Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-29743 State: PUBLISHED Published: 2025-04-22T00:00:00.000Z Last Updated: 2025-04-22T20:41:31.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in /goform/delRouting. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/n0wstr/IOTVuln/blob/main/DIR-816/DelRouting/readme.md
CVE ID: CVE-2025-29744 State: PUBLISHED Published: 2025-06-12T00:00:00.000Z Last Updated: 2025-06-17T19:11:12.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vitaly-t/pg-promise/discussions/911 - https://www.sonarsource.com/blog/double-dash-double-trouble-a-subtle-sql-injection-flaw/
CVE ID: CVE-2025-29745 State: PUBLISHED Published: 2025-08-05T00:00:00.000Z Last Updated: 2025-08-05T19:53:50.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability affecting the scanning module in Emsisoft Anti-Malware prior to 2024.12 allows attackers on a remote server to obtain Net-NTLMv2 hash information via a specially created A2S (Emsisoft Custom Scan) extension file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://packetstorm.news/files/id/188736/ - https://www.youtube.com/watch?v=LxaYtxdJLM4
CVE ID: CVE-2025-29746 State: PUBLISHED Published: 2025-05-07T00:00:00.000Z Last Updated: 2025-05-08T15:18:33.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Koillection v.1.6.10 allows a remote attacker to escalate privileges via the collection, Wishlist and album components Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/benjaminjonard/koillection/issues/1329 - https://gist.github.com/unklerunkle/73e2ab58d1a5b9129be5de55765ea4fe
CVE ID: CVE-2025-29756 State: PUBLISHED Published: 2025-06-11T08:01:16.794Z Last Updated: 2025-06-23T12:45:06.342Z Vendors: SunGrow Products: iSolarCloud Problem Types: CWE-862 Description: SunGrow's back end users system iSolarCloud https://isolarcloud.com uses an MQTT service to transport data from the user's connected devices to the user's web browser. The MQTT server however did not have sufficient restrictions in place to limit the topics that a user could subscribe to. While the data that is transmitted through the MQTT server is encrypted and the credentials for the MQTT server are obtained though an API call, the credentials could be used to subscribe to any topic and the encryption
MQTT server are obtained though an API call, the credentials could be used to subscribe to any topic and the encryption key can be used to decrypt all messages received. An attack with an account on iSolarCloud.com could extract MQTT credentials and the decryption key from the browser and then use an external program to subscribe to the topic '#' and thus recieve all messages from all connected devices. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://csirt.divd.nl/CVE-2025-29756 - https://csirt.divd.nl/DIVD-2025-00009 - https://isolarcloud.com
CVE ID: CVE-2025-29757 State: PUBLISHED Published: 2025-07-19T05:15:36.810Z Last Updated: 2025-07-22T10:05:55.465Z Vendors: Growatt Products: https://oss.growatt.com, https://server.growatt.com Problem Types: CWE-863 Description: An incorrect authorisation check in the the 'plant transfer' function of the Growatt cloud service allowed a malicous attacker with a valid account to transfer any plant into his/her account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://server.growatt.com - https://oss.growatt.com - https://csirt.divd.nl/CVE-2025-29757 - https://csirt.divd.nl/DIVD-2025-00011
CVE ID: CVE-2025-29763 State: REJECTED Published: N/A Last Updated: 2025-05-01T19:37:04.759Z Description: No description available.
