Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-g3x6-p824-x6hm - https://github.com/freeswitch/sofia-sip/commit/51841eb53679434a386fb2dcbca925dcc48d58ba - https://lists.debian.org/debian-lts-announce/2022/09/msg00001.html - https://security.gentoo.org/glsa/202210-18 - https://www.debian.org/security/2023/dsa-5410
CVE ID: CVE-2022-31003 State: PUBLISHED Published: 2022-05-31T00:00:00.000Z Last Updated: 2025-04-22T17:55:56.743Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: freeswitch Products: sofia-sip Problem Types: CWE-122, CWE-787 Description: Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, when parsing each line of a sdp message, `rest = record + 2` will access the memory behind `\0` and cause an out-of-bounds write. An attacker can send a message with evil sdp to FreeSWITCH, causing a crash or more serious consequence, such as remote code execution. Version 1.13.8 contains a patch for this issue. Addi
a crash or more serious consequence, such as remote code execution. Version 1.13.8 contains a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-8w5j-6g2j-pxcp - https://github.com/freeswitch/sofia-sip/commit/907f2ac0ee504c93ebfefd676b4632a3575908c9 - https://lists.debian.org/debian-lts-announce/2022/09/msg00001.html - https://security.gentoo.org/glsa/202210-18 - https://www.debian.org/security/2023/dsa-5410
CVE ID: CVE-2022-31004 State: PUBLISHED Published: 2022-05-25T21:55:09.000Z Last Updated: 2025-04-22T17:56:17.412Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: CVEProject Products: cve-services Problem Types: CWE-779 Description: CVEProject/cve-services is an open source project used to operate the CVE services API. A conditional in 'data.js' has potential for production secrets to be written to disk. The affected method writes the generated randomKey to disk if the environment is not development. If this method were called in production, it is possible that it would write the plaintext key to disk. A patch is not available as of time of publication but is
it is possible that it would write the plaintext key to disk. A patch is not available as of time of publication but is anticipated as a "hot fix" for version 1.1.1 and for the 2.x branch. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CVEProject/cve-services/security/advisories/GHSA-mpwm-rmqp-7629 - https://github.com/CVEProject/cve-services/blob/6b085e481fd3b084a8828ef7489c6b82fa415c92/src/utils/data.js#L68-L83
CVE ID: CVE-2022-31005 State: PUBLISHED Published: 2022-05-31T19:35:11.000Z Last Updated: 2025-04-22T17:55:35.387Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: vapor Products: vapor Problem Types: CWE-190 Description: Vapor is an HTTP web framework for Swift. Users of Vapor prior to version 4.60.3 with FileMiddleware enabled are vulnerable to an integer overflow vulnerability that can crash the application. Version 4.60.3 contains a patch for this issue. As a workaround, disable FileMiddleware and serve via a Content Delivery Network. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vapor/vapor/sec
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vapor/vapor/security/advisories/GHSA-vj2m-9f5j-mpr5 - https://github.com/vapor/vapor/commit/953a349b539b3e0d3653585c8ffb50c427986df1 - https://github.com/vapor/vapor/releases/tag/4.60.3
CVE ID: CVE-2022-31006 State: PUBLISHED Published: 2022-09-09T19:10:10.000Z Last Updated: 2025-04-23T17:12:25.356Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: hyperledger Products: indy-node Problem Types: CWE-400 Description: indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In vulnerable versions of indy-node, an attacker can max out the number of client connections allowed by the ledger, leaving the ledger unable to be used for its intended purpose. However, the ledger content will not be impacted and the ledger will resume functioning after the attack. This attack exploits the trade-off
ontent will not be impacted and the ledger will resume functioning after the attack. This attack exploits the trade-off between resilience and availability. Any protection against abusive client connections will also prevent the network being accessed by certain legitimate users. As a result, validator nodes must tune their firewall rules to ensure the right trade-off for their network's expected users. The guidance to network operators for the use of firewall rules in the deployment of Indy networks has been modified to better protect against denial of service attacks by increasing the cost and complexity in mounting such attacks. The mitigation for this vulnerability is not in the Hyperled
ncreasing the cost and complexity in mounting such attacks. The mitigation for this vulnerability is not in the Hyperledger Indy code per se, but rather in the individual deployments of Indy. The mitigations should be applied to all deployments of Indy, and are not related to a particular release. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hyperledger/indy-node/security/advisories/GHSA-x996-7qh9-7ff7 - https://github.com/hyperledger/indy-node/commit/53a2a1bf1a26cb8ba710fd6adc8bcf275186a4b3
