Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-28183 State: PUBLISHED Published: 2024-03-25T14:31:28.466Z Last Updated: 2024-08-02T00:48:49.763Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: espressif Products: esp-idf Problem Types: CWE-367 Description: ESP-IDF is the development framework for Espressif SoCs supported on Windows, Linux and macOS. A Time-of-Check to Time-of-Use (TOCTOU) vulnerability was discovered in the implementation of the ESP-IDF bootloader which could allow an attacker with physical access to flash of the device to bypass anti-rollback protection. Anti-rollback prevents rollback to application with security version lower than one programmed in eFuse of chip. This
n. Anti-rollback prevents rollback to application with security version lower than one programmed in eFuse of chip. This attack can allow to boot past (passive) application partition having lower security version of the same device even in the presence of the flash encryption scheme. The attack requires carefully modifying the flash contents after the anti-rollback checks have been performed by the bootloader (before loading the application). The vulnerability is fixed in 4.4.7 and 5.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/espressif/esp-idf/security/advisories/GHSA-22x6-3756-pfp8 - https://github.com/espressif/esp-idf/
: - https://github.com/espressif/esp-idf/security/advisories/GHSA-22x6-3756-pfp8 - https://github.com/espressif/esp-idf/commit/3305cb4d235182067936f8e940e6db174e25b4b2 - https://github.com/espressif/esp-idf/commit/4c95aa445d4e84f01f86b6f3a552aa299276abf3 - https://github.com/espressif/esp-idf/commit/534e3ad1fa68526a5f989fb2163856d6b7cd2c87 - https://github.com/espressif/esp-idf/commit/7003f1ef0dffc73c34eb153d1b0710babb078149 - https://github.com/espressif/esp-idf/commit/b2cdc0678965790f49afeb6e6b0737cd24433a05 - https://github.com/espressif/esp-idf/commit/c33b9e1426121ce8cccf1a94241740be9cff68de - https://github.com/espressif/esp-idf/commit/f327ddf6adab0c28d395975785727b2feef57803
CVE ID: CVE-2024-28184 State: PUBLISHED Published: 2024-03-09T00:50:32.115Z Last Updated: 2025-02-13T17:47:28.192Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: Kozea Products: WeasyPrint Problem Types: CWE-829 Description: WeasyPrint helps web developers to create PDF documents. Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs to a generated PDF document, even if `url_fetcher` is configured to prevent access to files and URLs. This vulnerability has been patched in version 61.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Kozea/WeasyPrint/s
nal Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-35jj-wx47-4w8r - https://github.com/Kozea/WeasyPrint/commit/734ee8e2dc84ff3090682f3abff056d0907c8598 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLQZMOEDY72TS43HDXOBVID2VYCTWIH6/
CVE ID: CVE-2024-28185 State: PUBLISHED Published: 2024-04-18T14:31:16.326Z Last Updated: 2024-08-02T00:48:49.601Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: judge0 Products: judge0 Problem Types: CWE-61, CWE-59 Description: Judge0 is an open-source online code execution system. The application does not account for symlinks placed inside the sandbox directory, which can be leveraged by an attacker to write to arbitrary files and gain code execution outside of the sandbox. When executing a submission, Judge0 writes a `run_script` to the sandbox directory. The security issue is that an attacker can create a symbolic link (symlink) at the path `run_script
e sandbox directory. The security issue is that an attacker can create a symbolic link (symlink) at the path `run_script` before this code is executed, resulting in the `f.write` writing to an arbitrary file on the unsandboxed system. An attacker can leverage this vulnerability to overwrite scripts on the system and gain code execution outside of the sandbox. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/judge0/judge0/security/advisories/GHSA-h9g2-45c8-89cf - https://github.com/judge0/judge0/commit/846d5839026161bb299b7a35fd3b2afb107992fc - https://github.com/judge0/judge0/blob/v1.13.0/app/jobs/isolate_job.rb#L197-L201
CVE ID: CVE-2024-28186 State: PUBLISHED Published: 2024-03-12T19:36:05.964Z Last Updated: 2024-08-02T00:48:49.423Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: freescout-helpdesk Products: freescout Problem Types: CWE-532 Description: FreeScout is an open source help desk and shared inbox built with PHP. A vulnerability has been identified in the Free Scout Application, which exposes SMTP server credentials used by an organization in the application to users of the application. This issue arises from the application storing complete stack traces of exceptions in its database. The sensitive information is then inadvertently disclosed to users via the `/conve