CVE ID: CVE-2025-29766 State: PUBLISHED Published: 2025-03-31T15:38:00.273Z Last Updated: 2025-03-31T18:36:27.728Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L) Vendors: Enalean Products: tuleap Problem Types: CWE-352 Description: Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap has missing CSRF protections on artifact submission & edition from the tracker view. An attacker could use this vulnerability to trick victims into submitting or editing artifacts or follow-up comments. The vulnerability is fixed in Tuleap Community Edition 16.5.99.1741784483 and Tuleap Enterprise Edition 16.5-3 and 16.4-8. Additional A
ty is fixed in Tuleap Community Edition 16.5.99.1741784483 and Tuleap Enterprise Edition 16.5-3 and 16.4-8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Enalean/tuleap/security/advisories/GHSA-6p9q-p2q4-3rqx - https://github.com/Enalean/tuleap/commit/81f45330fdcc1329cc71eddf4d04b80c340b3b93 - https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=81f45330fdcc1329cc71eddf4d04b80c340b3b93 - https://tuleap.net/plugins/tracker/?aid=42208
CVE ID: CVE-2025-29768 State: PUBLISHED Published: 2025-03-13T17:04:56.920Z Last Updated: 2025-05-02T23:03:03.457Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: vim Products: vim Problem Types: CWE-88 Description: Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/vim/vim/security/advisories/G
Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/vim/vim/security/advisories/GHSA-693p-m996-3rmf - https://github.com/vim/vim/commit/f209dcd3defb95bae21b2740910e6aa7bb940531
CVE ID: CVE-2025-29769 State: PUBLISHED Published: 2025-04-07T20:09:30.971Z Last Updated: 2025-04-30T22:03:02.869Z Vendors: libvips Products: libvips Problem Types: CWE-122 Description: libvips is a demand-driven, horizontally threaded image processing library. The heifsave operation could incorrectly determine the presence of an alpha channel in an input when it was not possible to determine the colour interpretation, known internally within libvips as "multiband". There aren't many ways to create a "multiband" input, but it is possible with a well-crafted TIFF image. If a "multiband" TIFF input image had 4 channels and HEIF-based output was requested, this led to libvips creating a 3 chann
"multiband" TIFF input image had 4 channels and HEIF-based output was requested, this led to libvips creating a 3 channel HEIF image without an alpha channel but then attempting to write 4 channels of data. This caused a heap buffer overflow, which could crash the process. This vulnerability is fixed in 8.16.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/libvips/libvips/security/advisories/GHSA-f8r8-43hh-rghm - https://github.com/libvips/libvips/pull/4392 - https://github.com/libvips/libvips/pull/4394 - https://github.com/libvips/libvips/commit/9ab6784f693de50b00fa535b9efbbe9d2cbf71f2 - https://issues.oss-fuzz.com/issues/39646
://github.com/libvips/libvips/commit/9ab6784f693de50b00fa535b9efbbe9d2cbf71f2 - https://issues.oss-fuzz.com/issues/396460413
CVE ID: CVE-2025-29770 State: PUBLISHED Published: 2025-03-19T15:31:00.403Z Last Updated: 2025-03-19T20:15:47.505Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: vllm-project Products: vllm Problem Types: CWE-770 Description: vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. The outlines library is one of the backends used by vLLM to support structured output (a.k.a. guided decoding). Outlines provides an optional cache for its compiled grammars on the local filesystem. This cache has been on by default in vLLM. Outlines is also available by default through the OpenAI compatible API server. The affected code in vLLM is vl
in vLLM. Outlines is also available by default through the OpenAI compatible API server. The affected code in vLLM is vllm/model_executor/guided_decoding/outlines_logits_processors.py, which unconditionally uses the cache from outlines. A malicious user can send a stream of very short decoding requests with unique schemas, resulting in an addition to the cache for each request. This can result in a Denial of Service if the filesystem runs out of space. Note that even if vLLM was configured to use a different backend by default, it is still possible to choose outlines on a per-request basis using the guided_decoding_backend key of the extra_body field of the request. This issue applies only t
er-request basis using the guided_decoding_backend key of the extra_body field of the request. This issue applies only to the V0 engine and is fixed in 0.8.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vllm-project/vllm/security/advisories/GHSA-mgrm-fgjv-mhv8 - https://github.com/vllm-project/vllm/pull/14837 - https://github.com/vllm-project/vllm/blob/53be4a863486d02bd96a59c674bbec23eec508f6/vllm/model_executor/guided_decoding/outlines_logits_processors.py
