Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
eaking changes. The issue has been patched in all active release lines as well as in the v21 prerelease. Patched packages include `@angular/platform-server` 21.0.0-next.3, 20.3.0, 19.2.15, and 18.2.14 and `@angular/ssr` 21.0.0-next.3, 20.3.0, 19.2.16, and 18.2.21. Several workarounds are available. Disable SSR via Server Routes or builder options, remove any asynchronous behavior from custom `bootstrap` functions, remove uses of `getPlatform()` in application code, and/or ensure that the server build defines `ngJitMode` as false. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/angular/angular/security/advisories/GHSA-68x2-mx4q-78m7 - https://github.com/ang
hment: References: - https://github.com/angular/angular/security/advisories/GHSA-68x2-mx4q-78m7 - https://github.com/angular/angular-cli/pull/31108 - https://github.com/angular/angular/pull/63562
CVE ID: CVE-2025-59053 State: PUBLISHED Published: 2025-09-11T18:26:52.485Z Last Updated: 2025-09-11T19:11:41.924Z Severity: CRITICAL (CVSS 9.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: moeru-ai Products: airi Problem Types: CWE-94 Description: AIRI is a self-hosted, artificial intelligence based Grok Companion. In v0.7.2-beta.2 in the `packages/stage-ui/src/components/MarkdownRenderer.vue` path, the Markdown content is processed using the useMarkdown composable, and the processed HTML is rendered directly into the DOM using v-html. An attacker creates a card file containing malicious HTML/JavaScript, then simply processes it using the highlightTagToHtml function (which simply r
ile containing malicious HTML/JavaScript, then simply processes it using the highlightTagToHtml function (which simply replaces template tags without HTML escaping), and then directly renders it using v-html, leading to cross-site scripting (XSS). The project also exposes the Tauri API, which can be called from the frontend. The MCP plugin exposes a command execution interface function in `crates/tauri-plugin-mcp/src/lib.rs`. This allows arbitrary command execution. `connect_server` directly passes the user-supplied `command` and `args` parameters to `Command::new(command).args(args)` without any input validation or whitelisting. Thus, the previous XSS exploit could achieve command execution
args(args)` without any input validation or whitelisting. Thus, the previous XSS exploit could achieve command execution through this interface. v0.7.2-beta.3 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/moeru-ai/airi/security/advisories/GHSA-9832-f8jx-hw6f - https://github.com/moeru-ai/airi/commit/3315634903c9102a19e8f0476970df01801c8ca4
CVE ID: CVE-2025-59054 State: PUBLISHED Published: 2025-09-12T13:01:02.816Z Last Updated: 2025-09-12T14:34:39.597Z Vendors: Dstack-TEE Products: dstack Problem Types: CWE-552 Description: dstack is a software development kit (SDK) to simplify the deployment of arbitrary containerized apps into trusted execution environments. In versions of dstack prior to 0.5.4, a malicious host may provide a crafted LUKS2 data volume to a dstack CVM for use as the `/data` mount. The guest will open the volume and write secret data using a volume key known to the attacker, causing disclosure of Wireguard keys and other secret information. The attacker can also pre-load data on the device, which could potenti
e of Wireguard keys and other secret information. The attacker can also pre-load data on the device, which could potentially compromise guest execution. LUKS2 volume metadata is not authenticated and supports null key-encryption algorithms, allowing an attacker to create a volume such that the volume opens (cryptsetup open) without error using any passphrase or token, records all writes in plaintext (or ciphertext with an attacker-known key), and/or contains arbitrary data chosen by the attacker. Version 0.5.4 of dstack contains a patch that addresses LUKS headers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Dstack-TEE/dstack/security/advisories/GHSA-j
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Dstack-TEE/dstack/security/advisories/GHSA-jxq2-hpw3-m5wf - https://github.com/Dstack-TEE/dstack/commit/e36ad5f732d8821876a861934e1f47cda7b1a130 - https://github.com/Dstack-TEE/dstack/blob/04de4e422bb06f075b4215b2cfc410f5d7ac7aed/dstack-util/src/system_setup.rs#L453-L456 - https://gitlab.com/cryptsetup/cryptsetup/-/merge_requests/837
CVE ID: CVE-2025-59055 State: PUBLISHED Published: 2025-09-11T18:46:29.139Z Last Updated: 2025-09-11T19:10:51.221Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: instantsoft Products: icms2 Problem Types: CWE-918 Description: InstantCMS is a free and open source content management system. A blind Server-Side Request Forgery (SSRF) vulnerability in InstantCMS up to and including 2.17.3 allows authenticated remote attackers to make nay HTTP/HTTPS request via the package parameter. It is possible to make any HTTP/HTTPS request to any website in installer functionality. Due to such vulnerability it is possible to for example scan local network, call local servi