CVE ID: CVE-2022-31007 State: PUBLISHED Published: 2022-05-31T19:30:13.000Z Last Updated: 2025-04-23T18:21:01.696Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: elabftw Products: elabftw Problem Types: CWE-842, CWE-1287 Description: eLabFTW is an electronic lab notebook manager for research teams. Prior to version 4.3.0, a vulnerability allows an authenticated user with an administrator role in a team to assign itself system administrator privileges within the application, or create a new system administrator account. The issue has been corrected in eLabFTW version 4.3.0. In the context of eLabFTW, an administrator is a user account with certain privileges
orrected in eLabFTW version 4.3.0. In the context of eLabFTW, an administrator is a user account with certain privileges to manage users and content in their assigned team/teams. A system administrator account can manage all accounts, teams and edit system-wide settings within the application. The impact is not deemed as high, as it requires the attacker to have access to an administrator account. Regular user accounts cannot exploit this to gain admin rights. A workaround for one if the issues is removing the ability of administrators to create accounts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/elabftw/elabftw/security/advi
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/elabftw/elabftw/security/advisories/GHSA-937c-m7p3-775v - https://github.com/elabftw/elabftw/releases/tag/4.3.0
CVE ID: CVE-2022-31008 State: PUBLISHED Published: 2022-10-06T00:00:00.000Z Last Updated: 2025-04-23T16:53:12.123Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: rabbitmq Products: rabbitmq-server Problem Types: CWE-330 Description: RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctl
el and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctly use a cluster-wide secret for that purpose. This issue has been addressed and Patched versions: `3.10.2`, `3.9.18`, `3.8.32` are available. Users unable to upgrade should disable the Shovel and Federation plugins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-v9gv-xp36-jgj8 - https://github.com/rabbitmq/rabbitmq-server/pull/4841
CVE ID: CVE-2022-31009 State: PUBLISHED Published: 2022-06-23T06:40:10.000Z Last Updated: 2025-04-23T18:09:07.862Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: wireapp Products: wire-ios Problem Types: CWE-617 Description: wire-ios is an iOS client for the Wire secure messaging application. Invalid accent colors of Wire communication partners may render the iOS Wire Client partially unusable by causing it to crash multiple times on launch. These invalid accent colors can be used by and sent between Wire users. The root cause was an unnecessary assert statement when converting an integer value into the corresponding enum value, causing an exception instead
essary assert statement when converting an integer value into the corresponding enum value, causing an exception instead of a fallback to a default value. This issue is fixed in [wire-ios](https://github.com/wireapp/wire-ios/commit/caa0e27dbe51f9edfda8c7a9f017d93b8cfddefb) and in Wire for iOS 3.100. There is no workaround available, but users may use other Wire clients (such as the [web app](https://app.wire.com)) to continue using Wire, or upgrade their client. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wireapp/wire-ios/security/advisories/GHSA-83m6-p7x5-925j - https://github.com/wireapp/wire-ios/commit/caa0e27dbe51f9edfda8c7
app/wire-ios/security/advisories/GHSA-83m6-p7x5-925j - https://github.com/wireapp/wire-ios/commit/caa0e27dbe51f9edfda8c7a9f017d93b8cfddefb
CVE ID: CVE-2022-31011 State: PUBLISHED Published: 2022-05-31T19:30:18.000Z Last Updated: 2025-04-23T18:20:55.933Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: pingcap Products: tidb Problem Types: CWE-287 Description: TiDB is an open-source NewSQL database that supports Hybrid Transactional and Analytical Processing (HTAP) workloads. Under certain conditions, an attacker can construct malicious authentication requests to bypass the authentication process, resulting in privilege escalation or unauthorized access. Only users using TiDB 5.3.0 are affected by this vulnerability. TiDB version 5.3.1 contains a patch for this issue. Other mitigation strategies in
0 are affected by this vulnerability. TiDB version 5.3.1 contains a patch for this issue. Other mitigation strategies include turning off Security Enhanced Mode (SEM), disabling local login for non-root accounts, and ensuring that the same IP cannot be logged in as root and normal user at the same time. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pingcap/tidb/security/advisories/GHSA-4whx-7p29-mq22 - https://github.com/pingcap/tidb/releases/tag/v5.3.1
CVE ID: CVE-2022-31012 State: PUBLISHED Published: 2022-07-12T20:35:15.000Z Last Updated: 2025-04-23T18:02:50.999Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: git-for-windows Products: git Problem Types: CWE-426 Description: Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer execute a binary into `C:\mingw64\bin\git.exe` by mistake. This only happens upon a fresh install, not when upgrading Git for Windows. A patch is included in version 2.37.1. Two workarounds are available. Create the `C:\mingw64` folder and remove read/write access from this folder, or d