CVE ID: CVE-2025-29771 State: PUBLISHED Published: 2025-03-14T18:56:24.504Z Last Updated: 2025-03-18T14:26:06.976Z Vendors: jitbit Products: HtmlSanitizer Problem Types: CWE-79 Description: HtmlSanitizer is a client-side HTML Sanitizer. Versions prior to 2.0.3 have a cross-site scripting vulnerability when the sanitizer is used with a `contentEditable` element to set the elements `innerHTML` to a sanitized string produced by the package. If the code is particularly crafted to abuse the code beautifier, that runs AFTER sanitation. The issue is patched in version 2.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jitbit/HtmlSanitizer/security/advisories/
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jitbit/HtmlSanitizer/security/advisories/GHSA-vhv4-fh94-jm5x - https://github.com/jitbit/HtmlSanitizer/commit/af6d2a78877e7277cd01c825b7fb50edb5956963
CVE ID: CVE-2025-29772 State: PUBLISHED Published: 2025-03-31T16:03:32.711Z Last Updated: 2025-03-31T18:34:56.541Z Vendors: openemr Products: openemr Problem Types: CWE-79 Description: OpenEMR is a free and open source electronic health records and medical practice management application. The POST parameter hidden_subcategory is output to the page without being properly processed. This leads to a reflected cross-site scripting (XSS) vul;nerability in CAMOS new.php. This vulnerability is fixed in 7.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openemr/openemr/security/advisories/GHSA-89gp-g4c9-hv8h - https://github.com/openemr/openemr/commit/17c5c424
/github.com/openemr/openemr/security/advisories/GHSA-89gp-g4c9-hv8h - https://github.com/openemr/openemr/commit/17c5c424695de50db94f2c01fb9abfc441d09a1a
CVE ID: CVE-2025-29773 State: PUBLISHED Published: 2025-03-13T17:07:28.515Z Last Updated: 2025-03-13T18:30:56.388Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: froxlor Products: Froxlor Problem Types: CWE-287 Description: Froxlor is open-source server administration software. A vulnerability in versions prior to 2.2.6 allows users (such as resellers or customers) to create accounts with the same email address as an existing account. This creates potential issues with account identification and security. This vulnerability can be exploited by authenticated users (e.g., reseller, customer) who can create accounts with the same email address that has already
d by authenticated users (e.g., reseller, customer) who can create accounts with the same email address that has already been used by another account, such as the admin. The attack vector is email-based, as the system does not prevent multiple accounts from registering the same email address, leading to possible conflicts and security issues. Version 2.2.6 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/froxlor/Froxlor/security/advisories/GHSA-7j6w-p859-464f - https://github.com/froxlor/Froxlor/commit/a43d53d54034805e3e404702a01312fa0c40b623 - https://mega.nz/file/h8oFHQrL#I4V02_BWee4CCx7OoBl_2Ufkd5Wc7fvs5aCatGApkoQ
CVE ID: CVE-2025-29774 State: PUBLISHED Published: 2025-03-14T17:05:53.943Z Last Updated: 2025-03-15T20:50:21.614Z Vendors: node-saml Products: xml-crypto Problem Types: CWE-347 Description: xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerability in versions prior to 6.0.1, 3.2.1, and 2.1.6 to bypass authentication or authorization mechanisms in systems that rely on xml-crypto for verifying signed XML documents. The vulnerability allows an attacker to modify a valid signed XML message in a way that still passes signature verification checks. For example, it could be used to alter critical identity or access control attribu
passes signature verification checks. For example, it could be used to alter critical identity or access control attributes, enabling an attacker with a valid account to escalate privileges or impersonate another user. Users of versions 6.0.0 and prior should upgrade to version 6.0.1 to receive a fix. Those who are still using v2.x or v3.x should upgrade to patched versions 2.1.6 or 3.2.1, respectively. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/node-saml/xml-crypto/security/advisories/GHSA-9p8x-f768-wp2g - https://github.com/node-saml/xml-crypto/commit/28f92218ecbb8dcbd238afa4efbbd50302aa9aed - https://github.com/node-saml/xm
ttps://github.com/node-saml/xml-crypto/commit/28f92218ecbb8dcbd238afa4efbbd50302aa9aed - https://github.com/node-saml/xml-crypto/commit/886dc63a8b4bb5ae1db9f41c7854b171eb83aa98 - https://github.com/node-saml/xml-crypto/commit/8ac6118ee7978b46aa56b82cbcaa5fca58c93a07 - https://github.com/node-saml/xml-crypto/releases/tag/v2.1.6 - https://github.com/node-saml/xml-crypto/releases/tag/v3.2.1 - https://github.com/node-saml/xml-crypto/releases/tag/v6.0.1