in installer functionality. Due to such vulnerability it is possible to for example scan local network, call local services and its functions, conduct a DoS attack, and/or disclose a server's real IP if it's behind a reverse proxy. It is also possible to exhaust server resources by sending plethora of such requests. As of time of publication, no patched releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/instantsoft/icms2/security/advisories/GHSA-79hh-mhvg-whrw - https://github.com/instantsoft/icms2/commit/fa997bdab3429fad0c850966bfacbcb96d5ab041
CVE ID: CVE-2025-59056 State: PUBLISHED Published: 2025-09-15T21:04:07.875Z Last Updated: 2025-09-16T15:42:30.971Z Vendors: FreePBX Products: security-reporting Problem Types: CWE-22 Description: FreePBX is an open-source web-based graphical user interface. In FreePBX 15, 16, and 17, malicious connections to the Administrator Control Panel web interface can cause the uninstall function to be triggered for certain modules. This function drops the module's database tables, which is where most modules store their configuration. This vulnerability is fixed in 15.0.38, 16.0.41, and 17.0.21. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FreePBX/security-report
and 17.0.21. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FreePBX/security-reporting/security/advisories/GHSA-frc2-jhgg-rwpr - https://github.com/FreePBX/framework/blame/release/17.0/amp_conf/htdocs/admin/ajax.php#L18
CVE ID: CVE-2025-59058 State: PUBLISHED Published: 2025-09-12T13:10:11.349Z Last Updated: 2025-09-12T13:45:48.203Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: junkurihara Products: httpsig-rs Problem Types: CWE-208 Description: httpsig-rs is a Rust implementation of IETF RFC 9421 http message signatures. Prior to version 0.0.19, the HMAC signature comparison is not timing-safe. This makes anyone who uses HS256 signature verification vulnerable to a timing attack that allows the attacker to forge a signature. Version 0.0.19 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/junkurihara/httpsig-rs/security/
ue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/junkurihara/httpsig-rs/security/advisories/GHSA-q7pg-9pr4-mrp2 - https://github.com/junkurihara/httpsig-rs/commit/fc095b6ce6043bb808f5d9c4379cf697899cb458
CVE ID: CVE-2025-59088 State: PUBLISHED Published: 2025-11-12T16:35:27.877Z Last Updated: 2025-11-20T08:56:05.899Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services
te Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Enterprise Linux 7 Problem Types: CWE-918 Description: If kdcproxy receives a request for a realm which does not have server addresses defined in its configurat
8 Description: If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the requested realm name. This creates a server-side request forgery vulnerability, since an attacker could send a request for a realm matching a DNS zone where they created SRV records pointing to arbitrary ports and hostnames (which may resolve to loopback or internal IP addresses). This vulnerability can be exploited to probe internal network topology and firewall rules, perform port scanning, and exfiltrate data. Deployments where the "use_dns" setting is explicitly set to false are not affected. Additi
anning, and exfiltrate data. Deployments where the "use_dns" setting is explicitly set to false are not affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:21138 - https://access.redhat.com/errata/RHSA-2025:21139 - https://access.redhat.com/errata/RHSA-2025:21140 - https://access.redhat.com/errata/RHSA-2025:21141 - https://access.redhat.com/errata/RHSA-2025:21142 - https://access.redhat.com/errata/RHSA-2025:21448 - https://access.redhat.com/errata/RHSA-2025:21748 - https://access.redhat.com/errata/RHSA-2025:21806 - https://access.redhat.com/errata/RHSA-2025:21818 - https://access.redhat.com/errata/RHSA-2025:21819 - https://acc
1806 - https://access.redhat.com/errata/RHSA-2025:21818 - https://access.redhat.com/errata/RHSA-2025:21819 - https://access.redhat.com/errata/RHSA-2025:21820 - https://access.redhat.com/errata/RHSA-2025:21821 - https://access.redhat.com/security/cve/CVE-2025-59088 - https://bugzilla.redhat.com/show_bug.cgi?id=2393955 - https://github.com/latchset/kdcproxy/pull/68
CVE ID: CVE-2025-59089 State: PUBLISHED Published: 2025-11-12T16:40:50.725Z Last Updated: 2025-11-20T21:27:53.739Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Servic
date Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Enterprise Linux 7 Problem Types: CWE-770 Description: If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g. through server-sid
