Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-21260 State: PUBLISHED Published: 2021-01-22T17:20:15 Last Updated: 2024-08-03T18:09:15.041Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N) Vendors: bigprof-software Products: online-invoicing-system Problem Types: CWE-79 Description: Online Invoicing System (OIS) is open source software which is a lean invoicing system for small businesses, consultants and freelancers created using AppGini. In OIS version 4.0 there is a stored XSS which can enables an attacker takeover of the admin account through a payload that extracts a csrf token and sends a request to change password. It has been found that Item description is reflected without sanitization in a
n and sends a request to change password. It has been found that Item description is reflected without sanitization in app/items_view.php which enables the malicious scenario. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigprof-software/online-invoicing-system/security/advisories/GHSA-rm79-5596-r7q4 - https://github.com/bigprof-software/online-invoicing-system/releases/tag/4.2
CVE ID: CVE-2021-21261 State: PUBLISHED Published: 2021-01-14T19:40:21 Last Updated: 2024-08-03T18:09:14.989Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N) Vendors: flatpak Products: flatpak Problem Types: CWE-74 Description: Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the `flatpak-portal` service that can allow sandboxed applications to execute arbitrary code on the host system (a sandbox escape). This sandbox-escape bug is present in versions from 0.11.4 and before fixed versions 1.8.5 and 1.10.0. The Flatpak portal D-Bus service (`flatpak-portal`, also known by its D-Bus service name
xed versions 1.8.5 and 1.10.0. The Flatpak portal D-Bus service (`flatpak-portal`, also known by its D-Bus service name `org.freedesktop.portal.Flatpak`) allows apps in a Flatpak sandbox to launch their own subprocesses in a new sandbox instance, either with the same security settings as the caller or with more restrictive security settings. For example, this is used in Flatpak-packaged web browsers such as Chromium to launch subprocesses that will process untrusted web content, and give those subprocesses a more restrictive sandbox than the browser itself. In vulnerable versions, the Flatpak portal service passes caller-specified environment variables to non-sandboxed processes on the host
rsions, the Flatpak portal service passes caller-specified environment variables to non-sandboxed processes on the host system, and in particular to the `flatpak run` command that is used to launch the new sandbox instance. A malicious or compromised Flatpak app could set environment variables that are trusted by the `flatpak run` command, and use them to execute arbitrary code that is not in a sandbox. As a workaround, this vulnerability can be mitigated by preventing the `flatpak-portal` service from starting, but that mitigation will prevent many Flatpak apps from working correctly. This is fixed in versions 1.8.5 and 1.10.0. Additional Analyst Notes: - CVE Program Container: References:
g correctly. This is fixed in versions 1.8.5 and 1.10.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatpak/flatpak/security/advisories/GHSA-4ppf-fxf6-vxg2 - https://github.com/flatpak/flatpak/releases/tag/1.8.5 - https://www.debian.org/security/2021/dsa-4830 - https://github.com/flatpak/flatpak/commit/6d1773d2a54dde9b099043f07a2094a4f1c2f486 - https://github.com/flatpak/flatpak/commit/6e5ae7a109cdfa9735ea7ccbd8cb79f9e8d3ae8b - https://github.com/flatpak/flatpak/commit/aeb6a7ab0abaac4a8f4ad98b3df476d9de6b8bd4 - https://github.com/flatpak/flatpak/commit/cc1401043c075268ecc652eac557ef8076b5eaba - https://security.gentoo.org/glsa/202101-21
CVE ID: CVE-2021-21263 State: PUBLISHED Published: 2021-01-19T19:40:18 Last Updated: 2024-08-03T18:09:14.909Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: laravel Products: framework Problem Types: CWE-74 Description: Laravel is a web application framework. Versions of Laravel before 6.20.11, 7.30.2 and 8.22.1 contain a query binding exploitation. This same exploit applies to the illuminate/database package which is used by Laravel. If a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected number of query bindings