CVE ID: CVE-2025-29775 State: PUBLISHED Published: 2025-03-14T17:11:05.590Z Last Updated: 2025-03-15T20:45:45.927Z Vendors: node-saml Products: xml-crypto Problem Types: CWE-347 Description: xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerability in versions prior to 6.0.1, 3.2.1, and 2.1.6 to bypass authentication or authorization mechanisms in systems that rely on xml-crypto for verifying signed XML documents. The vulnerability allows an attacker to modify a valid signed XML message in a way that still passes signature verification checks. For example, it could be used to alter critical identity or access control attribu
passes signature verification checks. For example, it could be used to alter critical identity or access control attributes, enabling an attacker to escalate privileges or impersonate another user. Users of versions 6.0.0 and prior should upgrade to version 6.0.1 to receive a fix. Those who are still using v2.x or v3.x should upgrade to patched versions 2.1.6 or 3.2.1, respectively. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/node-saml/xml-crypto/security/advisories/GHSA-x3m8-899r-f7c3 - https://github.com/node-saml/xml-crypto/commit/28f92218ecbb8dcbd238afa4efbbd50302aa9aed - https://github.com/node-saml/xml-crypto/commit/886dc
e-saml/xml-crypto/commit/28f92218ecbb8dcbd238afa4efbbd50302aa9aed - https://github.com/node-saml/xml-crypto/commit/886dc63a8b4bb5ae1db9f41c7854b171eb83aa98 - https://github.com/node-saml/xml-crypto/commit/8ac6118ee7978b46aa56b82cbcaa5fca58c93a07 - https://github.com/node-saml/xml-crypto/releases/tag/v2.1.6 - https://github.com/node-saml/xml-crypto/releases/tag/v3.2.1 - https://github.com/node-saml/xml-crypto/releases/tag/v6.0.1
CVE ID: CVE-2025-29776 State: PUBLISHED Published: 2025-03-14T13:13:27.137Z Last Updated: 2025-03-15T20:49:42.369Z Vendors: demergent-labs Products: azle Problem Types: CWE-835 Description: Azle is a WebAssembly runtime for TypeScript and JavaScript on ICP. Calling `setTimer` in Azle versions `0.27.0`, `0.28.0`, and `0.29.0` causes an immediate infinite loop of timers to be executed on the canister, each timer attempting to clean up the global state of the previous timer. The infinite loop will occur with any valid invocation of `setTimer`. The problem has been fixed as of Azle version `0.30.0`. As a workaround, if a canister is caught in this infinite loop after calling `setTimer`, the cani
Azle version `0.30.0`. As a workaround, if a canister is caught in this infinite loop after calling `setTimer`, the canister can be upgraded and the timers will all be cleared, thus ending the loop. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/demergent-labs/azle/security/advisories/GHSA-xc76-5pf9-mx8m - https://github.com/demergent-labs/azle/releases/tag/0.30.0
CVE ID: CVE-2025-29778 State: PUBLISHED Published: 2025-03-24T16:38:08.104Z Last Updated: 2025-03-24T17:55:28.379Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N) Vendors: kyverno Products: kyverno Problem Types: CWE-285 Description: Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to version 1.14.0-alpha.1, Kyverno ignores subjectRegExp and IssuerRegExp while verifying artifact's sign with keyless mode. It allows the attacker to deploy kubernetes resources with the artifacts that were signed by unexpected certificate. Deploying these unauthorized kubernetes resources can lead to full compromise of kubernetes cluster. Version 1.1
ficate. Deploying these unauthorized kubernetes resources can lead to full compromise of kubernetes cluster. Version 1.14.0-alpha.1 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kyverno/kyverno/security/advisories/GHSA-46mp-8w32-6g94 - https://github.com/kyverno/policies/issues/1246 - https://github.com/kyverno/kyverno/pull/12237 - https://github.com/kyverno/kyverno/commit/8777672fb17bdf252bd2e7d8de3441e240404a60 - https://github.com/Mohdcode/kyverno/blob/373f942ea9fa8b63140d0eb0e101b9a5f71033f3/pkg/cosign/cosign.go#L537
CVE ID: CVE-2025-29779 State: PUBLISHED Published: 2025-03-14T17:24:10.215Z Last Updated: 2025-03-19T15:27:08.671Z Vendors: DavidOsipov Products: PostQuantum-Feldman-VSS Problem Types: CWE-1240, CWE-1279 Description: Post-Quantum Secure Feldman's Verifiable Secret Sharing provides a Python implementation of Feldman's Verifiable Secret Sharing (VSS) scheme. In versions 0.8.0b2 and prior, the `secure_redundant_execution` function in feldman_vss.py attempts to mitigate fault injection attacks by executing a function multiple times and comparing results. However, several critical weaknesses exist. Python's execution environment cannot guarantee true isolation between redundant executions, the co