770 Description: If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g. through server-side request forgery), they can exploit the fact that kdcproxy does not enforce bounds on TCP response length to conduct a denial-of-service attack. While receiving the KDC's response, kdcproxy copies the entire buffered stream into a new buffer on each recv() call, even when the transfer is incomplete, causing excessive memory allocation and CPU usage. Additionally, kdcproxy accepts incoming response chunks as long as the received data length is not exactly equal to the length indicated in the response header, even when individual chunks or the total buffer exceed the maximum
equal to the length indicated in the response header, even when individual chunks or the total buffer exceed the maximum length of a Kerberos message. This allows an attacker to send unbounded data until the connection timeout is reached (approximately 12 seconds), exhausting server memory or CPU resources. Multiple concurrent requests can cause accept queue overflow, denying service to legitimate clients. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:21138 - https://access.redhat.com/errata/RHSA-2025:21139 - https://access.redhat.com/errata/RHSA-2025:21140 - https://access.redhat.com/errata/RHSA-2025:21141 - https://access.redhat
ps://access.redhat.com/errata/RHSA-2025:21140 - https://access.redhat.com/errata/RHSA-2025:21141 - https://access.redhat.com/errata/RHSA-2025:21142 - https://access.redhat.com/errata/RHSA-2025:21448 - https://access.redhat.com/errata/RHSA-2025:21748 - https://access.redhat.com/errata/RHSA-2025:21806 - https://access.redhat.com/errata/RHSA-2025:21818 - https://access.redhat.com/errata/RHSA-2025:21819 - https://access.redhat.com/errata/RHSA-2025:21820 - https://access.redhat.com/errata/RHSA-2025:21821 - https://access.redhat.com/security/cve/CVE-2025-59089 - https://bugzilla.redhat.com/show_bug.cgi?id=2393958 - https://github.com/latchset/kdcproxy/pull/68
CVE ID: CVE-2025-59110 State: PUBLISHED Published: 2025-11-18T13:26:29.098Z Last Updated: 2025-11-18T19:34:54.529Z Vendors: JCD Products: Windu CMS Problem Types: CWE-352 Description: Windu CMS is vulnerable to Cross-Site Request Forgery in user editing functionality. Implemented CSRF protection mechanism can be bypassed by using CSRF token of other user. It is worth noting that the registration is open and anyone can create an account. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 4.1 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable. Add
nly version 4.1 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://windu.org/ - https://cert.pl/posts/2025/11/CVE-2025-59110
CVE ID: CVE-2025-59111 State: PUBLISHED Published: 2025-11-18T13:26:39.486Z Last Updated: 2025-11-18T15:32:08.259Z Vendors: JCD Products: Windu CMS Problem Types: CWE-863 Description: Windu CMS is vulnerable to Broken Access Control in user editing functionality. Malicious attacker can send a GET request which allows privileged users to delete Super Admins which is not possible with GUI. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 4.1 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
able, other versions were not tested and might also be vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://windu.org - https://cert.pl/posts/2025/11/CVE-2025-59110
CVE ID: CVE-2025-59112 State: PUBLISHED Published: 2025-11-18T13:26:31.060Z Last Updated: 2025-11-18T19:32:33.667Z Vendors: JCD Products: Windu CMS Problem Types: CWE-352 Description: Windu CMS is vulnerable to Cross-Site Request Forgery in user editing functionality. Malicious attacker can craft special website, which when visited by the victim, will automatically send POST request that deletes given user. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 4.1 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable. Additional Analyst Notes: - CISA
confirmed as vulnerable, other versions were not tested and might also be vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://windu.org - https://cert.pl/posts/2025/11/CVE-2025-59110
CVE ID: CVE-2025-59113 State: PUBLISHED Published: 2025-11-18T13:26:31.504Z Last Updated: 2025-11-18T17:13:06.755Z Vendors: JCD Products: Windu CMS Problem Types: CWE-307 Description: Windu CMS implements weak client-side brute-force protection by using parameter loginError. Information about attempt count or timeout is not stored on the server, which allows a malicious attacker to bypass this brute-force protection by resetting this parameter. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 4.1 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnera
range. Only version 4.1 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://windu.org - https://cert.pl/posts/2025/11/CVE-2025-59110
