Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-56356 State: PUBLISHED Published: 2024-12-20T14:11:17.496Z Last Updated: 2024-12-20T17:35:31.293Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-611 Description: In JetBrains TeamCity before 2024.12 insecure XMLParser configuration could lead to potential XXE attack Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-56357 State: PUBLISHED Published: 2024-12-20T20:24:51.149Z Last Updated: 2024-12-24T15:56:14.305Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: gristlabs Products: grist-core Problem Types: CWE-79 Description: grist-core is a spreadsheet hosting server. A user visiting a malicious document or submitting a malicious form could have their account compromised, because it was possible to use the `javascript:` scheme with custom widget URLs and form redirect URLs. This issue has been patched in version 1.3.1. Users are advised to upgrade. Users unable to upgrade should avoid visiting documents or forms prepared by people they do not trust. Additi
o upgrade. Users unable to upgrade should avoid visiting documents or forms prepared by people they do not trust. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gristlabs/grist-core/security/advisories/GHSA-cq5q-cqr7-vmf6 - https://github.com/gristlabs/grist-core/commit/10b069005ec8d5f511e6554a56111d8f257f029e
CVE ID: CVE-2024-56358 State: PUBLISHED Published: 2024-12-20T20:24:53.932Z Last Updated: 2024-12-24T15:53:26.149Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: gristlabs Products: grist-core Problem Types: CWE-79 Description: grist-core is a spreadsheet hosting server. A user visiting a malicious document and previewing an attachment could have their account compromised, because JavaScript in an SVG file would be evaluated in the context of their current page. This issue has been patched in version 1.3.2. Users are advised to upgrade. Users unable to upgrade should avoid previewing attachments in documents prepared by people they do not trust. Additional An
s unable to upgrade should avoid previewing attachments in documents prepared by people they do not trust. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gristlabs/grist-core/security/advisories/GHSA-jvfm-gf4f-33q3 - https://github.com/gristlabs/grist-core/commit/a792bdc43b456dbdd6fdc50d8747f4c349fab2f4
CVE ID: CVE-2024-56359 State: PUBLISHED Published: 2024-12-20T20:24:55.622Z Last Updated: 2024-12-24T15:49:50.232Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: gristlabs Products: grist-core Problem Types: CWE-79 Description: grist-core is a spreadsheet hosting server. A user visiting a malicious document and clicking on a link in a HyperLink cell using a control modifier (meaning for example Ctrl+click) could have their account compromised, since the link could use the javascript: scheme and be evaluated in the context of their current page. This issue has been patched in version 1.3.2. Users are advised to upgrade. Users unable to upgrade should avoid cli
ge. This issue has been patched in version 1.3.2. Users are advised to upgrade. Users unable to upgrade should avoid clicking on HyperLink cell links using a control modifier in documents prepared by people they do not trust. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gristlabs/grist-core/security/advisories/GHSA-qv69-5cj2-53r9 - https://github.com/gristlabs/grist-core/commit/a792bdc43b456dbdd6fdc50d8747f4c349fab2f4
CVE ID: CVE-2024-56361 State: PUBLISHED Published: 2024-12-26T21:59:01.775Z Last Updated: 2024-12-27T16:17:04.400Z Vendors: tltneon Products: lgsl Problem Types: CWE-79 Description: LGSL (Live Game Server List) provides online status for games. Before 7.0.0, a stored cross-site scripting (XSS) vulnerability was identified in lgsl. The function lgsl_query_40 in lgsl_protocol.php has implemented an HTTP crawler. This function makes a request to the registered game server, and upon crawling the malicious /info endpoint with our payload, will render our javascript on the info page. This information is being displayed via lgsl_details.php. This vulnerability is fixed in 7.0.0. Additional Analyst