traces of exceptions in its database. The sensitive information is then inadvertently disclosed to users via the `/conversation/ajax-html/send_log?folder_id=&thread_id={id}` endpoint. The stack trace reveals value of parameters, including the username and password, passed to the `Swift_Transport_Esmtp_Auth_LoginAuthenticator->authenticate()` function. Exploiting this vulnerability allows an attacker to gain unauthorized access to SMTP server credentials. With this sensitive information in hand, the attacker can potentially send unauthorized emails from the compromised SMTP server, posing a severe threat to the confidentiality and integrity of email communications. This could lead to targeted
server, posing a severe threat to the confidentiality and integrity of email communications. This could lead to targeted attacks on both the application users and the organization itself, compromising the security of email exchange servers. This issue has been addressed in version 1.8.124. Users are advised to upgrade. Users unable to upgrade should adopt the following measures: 1. Avoid Storing Complete Stack Traces, 2. Implement redaction mechanisms to filter and exclude sensitive information, and 3. Review and enhance the application's logging practices. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/freescout-helpdesk/freescou
st Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/freescout-helpdesk/freescout/security/advisories/GHSA-7wcq-2qmv-mvcm - https://github.com/freescout-helpdesk/freescout/commit/33639a89554998dcac645613130a27ac7872605e
CVE ID: CVE-2024-28187 State: PUBLISHED Published: 2024-03-11T19:54:05.452Z Last Updated: 2024-08-27T19:50:44.302Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: inunosinsi Products: soycms Problem Types: CWE-78 Description: SOY CMS is an open source CMS (content management system) that allows you to build blogs and online shops. SOY CMS versions prior to 3.14.2 are vulnerable to an OS Command Injection vulnerability within the file upload feature when accessed by an administrator. The vulnerability enables the execution of arbitrary OS commands through specially crafted file names containing a semicolon, affecting the jpegoptim functionality. This vulnerabil
ands through specially crafted file names containing a semicolon, affecting the jpegoptim functionality. This vulnerability has been patched in version 3.14.2. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/inunosinsi/soycms/security/advisories/GHSA-qg3q-hfgc-5jmm - https://github.com/inunosinsi/soycms/commit/9b0e452f628df28dec69cd72b6b55db21066cbf8
CVE ID: CVE-2024-28188 State: PUBLISHED Published: 2024-05-23T11:54:53.672Z Last Updated: 2024-08-02T00:48:49.472Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: jupyter-server Products: jupyter-scheduler Problem Types: CWE-200, CWE-287 Description: Jupyter Scheduler is collection of extensions for programming jobs to run now or run on a schedule. The list of conda environments of `jupyter-scheduler` users maybe be exposed, potentially revealing information about projects that a specific user may be working on. This vulnerability has been patched in version(s) 1.1.6, 1.2.1, 1.8.2 and 2.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Co
patched in version(s) 1.1.6, 1.2.1, 1.8.2 and 2.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jupyter-server/jupyter-scheduler/security/advisories/GHSA-v9g2-g7j4-4jxc - https://github.com/jupyter-server/jupyter_server/pull/1392
CVE ID: CVE-2024-28189 State: PUBLISHED Published: 2024-04-18T14:40:29.320Z Last Updated: 2024-08-02T00:48:49.514Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: judge0 Products: judge0 Problem Types: CWE-61, CWE-59 Description: Judge0 is an open-source online code execution system. The application uses the UNIX chown command on an untrusted file within the sandbox. An attacker can abuse this by creating a symbolic link (symlink) to a file outside the sandbox, allowing the attacker to run chown on arbitrary files outside of the sandbox. This vulnerability is not impactful on it's own, but it can be used to bypass the patch for CVE-2024-28185 and obtain a c
his vulnerability is not impactful on it's own, but it can be used to bypass the patch for CVE-2024-28185 and obtain a complete sandbox escape. This vulnerability is fixed in 1.13.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/judge0/judge0/security/advisories/GHSA-3xpw-36v7-2cmg - https://github.com/judge0/judge0/security/advisories/GHSA-h9g2-45c8-89cf - https://github.com/judge0/judge0/commit/f3b8547b3b67863e4ea0ded3adcb963add56addd - https://github.com/judge0/judge0/blob/v1.13.0/app/jobs/isolate_job.rb#L232
CVE ID: CVE-2024-28190 State: PUBLISHED Published: 2024-04-09T13:48:46.324Z Last Updated: 2024-08-02T00:48:49.506Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: contao Products: contao Problem Types: CWE-79 Description: Contao is an open source content management system. Starting in version 4.0.0 and prior to version 4.13.40 and 5.3.4, users can inject malicious code in filenames when uploading files (back end and front end), which is then executed in tooltips and popups in the back end. Contao versions 4.13.40 and 5.3.4 have a patch for this issue. As a workaround, remove upload fields from frontend forms and disable uploads for untrusted back end users.