CVE ID: CVE-2025-59114 State: PUBLISHED Published: 2025-11-18T13:26:31.881Z Last Updated: 2025-11-18T16:59:27.031Z Vendors: JCD Products: Windu CMS Problem Types: CWE-352 Description: Windu CMS is vulnerable to Cross-Site Request Forgery in file uploading functionality. Malicious attacker can craft special website, which when visited by the victim, will automatically send malicious file to the server. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 4.1 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable. Additional Analyst Notes: - CISA ADP Vu
rmed as vulnerable, other versions were not tested and might also be vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://windu.org - https://cert.pl/posts/2025/11/CVE-2025-59110
CVE ID: CVE-2025-59115 State: PUBLISHED Published: 2025-11-18T13:26:32.325Z Last Updated: 2025-11-18T16:43:16.598Z Vendors: JCD Products: Windu CMS Problem Types: CWE-79 Description: Windu CMS is vulnerable to Stored Cross-Site Scripting (XSS) in the logon page where input data has no proper validation. Malicious attacker can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting logs page by admin. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 4.1 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable. Additio
version 4.1 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://windu.org - https://cert.pl/posts/2025/11/CVE-2025-59110
CVE ID: CVE-2025-59116 State: PUBLISHED Published: 2025-11-18T13:26:56.775Z Last Updated: 2025-11-18T15:13:05.365Z Vendors: JCD Products: Windu CMS Problem Types: CWE-204 Description: Windu CMS is vulnerable to User Enumeration. This issue occurs during logon, where a difference in messages could allow an attacker to determine if the login is valid or not, enabling a brute force attack with valid logins. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 4.1 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable. Additional Analyst Notes: - CISA ADP
nfirmed as vulnerable, other versions were not tested and might also be vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://windu.org - https://cert.pl/posts/2025/11/CVE-2025-59110
CVE ID: CVE-2025-59117 State: PUBLISHED Published: 2025-11-18T13:26:33.240Z Last Updated: 2025-11-18T15:47:59.801Z Vendors: JCD Products: Windu CMS Problem Types: CWE-79 Description: Windu CMS is vulnerable to multiple Stored Cross-Site Scripting (XSS) vulnerabilities in the page editing endpoint windu/admin/content/pages/edit/. This vulnerability can be exploited by a privileged user and may target users with higher privileges. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 4.1 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable. Additional
ion 4.1 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://windu.org - https://cert.pl/posts/2025/11/CVE-2025-59110
CVE ID: CVE-2025-59118 State: PUBLISHED Published: 2025-11-12T09:15:54.263Z Last Updated: 2025-11-12T14:31:48.367Z Vendors: Apache Software Foundation Products: Apache OFBiz Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.03. Users are recommended to upgrade to version 24.09.03, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ofbiz.apache.org/download.html - https://ofbiz.apache.org/security.html - https://ofbiz.apache.org/release-notes-24.09.03.html - https://issues.apache.org/jira/browse/OFBIZ-13292 - https
.html - https://ofbiz.apache.org/release-notes-24.09.03.html - https://issues.apache.org/jira/browse/OFBIZ-13292 - https://lists.apache.org/thread/202263kpy7g76pzsy1fm96h9lcmhsqpt
CVE ID: CVE-2025-59139 State: PUBLISHED Published: 2025-09-12T13:03:05.777Z Last Updated: 2025-09-12T13:45:58.215Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: honojs Products: hono Problem Types: CWE-400, CWE-770 Description: Hono is a Web application framework that provides support for any JavaScript runtime. In versions prior to 4.9.7, a flaw in the `bodyLimit` middleware could allow bypassing the configured request body size limit when conflicting HTTP headers were present. The middleware previously prioritized the `Content-Length` header even when a `Transfer-Encoding: chunked` header was also included. According to the HTTP specification, `Content-L
eader even when a `Transfer-Encoding: chunked` header was also included. According to the HTTP specification, `Content-Length` must be ignored in such cases. This discrepancy could allow oversized request bodies to bypass the configured limit. Most standards-compliant runtimes and reverse proxies may reject such malformed requests with `400 Bad Request`, so the practical impact depends on the runtime and deployment environment. If body size limits are used as a safeguard against large or malicious requests, this flaw could allow attackers to send oversized request bodies. The primary risk is denial of service (DoS) due to excessive memory or CPU consumption when handling very large requests.