validated or cast to its expected type before being passed to the query builder, an unexpected number of query bindings can be added to the query. In some situations, this will simply lead to no results being returned by the query builder; however, it is possible certain queries could be affected in a way that causes the query to return unexpected results. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/laravel/framework/security/advisories/GHSA-3p32-j457-pg5x - https://github.com/laravel/framework/pull/35865 - https://blog.laravel.com/security-laravel-62011-7302-8221-released - https://packagist.org/packages/laravel/framework - https://packagist.org/packa
curity-laravel-62011-7302-8221-released - https://packagist.org/packages/laravel/framework - https://packagist.org/packages/illuminate/database
CVE ID: CVE-2021-21264 State: PUBLISHED Published: 2021-05-03T16:00:18 Last Updated: 2024-08-03T18:09:14.926Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: octobercms Products: october Problem Types: CWE-862 Description: October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. A bypass of CVE-2020-26231 (fixed in 1.0.470/471 and 1.1.1) was discovered that has the same impact as CVE-2020-26231 & CVE-2020-15247. An authenticated backend user with the `cms.manage_pages`, `cms.manage_layouts`, or `cms.manage_partials` permissions who would **normally** not be permitted to provide PHP code to be executed by the CMS due to `cm
e_partials` permissions who would **normally** not be permitted to provide PHP code to be executed by the CMS due to `cms.enableSafeMode` being enabled is able to write specific Twig code to escape the Twig sandbox and execute arbitrary PHP. This is not a problem for anyone that trusts their users with those permissions to normally write & manage PHP within the CMS by not having `cms.enableSafeMode` enabled, but would be a problem for anyone relying on `cms.enableSafeMode` to ensure that users with those permissions in production do not have access to write & execute arbitrary PHP. Issue has been patched in Build 472 (v1.0.472) and v1.1.2. As a workaround, apply https://github.com/octobercms
ary PHP. Issue has been patched in Build 472 (v1.0.472) and v1.1.2. As a workaround, apply https://github.com/octobercms/october/commit/f63519ff1e8d375df30deba63156a2fc97aa9ee7 to your installation manually if unable to upgrade to Build 472 or v1.1.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/octobercms/october/security/advisories/GHSA-fcr8-6q7r-m4wg
CVE ID: CVE-2021-21265 State: PUBLISHED Published: 2021-03-10T21:15:15 Last Updated: 2025-05-29T23:27:29.528Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: octobercms Products: october Problem Types: CWE-644 Description: October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October before version 1.1.2, when running on poorly configured servers (i.e. the server routes any request, regardless of the HOST header to an October CMS instance) the potential exists for Host Header Poisoning attacks to succeed. This has been addressed in version 1.1.2 by adding a feature to allow a set of trusted hosts to be specified in t
cceed. This has been addressed in version 1.1.2 by adding a feature to allow a set of trusted hosts to be specified in the application. As a workaround one may set the configuration setting cms.linkPolicy to force. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/octobercms/october/security/advisories/GHSA-xhfx-hgmf-v6vp - https://github.com/octobercms/library/commit/f29865ae3db7a03be7c49294cd93980ec457f10d - https://github.com/octobercms/library/commit/f86fcbcd066d6f8b939e8fe897409d152b11c3c6 - https://github.com/octobercms/october/commit/555ab61f2313f45d7d5d138656420ead536c5d30 - https://github.com/octobercms/october/commit/f638d3f78cfe91d7f6658820f9d5e42
/555ab61f2313f45d7d5d138656420ead536c5d30 - https://github.com/octobercms/october/commit/f638d3f78cfe91d7f6658820f9d5e424306a3db0 - https://packagist.org/packages/october/backend
CVE ID: CVE-2021-21266 State: PUBLISHED Published: 2021-02-01T14:40:16 Last Updated: 2024-08-03T18:09:15.004Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: openhab Products: openhab-addons Problem Types: CWE-611 Description: openHAB is a vendor and technology agnostic open source automation software for your home. In openHAB before versions 2.5.12 and 3.0.1 the XML external entity (XXE) attack allows attackers in the same network as the openHAB instance to retrieve internal information like the content of files from the file system. Responses to SSDP requests can be especially malicious. All add-ons that use SAX or JAXB parsing of externally received XML a
