Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-45772 State: PUBLISHED Published: 2024-09-30T08:51:30.950Z Last Updated: 2024-12-12T16:22:31.991Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: Apache Software Foundation Products: Apache Lucene Replicator Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator. This issue affects Apache Lucene's replicator module: from 4.4.0 before 9.12.0. The deprecated org.apache.lucene.replicator.http package is affected. The org.apache.lucene.replicator.nrt package is not affected. Users are recommended to upgrade to version 9.12.0, which fixes the issue. The deserialization can only be triggered
ed. Users are recommended to upgrade to version 9.12.0, which fixes the issue. The deserialization can only be triggered if users actively deploy an network-accessible implementation and a corresponding client using a HTTP library that uses the API (e.g., a custom servlet and HTTPClient). Java serialization filters (such as -Djdk.serialFilter='!*' on the commandline) can mitigate the issue on vulnerable versions without impacting functionality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/3f3oph7bqnqspb9q5p0gm5mgc1b6thjo
CVE ID: CVE-2024-45773 State: PUBLISHED Published: 2024-09-27T13:49:54.031Z Last Updated: 2024-09-27T14:30:23.721Z Vendors: Facebook Products: Facebook Thrift Problem Types: Use After Free (CWE-416) Description: A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2024.09.09.00. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.facebook.com/security/advisories/cve-2024-45773
CVE ID: CVE-2024-45774 State: PUBLISHED Published: 2025-02-18T18:25:09.511Z Last Updated: 2025-11-20T19:06:09.906Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat OpenShift Container Platform 4 Problem Types: CWE-787 Description: A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded. Additi
s write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:6990 - https://access.redhat.com/security/cve/CVE-2024-45774 - https://bugzilla.redhat.com/show_bug.cgi?id=2337461 - https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
CVE ID: CVE-2024-45775 State: PUBLISHED Published: 2025-02-18T19:25:40.364Z Last Updated: 2025-11-20T19:06:17.376Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat OpenShift Container Platform 4 Problem Types: CWE-252 Description: A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub's argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parse_option() functi
case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parse_option() function, leading grub to crash or, in some rare scenarios, corrupt the IVT data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:6990 - https://access.redhat.com/security/cve/CVE-2024-45775 - https://bugzilla.redhat.com/show_bug.cgi?id=2337481
CVE ID: CVE-2024-45776 State: PUBLISHED Published: 2025-02-18T19:25:45.929Z Last Updated: 2025-11-11T08:13:09.636Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat OpenShift Container Platform 4 Problem Types: CWE-787 Description: When reading the language .mo file in grub_mofile_open(), grub2 fails to verify an integer overflow when allocating its internal buffer. A crafted .mo file may lead the buffer size calculation to overflow, leading to out-of-bound reads and writes. This flaw allows an attacker to leak sensitive da
ize calculation to overflow, leading to out-of-bound reads and writes. This flaw allows an attacker to leak sensitive data or overwrite critical data, possibly circumventing secure boot protections. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:16154 - https://access.redhat.com/errata/RHSA-2025:6990 - https://access.redhat.com/security/cve/CVE-2024-45776 - https://bugzilla.redhat.com/show_bug.cgi?id=2339182
CVE ID: CVE-2024-45777 State: PUBLISHED Published: 2025-02-19T17:54:01.926Z Last Updated: 2025-11-11T16:21:41.342Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat OpenShift Container Platform 4 Problem Types: CWE-787 Description: A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub_gettext_getstr_from_position() may overflow, leading to a Out-of-bound write. This issue can be leveraged by an attacker to overwrite grub2's sensitive heap data, eventually leading to th
und write. This issue can be leveraged by an attacker to overwrite grub2's sensitive heap data, eventually leading to the circumvention of secure boot protections. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:20532 - https://access.redhat.com/security/cve/CVE-2024-45777 - https://bugzilla.redhat.com/show_bug.cgi?id=2346343