age. This information is being displayed via lgsl_details.php. This vulnerability is fixed in 7.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/tltneon/lgsl/security/advisories/GHSA-xx95-62h6-h7v3 - https://github.com/tltneon/lgsl/commit/3fbd3bb581b636f7fd3ea0592c5f8df87d3a2843
CVE ID: CVE-2024-56362 State: PUBLISHED Published: 2024-12-23T17:19:51.108Z Last Updated: 2024-12-24T01:35:29.314Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: navidrome Products: navidrome Problem Types: CWE-312 Description: Navidrome is an open source web-based music collection server and streamer. Navidrome stores the JWT secret in plaintext in the navidrome.db database file under the property table. This practice introduces a security risk because anyone with access to the database file can retrieve the secret. This vulnerability is fixed in 0.54.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/navidrome/navidrome/s
xed in 0.54.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/navidrome/navidrome/security/advisories/GHSA-xwx7-p63r-2rj8 - https://github.com/navidrome/navidrome/commit/7f030b0859653593fd2ac0df69f4a313f9caf9ff - https://github.com/navidrome/navidrome/commit/9cbdb20a318a49daf95888b1fd207d4d729b55f1
CVE ID: CVE-2024-56363 State: PUBLISHED Published: 2024-12-23T17:23:57.120Z Last Updated: 2024-12-24T01:32:59.318Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: APTRS Products: APTRS Problem Types: CWE-97 Description: APTRS (Automated Penetration Testing Reporting System) is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. In 1.0, there is a vulnerability in the web application's handling of user-supplied input that is incorporated into a Jinja2 template. Specifically, when user input is improperly sanitized or validated, an attacker can inject Jinja2 syntax into the template, causing the server
input is improperly sanitized or validated, an attacker can inject Jinja2 syntax into the template, causing the server to execute arbitrary code. For example, an attacker might be able to inject expressions like {{ config }}, {{ self.class.mro[1].subclasses() }}, or more dangerous payloads that trigger execution of arbitrary Python code. The vulnerability can be reproduced by submitting crafted input to all the template fields handled by ckeditor, that are passed directly to a Jinja2 template. If the input is rendered without sufficient sanitization, it results in the execution of malicious Jinja2 code on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://g
ution of malicious Jinja2 code on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/APTRS/APTRS/security/advisories/GHSA-h4w2-hvcg-938j - https://github.com/APTRS/APTRS/commit/9f6b6e4a56a9119eb12126a4909441e83b6d7c11
CVE ID: CVE-2024-56364 State: PUBLISHED Published: 2024-12-23T15:52:06.327Z Last Updated: 2024-12-28T00:48:18.868Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: shuchkin Products: simplexlsx Problem Types: CWE-79 Description: SimpleXLSX is software for parsing and retrieving data from Excel XLSx files. Starting in 1.0.12 and ending in 1.1.13, when calling the extended toHTMLEx method, it is possible to execute arbitrary JavaScript code. This vulnerability is fixed in 1.1.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/shuchkin/simplexlsx/security/advisories/GHSA-r87q-fj25-f8jf - https://github.com/shuchkin/simplexlsx
https://github.com/shuchkin/simplexlsx/security/advisories/GHSA-r87q-fj25-f8jf - https://github.com/shuchkin/simplexlsx/commit/71a5e3d40d14e33161f8a40b3fd02de542218ef0