nses to SSDP requests can be especially malicious. All add-ons that use SAX or JAXB parsing of externally received XML are potentially subject to this kind of attack. In openHAB, the following add-ons are potentially impacted: AvmFritz, BoseSoundtouch, DenonMarantz, DLinkSmarthome, Enigma2, FmiWeather, FSInternetRadio, Gce, Homematic, HPPrinter, IHC, Insteon, Onkyo, Roku, SamsungTV, Sonos, Roku, Tellstick, TR064, UPnPControl, Vitotronic, Wemo, YamahaReceiver and XPath Tranformation. The vulnerabilities have been fixed in versions 2.5.12 and 3.0.1 by a more strict configuration of the used XML parser. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openhab/
ion of the used XML parser. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openhab/openhab-addons/security/advisories/GHSA-r2hc-pmr7-4c9r - https://dev.to/brianverm/configure-your-java-xml-parsers-to-prevent-xxe-213c - https://www.contrastsecurity.com/security-influencers/xml-xxe-pitfalls-with-jaxb - https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86
CVE ID: CVE-2021-21267 State: PUBLISHED Published: 2021-03-19T20:25:13 Last Updated: 2024-08-03T18:09:14.989Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: schema-inspector Products: schema-inspector Problem Types: CWE-400, CWE-20 Description: Schema-Inspector is an open-source tool to sanitize and validate JS objects (npm package schema-inspector). In before version 2.0.0, email address validation is vulnerable to a denial-of-service attack where some input (for example `a@0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.`) will freeze the program or web browser page executing the code. This affects any current schema-
.0.0.0.0.0.0.0.0.0.0.`) will freeze the program or web browser page executing the code. This affects any current schema-inspector users using any version to validate email addresses. Users who do not do email validation, and instead do other types of validation (like string min or max length, etc), are not affected. Users should upgrade to version 2.0.0, which uses a regex expression that isn't vulnerable to ReDoS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/schema-inspector/schema-inspector/security/advisories/GHSA-f38p-c2gq-4pmr - https://gist.github.com/mattwelke/b7f42424680a57b8161794ad1737cd8f - https://www.npmjs.com/package/schema-inspector - htt
ttps://gist.github.com/mattwelke/b7f42424680a57b8161794ad1737cd8f - https://www.npmjs.com/package/schema-inspector - https://security.netapp.com/advisory/ntap-20210528-0006/
CVE ID: CVE-2021-21269 State: PUBLISHED Published: 2021-01-20T17:50:34 Last Updated: 2024-08-03T18:09:14.980Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: keymaker-mx Products: keymaker Problem Types: CWE-22 Description: Keymaker is a Mastodon Community Finder based Matrix Community serverlist page Server. In Keymaker before version 0.2.0, the assets endpoint did not check for the extension. The rust `join` method without checking user input might have made it abe to do a Path Traversal attack causing to read more files than allowed. This is fixed in version 0.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/keymaker-
is fixed in version 0.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/keymaker-mx/keymaker/security/advisories/GHSA-pg25-xfcf-vjvm - https://github.com/keymaker-mx/keymaker/commit/63f3012b390ff1519a84100df9e5dff5058bb926
CVE ID: CVE-2021-21270 State: PUBLISHED Published: 2021-01-22T18:05:24 Last Updated: 2024-08-03T18:09:14.987Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: OctopusDeploy Products: OctopusDSC Problem Types: CWE-319 Description: OctopusDSC is a PowerShell module with DSC resources that can be used to install and configure an Octopus Deploy Server and Tentacle agent. In OctopusDSC version 4.0.977 and earlier a customer API key used to connect to Octopus Server is exposed via logging in plaintext. This vulnerability is patched in version 4.0.1002. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/OctopusDSC/secur
1002. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/OctopusDSC/security/advisories/GHSA-phmm-rfg9-94fm - https://github.com/OctopusDeploy/OctopusDSC/releases/tag/v4.0.1002 - https://github.com/OctopusDeploy/OctopusDSC/pull/270 - https://github.com/OctopusDeploy/OctopusDSC/commit/24b448e6ac964ed938475add494a145c0473ac42