.37.1. Two workarounds are available. Create the `C:\mingw64` folder and remove read/write access from this folder, or disallow arbitrary authenticated users to create folders in `C:\`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/git-for-windows/git/security/advisories/GHSA-gjrj-fxvp-hjj2 - https://github.com/git-for-windows/git/releases/tag/v2.37.1.windows.1
CVE ID: CVE-2022-31013 State: PUBLISHED Published: 2022-05-31T22:35:11.000Z Last Updated: 2025-04-23T18:20:50.164Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: ramank775 Products: chat-server Problem Types: CWE-287 Description: Chat Server is the chat server for Vartalap, an open-source messaging application. Versions 2.3.2 until 2.6.0 suffer from a bug in validating the access token, resulting in authentication bypass. The function `this.authProvider.verifyAccessKey` is an async function, as the code is not using `await` to wait for the verification result. Every time the function responds back with success, along with an unhandled exception if the tok
he verification result. Every time the function responds back with success, along with an unhandled exception if the token is invalid. A patch is available in version 2.6.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ramank775/chat-server/security/advisories/GHSA-xx4j-qqpp-v277 - https://github.com/ramank775/chat-server/discussions/78 - https://github.com/ramank775/chat-server/releases/tag/v2.6.0
CVE ID: CVE-2022-31014 State: PUBLISHED Published: 2022-07-05T17:15:12.000Z Last Updated: 2025-04-22T17:52:24.302Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-74, CWE-93 Description: Nextcloud server is an open source personal cloud server. Affected versions were found to be vulnerable to SMTP command injection. The impact varies based on which commands are supported by the backend SMTP server. However, the main risk here is that the attacker can then hijack an already-authenticated SMTP session and run arbitrary SMTP commands as the email user, such as sending emails to other users, changing the
ated SMTP session and run arbitrary SMTP commands as the email user, such as sending emails to other users, changing the FROM user, and so on. As before, this depends on the configuration of the server itself, but newlines should be sanitized to mitigate such arbitrary SMTP command injection. It is recommended that the Nextcloud Server is upgraded to 22.2.8 , 23.0.5 or 24.0.1. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-264h-3v4w-6xh2 - https://github.com/nextcloud/server/pull/32428 - https://hackerone.com/reports/1516377
CVE ID: CVE-2022-31015 State: PUBLISHED Published: 2022-05-31T22:50:12.000Z Last Updated: 2025-04-22T17:55:26.641Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Pylons Products: waitress Problem Types: CWE-248, CWE-362 Description: Waitress is a Web Server Gateway Interface server for Python 2 and 3. Waitress versions 2.1.0 and 2.1.1 may terminate early due to a thread closing a socket while the main thread is about to call select(). This will lead to the main thread raising an exception that is not handled and then causing the entire application to be killed. This issue has been fixed in Waitress 2.1.2 by no longer allowing the WSGI thread to close the so
lication to be killed. This issue has been fixed in Waitress 2.1.2 by no longer allowing the WSGI thread to close the socket. Instead, that is always delegated to the main thread. There is no work-around for this issue. However, users using waitress behind a reverse proxy server are less likely to have issues if the reverse proxy always reads the full response. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Pylons/waitress/security/advisories/GHSA-f5x9-8jwc-25rw - https://github.com/Pylons/waitress/issues/374 - https://github.com/Pylons/waitress/pull/377 - https://github.com/Pylons/waitress/commit/4f6789b035610e0552738cdc4b35ca809
ttps://github.com/Pylons/waitress/pull/377 - https://github.com/Pylons/waitress/commit/4f6789b035610e0552738cdc4b35ca809a592d48
CVE ID: CVE-2022-31016 State: PUBLISHED Published: 2022-06-25T07:40:10.000Z Last Updated: 2025-04-23T18:08:48.592Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: argoproj Products: argo-cd Problem Types: CWE-400 Description: Argo CD is a declarative continuous deployment for Kubernetes. Argo CD versions v0.7.0 and later are vulnerable to an uncontrolled memory consumption bug, allowing an authorized malicious user to crash the repo-server service, resulting in a Denial of Service. The attacker must be an authenticated Argo CD user authorized to deploy Applications from a repository which contains (or can be made to contain) a large file. The fix for this vu
ed to deploy Applications from a repository which contains (or can be made to contain) a large file. The fix for this vulnerability is available in versions 2.3.5, 2.2.10, 2.1.16, and later. There are no known workarounds. Users are recommended to upgrade. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/argoproj/argo-cd/security/advisories/GHSA-jhqp-vf4w-rpwq
CVE ID: CVE-2022-31017 State: PUBLISHED Published: 2022-06-25T08:15:16.000Z Last Updated: 2025-04-23T18:08:41.319Z Severity: LOW (CVSS 2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N) Vendors: zulip Products: zulip Problem Types: CWE-571, CWE-670 Description: Zulip is an open-source team collaboration tool. Versions 2.1.0 through and including 5.2 are vulnerable to a logic error. A stream configured as private with protected history, where new subscribers should not be allowed to see messages sent before they were subscribed, when edited causes the server to incorrectly send an API event that includes the edited message to all of the stream’s current subscribers. This API event is ignored by