CVE ID: CVE-2024-56365 State: PUBLISHED Published: 2025-01-03T16:56:35.040Z Last Updated: 2025-01-03T18:16:40.533Z Vendors: PHPOffice Products: PhpSpreadsheet Problem Types: CWE-79 Description: PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 are vulnerable to unauthorized reflected cross-site scripting in the constructor of the `Downloader` class. Using the `/vendor/phpoffice/phpspreadsheet/samples/download.php` script, an attacker can perform a cross-site scripting attack. Versions 3.7.0, 2.3.5, 2.1.6, and 1.29.7 contain a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
.1.6, and 1.29.7 contain a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-jmpx-686v-c3wx - https://github.com/PHPOffice/PhpSpreadsheet/commit/700a80346be269af668914172bc6f4521982d0b4#diff-fbb0f53a5c68eeeffaa9ab35552c0b01740396f1a4045af5d2935ec2a62a7816
CVE ID: CVE-2024-56366 State: PUBLISHED Published: 2025-01-03T17:01:09.701Z Last Updated: 2025-01-03T18:15:53.839Z Vendors: PHPOffice Products: PhpSpreadsheet Problem Types: CWE-79 Description: PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 are vulnerable to unauthorized reflected cross-site scripting in the `Accounting.php` file. Using the `/vendor/phpoffice/phpspreadsheet/samples/Wizards/NumberFormat/Accounting.php` script, an attacker can perform a cross-site scripting attack. Versions 3.7.0, 2.3.5, 2.1.6, and 1.29.7 contain a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
.3.5, 2.1.6, and 1.29.7 contain a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-c6fv-7vh8-2rhr - https://github.com/PHPOffice/PhpSpreadsheet/commit/700a80346be269af668914172bc6f4521982d0b4
CVE ID: CVE-2024-56368 State: PUBLISHED Published: 2025-01-11T12:35:45.719Z Last Updated: 2025-05-04T09:57:20.641Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix overflow in __rb_map_vma An overflow occurred when performing the following calculation: nr_pages = ((nr_subbufs + 1) << subbuf_order) - pgoff; Add a check before the calculation to avoid this problem. syzbot reported this as a slab-out-of-bounds in __rb_map_vma: BUG: KASAN: slab-out-of-bounds in __rb_map_vma+0x9ab/0xae0 kernel/trace/ring_buffer.c:7058 Read of size 8 at addr ffff8880767dd2b8 by task syz-executor187/5836 CPU: 0 UID: 0 PID: 5836 Comm: sy
ring_buffer.c:7058 Read of size 8 at addr ffff8880767dd2b8 by task syz-executor187/5836 CPU: 0 UID: 0 PID: 5836 Comm: syz-executor187 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xc3/0x620 mm/kasan/report.c:489 kasan_report+0xd9/0x110 mm/kasan/report.c:602 __rb_map_vma+0x9ab/0xae0 kernel/trace/ring_buffer.c:7058 ring_buffer_map+0x56e/0x9b0 kernel/trace/ring_buffer.c:7138 tracing_buffers_mmap+0xa6/0x120 kernel/trace/
_buffer.c:7058 ring_buffer_map+0x56e/0x9b0 kernel/trace/ring_buffer.c:7138 tracing_buffers_mmap+0xa6/0x120 kernel/trace/trace.c:8482 call_mmap include/linux/fs.h:2183 [inline] mmap_file mm/internal.h:124 [inline] __mmap_new_file_vma mm/vma.c:2291 [inline] __mmap_new_vma mm/vma.c:2355 [inline] __mmap_region+0x1786/0x2670 mm/vma.c:2456 mmap_region+0x127/0x320 mm/mmap.c:1348 do_mmap+0xc00/0xfc0 mm/mmap.c:496 vm_mmap_pgoff+0x1ba/0x360 mm/util.c:580 ksys_mmap_pgoff+0x32c/0x5c0 mm/mmap.c:542 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:82 [inline] __x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:82 do_syscall_x64 arch/x86/entry/common.c:5
x86_64.c:82 [inline] __x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:82 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f The reproducer for this bug is: ------------------------8<------------------------- #include <fcntl.h> #include <stdlib.h> #include <unistd.h> #include <asm/types.h> #include <sys/mman.h> int main(int argc, char **argv) { int page_size = getpagesize(); int fd; void *meta; system("echo 1 > /sys/kernel/tracing/buffer_size_kb"); fd = open("/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw", O_RDONLY); meta = mmap(NULL, page_size, PROT_READ, MAP_SHARED, fd, page_size * 5); } --