this issue. As a workaround, remove upload fields from frontend forms and disable uploads for untrusted back end users. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/contao/contao/security/advisories/GHSA-v24p-7p4j-qvvf - https://github.com/contao/contao/commit/878d28dbe0f408740555d6fc8b634bd3f8febfce - https://github.com/contao/contao/commit/b794e14fff070101bf6a885da9b1a83395093b4d - https://contao.org/en/security-advisories/cross-site-scripting-in-the-file-manager
CVE ID: CVE-2024-28191 State: PUBLISHED Published: 2024-04-09T13:54:22.129Z Last Updated: 2024-08-02T00:48:49.484Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: contao Products: contao Problem Types: CWE-74 Description: Contao is an open source content management system. Starting in version 4.0.0 and prior to version 4.13.40 and 5.3.4, it is possible to inject insert tags in frontend forms if the output is structured in a very specific way. Contao versions 4.13.40 and 5.3.4 have a patch for this issue. As a workaround, do not output user data from frontend forms next to each other, always separate them by at least one character. Additional Analyst Notes: - CI
a from frontend forms next to each other, always separate them by at least one character. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/contao/contao/security/advisories/GHSA-747v-52c4-8vj8 - https://github.com/contao/contao/commit/388859dcf110ca70e0fae68a2a5579ab6a702919 - https://github.com/contao/contao/commit/474a2fc25f1d84d786aba8c6d234af99e64d016b - https://contao.org/en/security-advisories/insert-tag-injection-via-the-form-generator
CVE ID: CVE-2024-28192 State: PUBLISHED Published: 2024-03-13T20:15:23.908Z Last Updated: 2024-08-13T16:26:47.922Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Yooooomi Products: your_spotify Problem Types: CWE-943, CWE-74 Description: your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify version <1.8.0 is vulnerable to NoSQL injection in the public access token processing logic. Attackers can fully bypass the public token authentication mechanism, regardless if a public token has been generated before or not, without any user interaction or prerequisite knowledge. This vulnerability allows an attacker to fully bypass the pub
t, without any user interaction or prerequisite knowledge. This vulnerability allows an attacker to fully bypass the public token authentication mechanism, regardless if a public token has been generated before or not, without any user interaction or prerequisite knowledge. This issue has been addressed in version 1.8.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Yooooomi/your_spotify/security/advisories/GHSA-c8wf-wcjc-2pvm
CVE ID: CVE-2024-28193 State: PUBLISHED Published: 2024-03-13T20:19:10.239Z Last Updated: 2024-08-13T16:26:18.228Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Yooooomi Products: your_spotify Problem Types: CWE-200 Description: your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify version <1.8.0 allows users to create a public token in the settings, which can be used to provide guest-level access to the information of that specific user in YourSpotify. The /me API endpoint discloses Spotify API access and refresh tokens to guest users. Attackers with access to a public token for guest access to YourSpotify can therefore obtai
fresh tokens to guest users. Attackers with access to a public token for guest access to YourSpotify can therefore obtain access to Spotify API tokens of YourSpotify users. As a consequence, attackers may extract profile information, information about listening habits, playlists and other information from the corresponding Spotify profile. In addition, the attacker can pause and resume playback in the Spotify app at will. This issue has been resolved in version 1.8.0. Users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Yooooomi/your_spotify/security/advisories
E Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Yooooomi/your_spotify/security/advisories/GHSA-3782-758f-mj85
CVE ID: CVE-2024-28194 State: PUBLISHED Published: 2024-03-13T18:18:02.341Z Last Updated: 2024-08-02T20:37:27.807Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Yooooomi Products: your_spotify Problem Types: CWE-798 Description: your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify versions < 1.8.0 use a hardcoded JSON Web Token (JWT) secret to sign authentication tokens. Attackers can use this well-known value to forge valid authentication tokens for arbitrary users. This vulnerability allows attackers to bypass authentication and authenticate as arbitrary YourSpotify users, including admin users. This issue has been addres
bypass authentication and authenticate as arbitrary YourSpotify users, including admin users. This issue has been addressed in version 1.8.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Yooooomi/your_spotify/security/advisories/GHSA-gvcr-g265-j827
CVE ID: CVE-2024-28195 State: PUBLISHED Published: 2024-03-13T17:16:27.116Z Last Updated: 2025-04-15T15:18:39.854Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Yooooomi Products: your_spotify Problem Types: CWE-352 Description: your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify versions < 1.9.0 do not protect the API and login flow against Cross-Site Request Forgery (CSRF). Attackers can use this to execute CSRF attacks on victims, allowing them to retrieve, modify or delete data on the affected YourSpotify instance. Using repeated CSRF attacks, it is also possible to create a new user on the victim instance and promote the
