Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
References: - https://github.com/dataease/dataease/security/advisories/GHSA-2wfc-qwx7-w692 - https://github.com/dataease/dataease/security/advisories/GHSA-v4gg-8rp3-ccjx
CVE ID: CVE-2025-48999 State: PUBLISHED Published: 2025-06-03T20:31:13.950Z Last Updated: 2025-06-04T13:54:25.796Z Vendors: dataease Products: dataease Problem Types: CWE-923, CWE-284 Description: DataEase is an open source business intelligence and data visualization tool. A bypass of CVE-2025-46566's patch exists in versions prior to 2.10.10. In a malicious payload, `getUrlType()` retrieves `hostName`. Since the judgment statement returns false, it will not enter the if statement and will not be filtered. The payload can be directly concatenated at the replace location to construct a malicious JDBC statement. Version 2.10.10 contains a patch for the issue. Additional Analyst Notes: - CISA
construct a malicious JDBC statement. Version 2.10.10 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dataease/dataease/security/advisories/GHSA-6pq2-6q8x-mp2r - https://github.com/dataease/dataease/commit/03b18db8a0fb7e9dc2c44f6d26d8c6221b7748c4
CVE ID: CVE-2025-49000 State: PUBLISHED Published: 2025-06-03T20:54:27.744Z Last Updated: 2025-06-04T13:49:33.402Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: inventree Products: InvenTree Problem Types: CWE-400, CWE-770 Description: InvenTree is an Open Source Inventory Management System. Prior to version 0.17.13, the skip field in the built-in `label-sheet` plugin lacks an upper bound, so a large value forces the server to allocate an enormous Python list. This lets any authenticated label-printing user trigger a denial-of-service via memory exhaustion. the issue is fixed in versions 0.17.13 and higher. No workaround is available aside from upgrading to t
mory exhaustion. the issue is fixed in versions 0.17.13 and higher. No workaround is available aside from upgrading to the patched version. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/inventree/InvenTree/security/advisories/GHSA-m2ch-h84r-p9r6 - https://github.com/inventree/InvenTree/commit/0826a75ef6dde0ad96d680f52a9cf171ba2ce98b - https://github.com/inventree/InvenTree/releases/tag/0.17.13
CVE ID: CVE-2025-49001 State: PUBLISHED Published: 2025-06-03T20:33:48.477Z Last Updated: 2025-06-04T13:51:38.831Z Vendors: dataease Products: dataease Problem Types: CWE-287 Description: DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.10, secret verification does not take effect successfully, so a user can use any secret to forge a JWT token. The vulnerability has been fixed in v2.10.10. No known workarounds are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dataease/dataease/security/advisories/GHSA-xx2m-gmwg-mf3r
CVE ID: CVE-2025-49002 State: PUBLISHED Published: 2025-06-03T20:37:40.449Z Last Updated: 2025-06-04T13:50:51.641Z Vendors: dataease Products: dataease Problem Types: CWE-290 Description: DataEase is an open source business intelligence and data visualization tool. Versions prior to version 2.10.10 have a flaw in the patch for CVE-2025-32966 that allow the patch to be bypassed through case insensitivity because INIT and RUNSCRIPT are prohibited. The vulnerability has been fixed in v2.10.10. No known workarounds are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dataease/dataease/security/advisories/GHSA-999m-jv2p-5h34 - https://github.com/datae
t: References: - https://github.com/dataease/dataease/security/advisories/GHSA-999m-jv2p-5h34 - https://github.com/dataease/dataease/security/advisories/GHSA-h7hj-4j78-cvc7
CVE ID: CVE-2025-49003 State: PUBLISHED Published: 2025-06-26T13:51:44.109Z Last Updated: 2025-06-26T14:14:31.185Z Vendors: dataease Products: dataease Problem Types: CWE-153 Description: DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, a threat actor may take advantage of a feature in Java in which the character "ı" becomes "I" when converted to uppercase, and the character "ſ" becomes "S" when converted to uppercase. A threat actor who uses a carefully crafted message that exploits this character conversion can cause remote code execution. The vulnerability has been fixed in v2.10.11. No known workarounds are available. Additional Anal
remote code execution. The vulnerability has been fixed in v2.10.11. No known workarounds are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dataease/dataease/security/advisories/GHSA-x97w-69ff-r55q
CVE ID: CVE-2025-49004 State: PUBLISHED Published: 2025-06-09T20:25:45.185Z Last Updated: 2025-06-10T15:30:24.937Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: caido Products: caido Problem Types: CWE-290 Description: Caido is a web security auditing toolkit. Prior to version 0.48.0, due to the lack of protection for DNS rebinding, Caido can be loaded on an attacker-controlled domain. This allows a malicious website to hijack the authentication flow of Caido and achieve code execution. A malicious website loaded in the browser can hijack the locally running Caido instance and achieve remote command execution during the initial setup. Even if the Caido insta
he locally running Caido instance and achieve remote command execution during the initial setup. Even if the Caido instance is already configured, an attacker can initiate the authentication flow by performing DNS rebinding. In this case, the victim needs to authorize the request on dashboard.caido.io. Users should upgrade to version 0.48.0 to receive a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/caido/caido/security/advisories/GHSA-jmxf-xw2r-vjrg
