Versa Director. However, if there is Web Application Firewall (WAF) or API Gateway fronting the Versa Director, it can be used to block access to the URLs of vulnerable API. /vnms/devicereg/device/* (on ports 9182 & 9183) and /versa/vnms/devicereg/device/* (on port 443). Versa recommends that Directors be upgraded to one of the remediated software versions. This vulnerability is not exploitable on Versa Directors not ex
be upgraded to one of the remediated software versions. This vulnerability is not exploitable on Versa Directors not exposed to the Internet.We have validated that no Versa-hosted head ends have been affected by this vulnerability. Please contact Versa Technical Support or Versa account team for any further assistance. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-portal.versa-networks.com/emailbulletins/66e4a8ebda545d61ec2b1ab9
CVE ID: CVE-2024-45230 State: PUBLISHED Published: 2024-10-08T00:00:00.000Z Last Updated: 2025-03-17T14:12:05.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.djangoproject.com/en/dev/releases/security/ - https://groups.google.com/forum/#%21forum/django-announce - https://www.djangoproject.com/weblog/2024/sep/03/security-releases/
CVE ID: CVE-2024-45231 State: PUBLISHED Published: 2024-10-08T00:00:00.000Z Last Updated: 2025-03-17T17:30:18.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.djangoproject.com/en/dev/releases/security/ - https://groups.google.com/forum/#%21forum/django-announce
: - https://docs.djangoproject.com/en/dev/releases/security/ - https://groups.google.com/forum/#%21forum/django-announce - https://www.djangoproject.com/weblog/2024/sep/03/security-releases/