instance. Using repeated CSRF attacks, it is also possible to create a new user on the victim instance and promote the new user to instance administrator if a legitimate administrator visits a website prepared by an attacker. Note: Real-world exploitability of this vulnerability depends on the browser version and browser settings in use by the victim. This issue has been addressed in version 1.9.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Yooooomi/your_spotify/security/advisories/GHSA-hfgf-99p3-6fjj - https://github.com/Yooooomi/your_spotif
tps://github.com/Yooooomi/your_spotify/security/advisories/GHSA-hfgf-99p3-6fjj - https://github.com/Yooooomi/your_spotify/commit/c3ae87673910c9903bb53088c8b71ed2c9aa54e4
CVE ID: CVE-2024-28196 State: PUBLISHED Published: 2024-03-13T17:10:56.054Z Last Updated: 2024-08-22T00:29:57.801Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Yooooomi Products: your_spotify Problem Types: CWE-1021 Description: your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify version < 1.9.0 does not prevent other pages from displaying it in an iframe and is thus vulnerable to clickjacking. Clickjacking can be used to trick an existing user of YourSpotify to trigger actions, such as allowing signup of other users or deleting the current user account. Clickjacking works by opening the target application in an invisible i
other users or deleting the current user account. Clickjacking works by opening the target application in an invisible iframe on an attacker-controlled site and luring a victim to visit the attacker page and interacting with it. By positioning elements over the invisible iframe, a victim can be tricked into triggering malicious or destructive actions in the invisible iframe, while they think they interact with a totally different site altogether. When a victim visits an attacker-controlled site while they are logged into YourSpotify, they can be tricked into performing actions on their YourSpotify instance without their knowledge. These actions include allowing signup of other users or delet
ons on their YourSpotify instance without their knowledge. These actions include allowing signup of other users or deleting the current user account, resulting in a high impact to the integrity of YourSpotify. This issue has been addressed in version 1.9.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Yooooomi/your_spotify/security/advisories/GHSA-m5x2-6hjm-cggq
CVE ID: CVE-2024-28197 State: PUBLISHED Published: 2024-03-11T19:48:11.008Z Last Updated: 2024-08-26T18:14:26.566Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: zitadel Products: zitadel Problem Types: CWE-269 Description: Zitadel is an open source identity management system. Zitadel uses a cookie to identify the user agent (browser) and its user sessions. Although the cookie was handled according to best practices, it was accessible on subdomains of the ZITADEL instance. An attacker could take advantage of this and provide a malicious link hosted on the subdomain to the user to gain access to the victim’s account in certain scenarios. A possible victim woul
hosted on the subdomain to the user to gain access to the victim’s account in certain scenarios. A possible victim would need to login through the malicious link for this exploit to work. If the possible victim already had the cookie present, the attack would not succeed. The attack would further only be possible if there was an initial vulnerability on the subdomain. This could either be the attacker being able to control DNS or a XSS vulnerability in an application hosted on a subdomain. Versions 2.46.0, 2.45.1, and 2.44.3 have been patched. Zitadel recommends upgrading to the latest versions available in due course. Note that applying the patch will invalidate the current cookie and thus
to the latest versions available in due course. Note that applying the patch will invalidate the current cookie and thus users will need to start a new session and existing sessions (user selection) will be empty. For self-hosted environments unable to upgrade to a patched version, prevent setting the following cookie name on subdomains of your Zitadel instance (e.g. within your WAF): `__Secure-zitadel-useragent`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/zitadel/zitadel/security/advisories/GHSA-mq4x-r2w3-j7mr
CVE ID: CVE-2024-28198 State: PUBLISHED Published: 2024-03-11T19:38:26.088Z Last Updated: 2024-08-02T00:48:49.441Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: OpenOLAT Products: OpenOLAT Problem Types: CWE-611 Description: OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication. By manually manipulating http requests when using the draw.io integration it is possible to read arbitrary files as the configured system user and SSRF. The problem is fixed in version 18.1.6 and 18.2.2. It is advised to upgrade to the latest version of 18.1.x or 18.2.x. Users unable to upgrade may work around this issue by di
s advised to upgrade to the latest version of 18.1.x or 18.2.x. Users unable to upgrade may work around this issue by disabling the Draw.io module or the entire REST API which will secure the system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/OpenOLAT/OpenOLAT/security/advisories/GHSA-pqvm-h9mg-434c - https://github.com/OpenOLAT/OpenOLAT/commit/23e6212e9412c3b099436159b8c8935321c91872 - https://track.frentix.com/issue/OO-7553/XXE-injection-in-draw.io-endpoint
CVE ID: CVE-2024-28199 State: PUBLISHED Published: 2024-03-11T22:50:38.789Z Last Updated: 2024-08-02T00:48:49.443Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: phlex-ruby Products: phlex Problem Types: CWE-79 Description: phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting (XSS) vulnerability that can be exploited via maliciously crafted user data. This was due to improper case-sensitivity in the code that was meant to prevent these attacks. If you render an `<a>` tag with an `href` attribute set to a user-provided link, that link could potentially execute JavaScript when clicked by another