al weaknesses exist. Python's execution environment cannot guarantee true isolation between redundant executions, the constant-time comparison implementation in Python is subject to timing variations, the randomized execution order and timing provide insufficient protection against sophisticated fault attacks, and the error handling may leak timing information about partial execution results. These limitations make the protection ineffective against targeted fault injection attacks, especially from attackers with physical access to the hardware. A successful fault injection attack could allow an attacker to bypass the redundancy check mechanisms, extract secret polynomial coefficients during
attack could allow an attacker to bypass the redundancy check mechanisms, extract secret polynomial coefficients during share generation or verification, force the acceptance of invalid shares during verification, and/or manipulate the commitment verification process to accept fraudulent commitments. This undermines the core security guarantees of the Verifiable Secret Sharing scheme. As of time of publication, no patched versions of Post-Quantum Secure Feldman's Verifiable Secret Sharing exist, but other mitigations are available. Long-term remediation requires reimplementing the security-critical functions in a lower-level language like Rust. Short-term mitigations include deploying the s
ting the security-critical functions in a lower-level language like Rust. Short-term mitigations include deploying the software in environments with physical security controls, increasing the redundancy count (from 5 to a higher number) by modifying the source code, adding external verification of cryptographic operations when possible, considering using hardware security modules (HSMs) for key operations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/DavidOsipov/PostQuantum-Feldman-VSS/security/advisories/GHSA-r8gc-qc2c-c7vh - https://en.wikipedia.org/wiki/Fault_attack - https://eprint.iacr.org/2004/100.pdf
CVE ID: CVE-2025-29780 State: PUBLISHED Published: 2025-03-14T17:26:58.453Z Last Updated: 2025-03-19T15:27:58.698Z Vendors: DavidOsipov Products: PostQuantum-Feldman-VSS Problem Types: CWE-203, CWE-208, CWE-385 Description: Post-Quantum Secure Feldman's Verifiable Secret Sharing provides a Python implementation of Feldman's Verifiable Secret Sharing (VSS) scheme. In versions 0.8.0b2 and prior, the `feldman_vss` library contains timing side-channel vulnerabilities in its matrix operations, specifically within the `_find_secure_pivot` function and potentially other parts of `_secure_matrix_solve`. These vulnerabilities are due to Python's execution model, which does not guarantee constant-time
_secure_matrix_solve`. These vulnerabilities are due to Python's execution model, which does not guarantee constant-time execution. An attacker with the ability to measure the execution time of these functions (e.g., through repeated calls with carefully crafted inputs) could potentially recover secret information used in the Verifiable Secret Sharing (VSS) scheme. The `_find_secure_pivot` function, used during Gaussian elimination in `_secure_matrix_solve`, attempts to find a non-zero pivot element. However, the conditional statement `if matrix[row][col] != 0 and row_random < min_value:` has execution time that depends on the value of `matrix[row][col]`. This timing difference can be exploi
m < min_value:` has execution time that depends on the value of `matrix[row][col]`. This timing difference can be exploited by an attacker. The `constant_time_compare` function in this file also does not provide a constant-time guarantee. The Python implementation of matrix operations in the _find_secure_pivot and _secure_matrix_solve functions cannot guarantee constant-time execution, potentially leaking information about secret polynomial coefficients. An attacker with the ability to make precise timing measurements of these operations could potentially extract secret information through statistical analysis of execution times, though practical exploitation would require significant expert
ormation through statistical analysis of execution times, though practical exploitation would require significant expertise and controlled execution environments. Successful exploitation of these timing side-channels could allow an attacker to recover secret keys or other sensitive information protected by the VSS scheme. This could lead to a complete compromise of the shared secret. As of time of publication, no patched versions of Post-Quantum Secure Feldman's Verifiable Secret Sharing exist, but other mitigations are available. As acknowledged in the library's documentation, these vulnerabilities cannot be adequately addressed in pure Python. In the short term, consider using this library