CVE ID: CVE-2024-45778 State: PUBLISHED Published: 2025-03-03T17:05:13.058Z Last Updated: 2025-11-14T01:33:33.607Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-190 Description: A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2024-45778 - https://bugzilla.redhat.com/s
SA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2024-45778 - https://bugzilla.redhat.com/show_bug.cgi?id=2345640
CVE ID: CVE-2024-45779 State: PUBLISHED Published: 2025-03-03T14:25:22.453Z Last Updated: 2025-11-14T01:33:24.684Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-190 Description: An integer overflow flaw was found in the BFS file system driver in grub2. When reading a file with an indirect extent map, grub2 fails to validate the number of extent entries to be read. A crafted or corrupted BFS filesystem may cause an integer overflow during the file reading, leading to a heap
be read. A crafted or corrupted BFS filesystem may cause an integer overflow during the file reading, leading to a heap of bounds read. As a consequence, sensitive data may be leaked, or grub2 will crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2024-45779 - https://bugzilla.redhat.com/show_bug.cgi?id=2345854 - https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
CVE ID: CVE-2024-45780 State: PUBLISHED Published: 2025-03-03T14:18:50.957Z Last Updated: 2025-11-14T01:33:27.498Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-787 Description: A flaw was found in grub2. When reading tar files, grub2 allocates an internal buffer for the file name. However, it fails to properly verify the allocation against possible integer overflows. It's possible to cause the allocation length to overflow with a crafted tar file, leading to a heap out-
eger overflows. It's possible to cause the allocation length to overflow with a crafted tar file, leading to a heap out-of-bounds write. This flaw eventually allows an attacker to circumvent secure boot protections. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2024-45780 - https://bugzilla.redhat.com/show_bug.cgi?id=2345856 - https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
CVE ID: CVE-2024-45781 State: PUBLISHED Published: 2025-02-18T19:25:57.168Z Last Updated: 2025-11-11T08:13:30.669Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat OpenShift Container Platform 4 Problem Types: CWE-787 Description: A flaw was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub2 fails to validate the string length taken as an input. The lack of validation may lead to a heap out-of-bounds write, causing data integrity issues and eventually allowing an attacker to circumvent secure
d to a heap out-of-bounds write, causing data integrity issues and eventually allowing an attacker to circumvent secure boot protections. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:16154 - https://access.redhat.com/errata/RHSA-2025:6990 - https://access.redhat.com/security/cve/CVE-2024-45781 - https://bugzilla.redhat.com/show_bug.cgi?id=2345857
CVE ID: CVE-2024-45782 State: PUBLISHED Published: 2025-03-03T17:05:25.397Z Last Updated: 2025-11-14T01:33:52.131Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-787 Description: A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name's length. This issue may read to a heap-based out-of-bounds writer, im
input without properly validating the volume name's length. This issue may read to a heap-based out-of-bounds writer, impacting grub's sensitive data integrity and eventually leading to a secure boot protection bypass. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2024-45782 - https://bugzilla.redhat.com/show_bug.cgi?id=2345858
CVE ID: CVE-2024-45783 State: PUBLISHED Published: 2025-02-18T19:26:07.767Z Last Updated: 2025-11-19T11:14:12.755Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat OpenShift Container Platform 4 Problem Types: CWE-911 Description: A flaw was found in grub2. When failing to mount an HFS+ grub, the hfsplus filesystem driver doesn't properly set an ERRNO value. This issue may lead to a NULL pointer access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:6990 - https:
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:6990 - https://access.redhat.com/security/cve/CVE-2024-45783 - https://bugzilla.redhat.com/show_bug.cgi?id=2345863