CVE ID: CVE-2025-49005 State: PUBLISHED Published: 2025-07-03T21:01:14.743Z Last Updated: 2025-07-08T14:34:12.642Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: vercel Products: next.js Problem Types: CWE-444 Description: Next.js is a React framework for building full-stack web applications. In Next.js App Router from 15.3.0 to before 15.3.3 and Vercel CLI from 41.4.1 to 42.2.0, a cache poisoning vulnerability was found. The issue allowed page requests for HTML content to return a React Server Component (RSC) payload instead under certain conditions. When deployed to Vercel, this would only impact the browser cache, and would not lead to the CDN being poisone
nditions. When deployed to Vercel, this would only impact the browser cache, and would not lead to the CDN being poisoned. When self-hosted and deployed externally, this could lead to cache poisoning if the CDN does not properly distinguish between RSC / HTML in the cache keys. This issue has been resolved in Next.js 15.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vercel/next.js/security/advisories/GHSA-r2fc-ccr8-96c4 - https://github.com/vercel/next.js/issues/79346 - https://github.com/vercel/next.js/commit/ec202eccf05820b60c6126d6411fe16766ecc066 - https://github.com/vercel/next.js/releases/tag/v15.3.3 - https://vercel.com/changelog/cve-2025-4900
d6411fe16766ecc066 - https://github.com/vercel/next.js/releases/tag/v15.3.3 - https://vercel.com/changelog/cve-2025-49005
CVE ID: CVE-2025-49006 State: PUBLISHED Published: 2025-06-09T12:41:51.697Z Last Updated: 2025-06-09T15:06:12.638Z Vendors: wasp-lang Products: wasp Problem Types: CWE-276 Description: Wasp (Web Application Specification) is a Rails-like framework for React, Node.js, and Prisma. Prior to version 0.16.6, Wasp authentication has a vulnerability in the OAuth authentication implementation (affecting only Keycloak with a specific config). Wasp currently lowercases OAuth user IDs before storing / fetching them. This behavior violates OAuth and OpenID Connect specifications and can result in user impersonation, account collisions, and privilege escalation. In practice, out of the OAuth providers th
n result in user impersonation, account collisions, and privilege escalation. In practice, out of the OAuth providers that Wasp auth supports, only Keycloak is affected. Keycloak uses a lowercase UUID by default, but users can configure it to be case sensitive, making it affected. Google, GitHub, and Discord use numerical IDs, making them not affected. Users should update their Wasp version to `0.16.6` which has a fix for the problematic behavior. Users using Keycloak can work around the issue by not using a case sensitive user ID in their realm configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wasp-lang/wasp/security/advisories/GHSA-qvjc-6xv7
alyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wasp-lang/wasp/security/advisories/GHSA-qvjc-6xv7-6v5f - https://github.com/wasp-lang/wasp/commit/433b9b7f491c172db656fb94cc85e5bd7d614b74 - https://wasp-lang.notion.site/PUB-Case-insensitive-OAuth-ID-vulnerability-20018a74854c8064a2bfebe4eaf5fceb
CVE ID: CVE-2025-49007 State: PUBLISHED Published: 2025-06-04T22:42:52.515Z Last Updated: 2025-06-05T14:11:25.234Z Vendors: rack Products: rack Problem Types: CWE-770 Description: Rack is a modular Ruby web server interface. Starting in version 3.1.0 and prior to version 3.1.16, there is a denial of service vulnerability in the Content-Disposition parsing component of Rack. This is very similar to the previous security issue CVE-2022-44571. Carefully crafted input can cause Content-Disposition header parsing in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. This header is used typically used in multipart parsing. Any applications that pars
n a denial of service attack vector. This header is used typically used in multipart parsing. Any applications that parse multipart posts using Rack (virtually all Rails applications) are impacted. Version 3.1.16 contains a patch for the vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rack/rack/security/advisories/GHSA-47m2-26rw-j2jw - https://github.com/rack/rack/commit/4795831a0a310c2d31102749e551b38faab6401f - https://github.com/rack/rack/commit/aed514df37e33907df3c971ed3ca9a0a20ac2901
CVE ID: CVE-2025-49008 State: PUBLISHED Published: 2025-06-05T00:13:14.129Z Last Updated: 2025-06-05T14:10:26.100Z Vendors: Atheos Products: Atheos Problem Types: CWE-78, CWE-88 Description: Atheos is a self-hosted browser-based cloud integrated development environment. Prior to version 6.0.4, improper use of `escapeshellcmd()` in `/components/codegit/traits/execute.php` allows argument injection, leading to arbitrary command execution. Atheos administrators and users of vulnerable versions are at risk of data breaches or server compromise. Version 6.0.4 introduces a `Common::safe_execute` function that sanitizes all arguments using `escapeshellarg()` prior to execution and migrated all comp
n::safe_execute` function that sanitizes all arguments using `escapeshellarg()` prior to execution and migrated all components potentially vulnerable to similar exploits to use this new templated execution system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Atheos/Atheos/security/advisories/GHSA-rwc2-4q8c-xj48 - https://github.com/Atheos/Atheos/commit/7e6c0eb45fa6d04d786a0037389540f2638fe792