CVE ID: CVE-2021-21271 State: PUBLISHED Published: 2021-01-26T20:55:14 Last Updated: 2024-08-03T18:09:15.015Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: tendermint Products: tendermint Problem Types: CWE-400 Description: Tendermint Core is an open source Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine - written in any programming language - and securely replicates it on many machines. Tendermint Core v0.34.0 introduced a new way of handling evidence of misbehavior. As part of this, we added a new Timestamp field to Evidence structs. This timestamp would be calculated using the same algorithm that is used when a block is c
mp field to Evidence structs. This timestamp would be calculated using the same algorithm that is used when a block is created and proposed. (This algorithm relies on the timestamp of the last commit from this specific block.) In Tendermint Core v0.34.0-v0.34.2, the consensus reactor is responsible for forming DuplicateVoteEvidence whenever double signs are observed. However, the current block is still “in flight” when it is being formed by the consensus reactor. It hasn’t been finalized through network consensus yet. This means that different nodes in the network may observe different “last commits” when assigning a timestamp to DuplicateVoteEvidence. In turn, different nodes could form Dup
ve different “last commits” when assigning a timestamp to DuplicateVoteEvidence. In turn, different nodes could form DuplicateVoteEvidence objects at the same height but with different timestamps. One DuplicateVoteEvidence object (with one timestamp) will then eventually get finalized in the block, but this means that any DuplicateVoteEvidence with a different timestamp is considered invalid. Any node that formed invalid DuplicateVoteEvidence will continue to propose invalid evidence; its peers may see this, and choose to disconnect from this node. This bug means that double signs are DoS vectors in Tendermint Core v0.34.0-v0.34.2. Tendermint Core v0.34.3 is a security release which fixes th
e signs are DoS vectors in Tendermint Core v0.34.0-v0.34.2. Tendermint Core v0.34.3 is a security release which fixes this bug. As of v0.34.3, DuplicateVoteEvidence is no longer formed by the consensus reactor; rather, the consensus reactor passes the Votes themselves into the EvidencePool, which is now responsible for forming DuplicateVoteEvidence. The EvidencePool has timestamp info that should be consistent across the network, which means that DuplicateVoteEvidence formed in this reactor should have consistent timestamps. This release changes the API between the consensus and evidence reactors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tendermint/
s and evidence reactors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tendermint/tendermint/security/advisories/GHSA-p658-8693-mhvg - https://github.com/tendermint/tendermint/blob/v0.34.3/CHANGELOG.md#v0.34.3 - https://github.com/tendermint/tendermint/commit/a2a6852ab99e4a0f9e79f0ea8c1726e262e25c76
CVE ID: CVE-2021-21272 State: PUBLISHED Published: 2021-01-25T18:30:15 Last Updated: 2024-08-03T18:09:15.220Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: deislabs Products: oras Problem Types: CWE-22 Description: ORAS is open source software which enables a way to push OCI Artifacts to OCI Conformant registries. ORAS is both a CLI for initial testing and a Go Module. In ORAS from version 0.4.0 and before version 0.9.0, there is a "zip-slip" vulnerability. The directory support feature allows the downloaded gzipped tarballs to be automatically extracted to the user-specified directory where the tarball can have symbolic links and hard links. A well-crafted
ally extracted to the user-specified directory where the tarball can have symbolic links and hard links. A well-crafted tarball or tarballs allow malicious artifact providers linking, writing, or overwriting specific files on the host filesystem outside of the user-specified directory unexpectedly with the same permissions as the user who runs `oras pull`. Users of the affected versions are impacted if they are `oras` CLI users who runs `oras pull`, or if they are Go programs, which invoke `github.com/deislabs/oras/pkg/content.FileStore`. The problem has been fixed in version 0.9.0. For `oras` CLI users, there is no workarounds other than pulling from a trusted artifact provider. For `oras`