ng/per_cpu/cpu0/trace_pipe_raw", O_RDONLY); meta = mmap(NULL, page_size, PROT_READ, MAP_SHARED, fd, page_size * 5); } ------------------------>8------------------------- References: - https://git.kernel.org/stable/c/ec12f30fe54234dd40ffee50dda8d2df10bd0871 - https://git.kernel.org/stable/c/c58a812c8e49ad688f94f4b050ad5c5b388fc5d2
CVE ID: CVE-2024-56369 State: PUBLISHED Published: 2025-01-11T12:35:46.439Z Last Updated: 2025-11-03T20:49:08.142Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() drm_mode_vrefresh() is trying to avoid divide by zero by checking whether htotal or vtotal are zero. But we may still end up with a div-by-zero of vtotal*htotal*... Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/e7c7b48a0fc5ed83baae400a1b15e33978c25d7f - https://git.kernel.org/stable/c/69fbb01e891701e6d04db1ddb5ad49e42c4dd963 - https:
b48a0fc5ed83baae400a1b15e33978c25d7f - https://git.kernel.org/stable/c/69fbb01e891701e6d04db1ddb5ad49e42c4dd963 - https://git.kernel.org/stable/c/b39de5a71bac5641d0fda33d1cf5682d82cf1ae5 - https://git.kernel.org/stable/c/47c8b6cf1d08f0ad40d7ea7b025442e51b35ee1f - https://git.kernel.org/stable/c/9398332f23fab10c5ec57c168b44e72997d6318e
CVE ID: CVE-2024-56370 State: PUBLISHED Published: 2025-04-05T18:26:22.102Z Last Updated: 2025-09-05T13:18:38.369Z Vendors: ELLIOTT Products: Net::Xero Problem Types: CWE-338, CWE-331 Description: Net::Xero 0.044 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Xero uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://perldoc.perl.org/functions/rand - https://security.metacpan.org/docs/guides/random-data-for-security.h
rences: - https://perldoc.perl.org/functions/rand - https://security.metacpan.org/docs/guides/random-data-for-security.html - https://metacpan.org/release/BAREFOOT/Data-Random-0.13/source/lib/Data/Random.pm#L537 - https://metacpan.org/release/ELLIOTT/Net-Xero-0.44/source/lib/Net/Xero.pm#L58 - https://metacpan.org/release/ELLIOTT/Net-Xero-0.44/source/lib/Net/Xero.pm#L9
CVE ID: CVE-2024-56372 State: PUBLISHED Published: 2025-01-11T12:35:47.256Z Last Updated: 2025-05-04T09:57:24.432Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: tun: fix tun_napi_alloc_frags() syzbot reported the following crash [1] Issue came with the blamed commit. Instead of going through all the iov components, we keep using the first one and end up with a malformed skb. [1] kernel BUG at net/core/skbuff.c:2849 ! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 0 UID: 0 PID: 6230 Comm: syz-executor132 Not tainted 6.13.0-rc1-syzkaller-00407-g96b6fcc0ee41 #0 Hardware name: Google Google Compute Engine/Google C
executor132 Not tainted 6.13.0-rc1-syzkaller-00407-g96b6fcc0ee41 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 RIP: 0010:__pskb_pull_tail+0x1568/0x1570 net/core/skbuff.c:2848 Code: 38 c1 0f 8c 32 f1 ff ff 4c 89 f7 e8 92 96 74 f8 e9 25 f1 ff ff e8 e8 ae 09 f8 48 8b 5c 24 08 e9 eb fb ff ff e8 d9 ae 09 f8 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffc90004cbef30 EFLAGS: 00010293 RAX: ffffffff8995c347 RBX: 00000000fffffff2 RCX: ffff88802cf45a00 RDX: 0000000000000000 RSI: 00000000fffffff2 RDI: 0000000000000000 RBP: ffff88807df0c06a R08: ffffffff8995b084 R09: 1ffff1100fbe185c R10: dffffc0000000000 R11: ffffed100
0000000000000000 RBP: ffff88807df0c06a R08: ffffffff8995b084 R09: 1ffff1100fbe185c R10: dffffc0000000000 R11: ffffed100fbe185d R12: ffff888076e85d50 R13: ffff888076e85c80 R14: ffff888076e85cf4 R15: ffff888076e85c80 FS: 00007f0dca6ea6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0dca6ead58 CR3: 00000000119da000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> skb_cow_data+0x2da/0xcb0 net/core/skbuff.c:5284 tipc_aead_decrypt net/tipc/crypto.c:894 [inline] tipc_crypto_rcv+0x402/0x24e0 net/tipc/crypto.