an API event that includes the edited message to all of the stream’s current subscribers. This API event is ignored by official clients, but can be observed by using a modified client or the browser’s developer tools. This bug will be fixed in Zulip Server 5.3. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zulip/zulip/security/advisories/GHSA-m5j3-jp59-6f3q
CVE ID: CVE-2022-31018 State: PUBLISHED Published: 2022-06-02T16:45:13.000Z Last Updated: 2025-04-23T18:20:02.455Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: playframework Products: playframework Problem Types: CWE-400 Description: Play Framework is a web framework for Java and Scala. A denial of service vulnerability has been discovered in verions 2.8.3 through 2.8.15 of Play's forms library, in both the Scala and Java APIs. This can occur when using either the `Form#bindFromRequest` method on a JSON request body or the `Form#bind` method directly on a JSON value. If the JSON data being bound to the form contains a deeply-nested JSON object or array, the
od directly on a JSON value. If the JSON data being bound to the form contains a deeply-nested JSON object or array, the form binding implementation may consume all available heap space and cause an `OutOfMemoryError`. If executing on the default dispatcher and `akka.jvm-exit-on-fatal-error` is enabled—as it is by default—then this can crash the application process. `Form.bindFromRequest` is vulnerable when using any body parser that produces a type of `AnyContent` or `JsValue` in Scala, or one that can produce a `JsonNode` in Java. This includes Play's default body parser. This vulnerability been patched in version 2.8.16. There is now a global limit on the depth of a JSON object that can b
This vulnerability been patched in version 2.8.16. There is now a global limit on the depth of a JSON object that can be parsed, which can be configured by the user if necessary. As a workaround, applications that do not need to parse a request body of type `application/json` can switch from the default body parser to another body parser that supports only the specific type of body they expect. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/playframework/playframework/security/advisories/GHSA-v8x6-59g4-5g3w - https://github.com/playframework/playframework/pull/11301 - https://github.com/playframework/playframework/releases/tag/2.
tps://github.com/playframework/playframework/pull/11301 - https://github.com/playframework/playframework/releases/tag/2.8.16
CVE ID: CVE-2022-31019 State: PUBLISHED Published: 2022-06-06T21:05:20.000Z Last Updated: 2025-04-22T17:54:38.010Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: vapor Products: vapor Problem Types: CWE-120 Description: Vapor is a server-side Swift HTTP web framework. When using automatic content decoding an attacker can craft a request body that can make the server crash with the following request: `curl -d "array[_0][0][array][_0][0][array]$(for f in $(seq 1100); do echo -n '[_0][0][array]'; done)[string][_0]=hello%20world" http://localhost:8080/foo`. The issue is unbounded, attacker controlled stack growth which will at some point lead to a stack overflow
t:8080/foo`. The issue is unbounded, attacker controlled stack growth which will at some point lead to a stack overflow and a process crash. This issue has been fixed in version 4.61.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vapor/vapor/security/advisories/GHSA-qvxg-wjxc-r4gg - https://github.com/vapor/vapor/commit/6c63226a4ab82ce53730eb1afb9ca63866fcf033
CVE ID: CVE-2022-31020 State: PUBLISHED Published: 2022-09-06T16:30:19.000Z Last Updated: 2025-04-23T17:14:59.072Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: hyperledger Products: indy-node Problem Types: CWE-287, CWE-20 Description: Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In versions 1.12.4 and prior, the `pool-upgrade` request handler in Indy-Node allows an improperly authenticated attacker to remotely execute code on nodes within the network. The `pool-upgrade` request handler in Indy-Node 1.12.5 has been updated to properly authenticate pool-upgrade transactions before any processing is perform
in Indy-Node 1.12.5 has been updated to properly authenticate pool-upgrade transactions before any processing is performed by the request handler. The transactions are further sanitized to prevent remote code execution. As a workaround, endorsers should not create DIDs for untrusted users. A vulnerable ledger should configure `auth_rules` to prevent new DIDs from being written to the ledger until the network can be upgraded. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hyperledger/indy-node/security/advisories/GHSA-r6v9-p59m-gj2p - https://github.com/hyperledger/indy-node/commit/fe507474f77084faef4539101e2bbb4d508a97f5 - https:/
GHSA-r6v9-p59m-gj2p - https://github.com/hyperledger/indy-node/commit/fe507474f77084faef4539101e2bbb4d508a97f5 - https://github.com/hyperledger/indy-node/releases/tag/v1.12.5