CVE ID: CVE-2024-45784 State: PUBLISHED Published: 2024-11-15T08:20:05.581Z Last Updated: 2024-11-15T19:42:27.561Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-1295 Description: Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG authors to unintentionally or intentionally log sensitive configuration variables. Unauthorized users could access these logs, potentially exposing critical data that could be exploited to compromise the security of the Airflow deployment. In version 2.10.3, secrets are now masked in task logs to prevent sensitive configuration
ity of the Airflow deployment. In version 2.10.3, secrets are now masked in task logs to prevent sensitive configuration variables from being exposed in the logging output. Users should upgrade to Airflow 2.10.3 or the latest version to eliminate this vulnerability. If you suspect that DAG authors could have logged the secret values to the logs and that your logs are not additionally protected, it is also recommended that you update those secrets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/airflow/pull/43040 - https://lists.apache.org/thread/k2jm55jztlbmk4zrlh10syvq3n57hl4h
CVE ID: CVE-2024-45785 State: PUBLISHED Published: 2024-10-25T07:57:54.759Z Last Updated: 2024-10-25T14:04:55.715Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: NEUMANN CO.LTD. Products: MUSASI Problem Types: CWE-603 Description: MUSASI version 3 contains an issue with use of client-side authentication. If this vulnerability is exploited, other users' credential and sensitive information may be retrieved. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/jp/JVN31982676/
CVE ID: CVE-2024-45786 State: PUBLISHED Published: 2024-09-11T11:48:47.785Z Last Updated: 2024-09-11T13:34:06.936Z Vendors: Reedos Software Solutions Products: Mutual Fund Distribution Product (aiM-Star) Problem Types: CWE-639 Description: This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper access controls on its certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL which could lead to gain unauthorized access to sensitive information belonging to other users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES0
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0291
CVE ID: CVE-2024-45787 State: PUBLISHED Published: 2024-09-11T11:53:03.596Z Last Updated: 2024-09-11T13:32:13.850Z Vendors: Reedos Software Solutions Products: Mutual Fund Distribution Product (aiM-Star) Problem Types: CWE-359 Description: This vulnerability exists in Reedos aiM-Star version 2.0.1 due to transmission of sensitive information in plain text in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL and intercepting response of the API request leading to exposure of sensitive information belonging to other users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-
information belonging to other users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0291
CVE ID: CVE-2024-45788 State: PUBLISHED Published: 2024-09-11T11:56:43.217Z Last Updated: 2024-09-11T13:31:03.180Z Vendors: Reedos Software Solutions Products: Mutual Fund Distribution Product (aiM-Star) Problem Types: CWE-799 Description: This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing rate limiting on OTP requests in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoints which could lead to the OTP bombing/flooding on the targeted system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLC
Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0291
CVE ID: CVE-2024-45789 State: PUBLISHED Published: 2024-09-11T12:00:28.464Z Last Updated: 2024-09-11T13:29:41.194Z Vendors: Reedos Software Solutions Products: Mutual Fund Distribution Product (aiM-Star) Problem Types: CWE-354 Description: This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper validation of the ‘mode’ parameter in the API endpoint used during the registration process. An authenticated remote attacker could exploit this vulnerability by manipulating parameter in the API request body on the vulnerable application. Successful exploitation of this vulnerability could allow the attacker to bypass certain constraints in the registration process leading to creat
f this vulnerability could allow the attacker to bypass certain constraints in the registration process leading to creation of multiple accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0291
CVE ID: CVE-2024-45790 State: PUBLISHED Published: 2024-09-11T12:07:15.792Z Last Updated: 2024-09-11T15:49:11.063Z Vendors: Reedos Software Solutions Products: Mutual Fund Distribution Product (aiM-Star) Problem Types: CWE-307 Description: This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack against legitimate user passwords, which could lead to gain unauthorized access and compromise other user accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainSer
er user accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0291
CVE ID: CVE-2024-45791 State: PUBLISHED Published: 2024-11-18T08:45:23.459Z Last Updated: 2024-11-18T15:04:55.582Z Vendors: Apache Software Foundation Products: Apache HertzBeat Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat: before 1.6.1. Users are recommended to upgrade to version 1.6.1, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/jmbsfjsvrfnvosh1ftrm3ry4j3sb7doz - https://lists.apache.org/thread/lvsczrp8kdynppmzyxtkh4ord4gpw1ph
CVE ID: CVE-2024-45792 State: PUBLISHED Published: 2024-09-30T14:40:25.616Z Last Updated: 2024-09-30T15:31:48.273Z Vendors: mantisbt Products: mantisbt Problem Types: CWE-200 Description: Mantis Bug Tracker (MantisBT) is an open source issue tracker. Using a crafted POST request, an unprivileged, registered user is able to retrieve information about other users' personal system profiles. This vulnerability is fixed in 2.26.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mantisbt/mantisbt/security/advisories/GHSA-h5q3-fjp4-2x7r - https://github.com/mantisbt/mantisbt/commit/ef0f820284032350cc20a39ff9cb2010d5463b41 - https://mantisbt.org/bugs/view.php?id=3
//github.com/mantisbt/mantisbt/commit/ef0f820284032350cc20a39ff9cb2010d5463b41 - https://mantisbt.org/bugs/view.php?id=34640
CVE ID: CVE-2024-45793 State: PUBLISHED Published: 2024-09-20T19:07:27.802Z Last Updated: 2024-09-20T19:54:25.315Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: lyft Products: confidant Problem Types: CWE-79 Description: Confidant is a open source secret management service that provides user-friendly storage and access to secrets. The following endpoints are subject to a cross site scripting vulnerability: GET /v1/credentials, GET /v1/credentials/, GET /v1/archive/credentials/, GET /v1/archive/credentials, POST /v1/credentials, PUT /v1/credentials/, PUT /v1/credentials//<to_revision>, GET /v1/services, GET /v1/services/, GET /v1/archive/services/, GET /v1/
edentials/, PUT /v1/credentials//<to_revision>, GET /v1/services, GET /v1/services/, GET /v1/archive/services/, GET /v1/archive/services, PUT /v1/services/, PUT /v1/services//<to_revision>. The attacker needs to be authenticated and have privileges to create new credentials, but could use this to show information and run scripts to other users into the same Confidant instance. This issue has been patched in version 6.6.2. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lyft/confidant/security/advisories/GHSA-rxq8-q85f-m866 - https://hackerone.com/reports/2332004 - http
https://github.com/lyft/confidant/security/advisories/GHSA-rxq8-q85f-m866 - https://hackerone.com/reports/2332004 - https://hackerone.com/reports/2456673 - https://hackerone.com/reports/2476542
CVE ID: CVE-2024-45794 State: PUBLISHED Published: 2024-11-07T17:42:58.662Z Last Updated: 2024-11-07T19:33:42.084Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: devtron-labs Products: devtron Problem Types: CWE-89 Description: devtron is an open source tool integration platform for Kubernetes. In affected versions an authenticated user (with minimum permission) could utilize and exploit SQL Injection to allow the execution of malicious SQL queries via CreateUser API (/orchestrator/user). This issue has been addressed in version 0.7.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA
l users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/devtron-labs/devtron/security/advisories/GHSA-q78v-cv36-8fxj
CVE ID: CVE-2024-45795 State: PUBLISHED Published: 2024-10-16T18:34:53.179Z Last Updated: 2024-10-17T17:14:45.599Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: OISF Products: suricata Problem Types: CWE-617 Description: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, rules using datasets with the non-functional / unimplemented "unset" option can trigger an assertion during traffic parsing, leading to denial of service. This issue is addressed in 7.0.7. As a workaround, use only trusted and well tested rulesets. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
.0.7. As a workaround, use only trusted and well tested rulesets. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OISF/suricata/security/advisories/GHSA-6r8w-fpw6-cp9g - https://redmine.openinfosecfoundation.org/issues/7195