on 0.9.0. For `oras` CLI users, there is no workarounds other than pulling from a trusted artifact provider. For `oras` package users, the workaround is to not use `github.com/deislabs/oras/pkg/content.FileStore`, and use other content stores instead, or pull from a trusted artifact provider. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/deislabs/oras/security/advisories/GHSA-g5v4-5x39-vwhx - https://github.com/deislabs/oras/commit/96cd90423303f1bb42bd043cb4c36085e6e91e8e - https://github.com/deislabs/oras/releases/tag/v0.9.0 - https://pkg.go.dev/github.com/deislabs/oras/pkg/oras
CVE ID: CVE-2021-21273 State: PUBLISHED Published: 2021-02-26T17:25:29 Last Updated: 2024-08-03T18:09:15.293Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: matrix-org Products: synapse Problem Types: CWE-601 Description: Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, requests to user provided domains were not restricted to external IP addresses when calculating the key validity for third-party invite events and sending push notifications. This could cause Synapse to make requests to internal infrastructure. The typ
ite events and sending push notifications. This could cause Synapse to make requests to internal infrastructure. The type of request was not controlled by the user, although limited modification of request bodies was possible. For the most thorough protection server administrators should remove the deprecated `federation_ip_range_blacklist` from their settings after upgrading to Synapse v1.25.0 which will result in Synapse using the improved default IP address restrictions. See the new `ip_range_blacklist` and `ip_range_whitelist` settings if more specific control is necessary. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrix-org/synapse/releases/tag
ary. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrix-org/synapse/releases/tag/v1.25.0 - https://github.com/matrix-org/synapse/security/advisories/GHSA-v936-j8gp-9q3p - https://github.com/matrix-org/synapse/pull/8821 - https://github.com/matrix-org/synapse/commit/30fba6210834a4ecd91badf0c8f3eb278b72e746 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY/
CVE ID: CVE-2021-21274 State: PUBLISHED Published: 2021-02-26T17:25:16 Last Updated: 2024-08-03T18:09:15.070Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: matrix-org Products: synapse Problem Types: CWE-400 Description: Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, a malicious homeserver could redirect requests to their .well-known file to a large file. This can lead to a denial of service attack where homeservers will consume significantly more resources when requesting the .well-known file of a malicious hom
tack where homeservers will consume significantly more resources when requesting the .well-known file of a malicious homeserver. This affects any server which accepts federation requests from untrusted servers. Issue is resolved in version 1.25.0. As a workaround the `federation_domain_whitelist` setting can be used to restrict the homeservers communicated with over federation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrix-org/synapse/security/advisories/GHSA-2hwx-mjrm-v3g8 - https://github.com/matrix-org/synapse/releases/tag/v1.25.0 - https://github.com/matrix-org/synapse/pull/8950 - https://github.com/matrix-org/synapse/commit/ff5c4da1289cb5e097
25.0 - https://github.com/matrix-org/synapse/pull/8950 - https://github.com/matrix-org/synapse/commit/ff5c4da1289cb5e097902b3e55b771be342c29d6 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY/
CVE ID: CVE-2021-21275 State: PUBLISHED Published: 2021-01-25T22:45:17 Last Updated: 2024-08-03T18:09:14.969Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Kenny2github Products: Report Problem Types: CWE-352 Description: The MediaWiki "Report" extension has a Cross-Site Request Forgery (CSRF) vulnerability. Before fixed version, there was no protection against CSRF checks on Special:Report, so requests to report a revision could be forged. The problem has been fixed in commit f828dc6 by making use of MediaWiki edit tokens. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Kenny2github/Report/security/advisories/GHSA-9f3w-
lyst Notes: - CVE Program Container: References: - https://github.com/Kenny2github/Report/security/advisories/GHSA-9f3w-c334-jm2h - https://github.com/Kenny2github/Report/commit/f828dc6f73cdfaea5639edbf8ac7b326eeefb117 - https://www.oracle.com//security-alerts/cpujul2021.html - https://www.oracle.com/security-alerts/cpuapr2022.html