b0 net/core/skbuff.c:5284 tipc_aead_decrypt net/tipc/crypto.c:894 [inline] tipc_crypto_rcv+0x402/0x24e0 net/tipc/crypto.c:1844 tipc_rcv+0x57e/0x12a0 net/tipc/node.c:2109 tipc_l2_rcv_msg+0x2bd/0x450 net/tipc/bearer.c:668 __netif_receive_skb_list_ptype net/core/dev.c:5720 [inline] __netif_receive_skb_list_core+0x8b7/0x980 net/core/dev.c:5762 __netif_receive_skb_list net/core/dev.c:5814 [inline] netif_receive_skb_list_internal+0xa51/0xe30 net/core/dev.c:5905 gro_normal_list include/net/gro.h:515 [inline] napi_complete_done+0x2b5/0x870 net/core/dev.c:6256 napi_complete include/linux/netdevice.h:567 [inline] tun_get_user+0x2ea0/0x4890 drivers/net/tun.c:1982 tun_chr_write_iter+0x10d/0x1f0 drivers/
linux/netdevice.h:567 [inline] tun_get_user+0x2ea0/0x4890 drivers/net/tun.c:1982 tun_chr_write_iter+0x10d/0x1f0 drivers/net/tun.c:2057 do_iter_readv_writev+0x600/0x880 vfs_writev+0x376/0xba0 fs/read_write.c:1050 do_writev+0x1b6/0x360 fs/read_write.c:1096 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f References: - https://git.kernel.org/stable/c/efe74dd58a72bd987b158142c904b7ef2ad132e2 - https://git.kernel.org/stable/c/4f393ea1e2f9c3b646d00572dd92c48b1869c65f - https://git.kernel.org/stable/c/429fde2d81bcef0ebab002215358955704586457
CVE ID: CVE-2024-56374 State: PUBLISHED Published: 2025-01-14T00:00:00.000Z Last Updated: 2025-02-12T20:31:20.698Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: djangoproject Products: Django Problem Types: CWE-770 Description: An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address and is_valid_ipv6_address are vulnerable, as is the django.forms.GenericIPAddressField form field. (The django.db.models.GenericIPAddressField m
s are vulnerable, as is the django.forms.GenericIPAddressField form field. (The django.db.models.GenericIPAddressField model field is not affected.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.djangoproject.com/en/dev/releases/security/ - https://groups.google.com/g/django-announce - https://www.djangoproject.com/weblog/2025/jan/14/security-releases/
CVE ID: CVE-2024-56375 State: PUBLISHED Published: 2024-12-22T00:00:00 Last Updated: 2025-01-06T17:29:19.791Z Vendors: nicmx Products: fort-validator Problem Types: CWE-191 Description: An integer underflow was discovered in Fort 1.6.3 and 1.6.4 before 1.6.5. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a Manifest RPKI object containing an empty fileList. Fort dereferences (and, shortly afterwards, writes to) this array during a shuffle attempt, before the validation that would normally reject it when empty. This out-of-bounds access is caused by an integer underflow that causes the surrounding loop to iterate infinitely. Because the p
of-bounds access is caused by an integer underflow that causes the surrounding loop to iterate infinitely. Because the product is permanently stuck attempting to overshuffle an array that doesn't actually exist, a crash is nearly guaranteed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nicmx.github.io/FORT-validator/CVE.html - https://github.com/NICMx/FORT-validator/issues/154
CVE ID: CVE-2024-56376 State: PUBLISHED Published: 2025-01-09T00:00:00 Last Updated: 2025-01-10T14:59:11.687Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Vanderbilt Products: REDCap Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability in the built-in messenger of REDCap 14.9.6 allows authenticated users to inject malicious scripts into the message field. When a user click on the received message, the crafted payload is executed, potentially enabling the execution of arbitrary web scripts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.evms.edu/research/resources_services/redcap/redcap_change_l
st Notes: - CISA ADP Vulnrichment: References: - https://www.evms.edu/research/resources_services/redcap/redcap_change_log/ - https://github.com/ping-oui-no/Vulnerability-Research-CVESS/blob/main/RedCap/CVE-2024-56376/README.md
CVE ID: CVE-2024-56377 State: PUBLISHED Published: 2025-01-09T00:00:00 Last Updated: 2025-01-10T16:59:00.480Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Vanderbilt Products: REDCap Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability in survey titles of REDCap 14.9.6 allows authenticated users to inject malicious scripts into the Survey Title field or Survey Instructions. When a user receives a survey and clicks anywhere on the survey page to enter data, the crafted payload (which has been injected into all survey fields) is executed, potentially enabling the execution of arbitrary web scripts. Additional Analyst Notes: -
all survey fields) is executed, potentially enabling the execution of arbitrary web scripts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.evms.edu/research/resources_services/redcap/redcap_change_log/ - https://github.com/ping-oui-no/Vulnerability-Research-CVESS/blob/main/RedCap/CVE-2024-56377/README.md
CVE ID: CVE-2024-56378 State: PUBLISHED Published: 2024-12-22T00:00:00.000Z Last Updated: 2025-11-03T19:32:17.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.freedesktop.org/poppler/poppler/-/issues/1553 - https://gitlab.freedesktop.org/poppler/poppler/-/commit/ade9b5ebed44b0c15522c27669ef6cdf93eff84e - https://gitlab.freedesktop.org/poppler/poppler/-/blob/30eada0d2bceb42c2d2a87361339063e0b9bea50/CMakeLists.txt#L621