CVE ID: CVE-2025-49009 State: PUBLISHED Published: 2025-06-05T16:40:27.978Z Last Updated: 2025-06-17T13:54:23.657Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Erudika Products: para Problem Types: CWE-532 Description: Para is a multitenant backend server/framework for object persistence and retrieval. A vulnerability that exists in versions prior to 1.50.8 in `FacebookAuthFilter.java` results in a full request URL being logged during a failed request to a Facebook user profile. The log includes the user's access token in plain text. Since WARN-level logs are often retained in production and accessible to operators or log aggregation systems, this poses a
ce WARN-level logs are often retained in production and accessible to operators or log aggregation systems, this poses a risk of token exposure. Version 1.50.8 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Erudika/para/security/advisories/GHSA-qx7g-fx8q-545g - https://github.com/Erudika/para/commit/46a908d887da02037384193f70a69345f04887cf
CVE ID: CVE-2025-49011 State: PUBLISHED Published: 2025-06-06T17:36:21.747Z Last Updated: 2025-06-06T21:33:23.317Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: authzed Products: spicedb Problem Types: CWE-358 Description: SpiceDB is an open source database for storing and querying fine-grained authorization data. Prior to version 1.44.2, on schemas involving arrows with caveats on the arrow’ed relation, when the path to resolve a CheckPermission request involves the evaluation of multiple caveated branches, requests may return a negative response when a positive response is expected. Version 1.44.2 fixes the issue. As a workaround, do not use caveats in the
sponse when a positive response is expected. Version 1.44.2 fixes the issue. As a workaround, do not use caveats in the schema over an arrow’ed relation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/authzed/spicedb/security/advisories/GHSA-cwwm-hr97-qfxm - https://github.com/authzed/spicedb/commit/fe8dd9f491f6975b3408c401e413a530eb181a67 - https://github.com/authzed/spicedb/releases/tag/v1.44.2
CVE ID: CVE-2025-49012 State: PUBLISHED Published: 2025-06-05T22:29:40.744Z Last Updated: 2025-06-09T14:47:19.431Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: himmelblau-idm Products: himmelblau Problem Types: CWE-287 Description: Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Himmelblau versions 0.9.0 through 0.9.14 and 1.00-alpha are vulnerable to a privilege escalation issue when Entra ID group-based access restrictions are configured using group display names instead of object IDs. Starting in version 0.9.0, Himmelblau introduced support for specifying group names in the `pam_allow_groups` configuration option. Howev
on 0.9.0, Himmelblau introduced support for specifying group names in the `pam_allow_groups` configuration option. However, Microsoft Entra ID permits the creation of multiple groups with the same `displayName` via the Microsoft Graph API—even by non-admin users, depending on tenant settings. As a result, a user could create a personal group with the same name as a legitimate access group (e.g., `"Allow-Linux-Login"`), add themselves to it, and be granted authentication or `sudo` rights by Himmelblau. Because affected Himmelblau versions compare group names by either `displayName` or by the immutable `objectId`, this allows bypassing access control mechanisms intended to restrict login to me
ayName` or by the immutable `objectId`, this allows bypassing access control mechanisms intended to restrict login to members of official, centrally-managed groups. This issue is fixed in Himmelblau version **0.9.15** and later. In these versions, group name matching in `pam_allow_groups` has been deprecated and removed, and only group `objectId`s (GUIDs) may be specified for secure group-based filtering. To mitigate the issue without upgrading, replace all entries in `pam_allow_groups` with the objectId of the target Entra ID group(s) and/or audit your tenant for groups with duplicate display names using the Microsoft Graph API. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
th duplicate display names using the Microsoft Graph API. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-gcxr-m95v-qcf7 - https://github.com/himmelblau-idm/himmelblau/issues/554 - https://github.com/himmelblau-idm/himmelblau/commit/918577f6a8392a71d9d3d67f20962c372a0c01c6 - https://learn.microsoft.com/en-us/answers/questions/1035045/azure-ad-b2c-creates-groups-with-the-same-name-usi?utm_source=chatgpt.com
CVE ID: CVE-2025-49013 State: PUBLISHED Published: 2025-06-09T12:47:29.163Z Last Updated: 2025-06-09T14:11:43.631Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: WilderForge Products: WilderForge Problem Types: CWE-94, CWE-95, CWE-116 Description: WilderForge is a Wildermyth coremodding API. A critical vulnerability has been identified in multiple projects across the WilderForge organization. The issue arises from unsafe usage of `${{ github.event.review.body }}` and other user controlled variables directly inside shell script contexts in GitHub Actions workflows. This introduces a code injection vulnerability: a malicious actor submitting a crafted pull r
GitHub Actions workflows. This introduces a code injection vulnerability: a malicious actor submitting a crafted pull request review containing shell metacharacters or commands could execute arbitrary shell code on the GitHub Actions runner. This can lead to arbitrary command execution with the permissions of the workflow, potentially compromising CI infrastructure, secrets, and build outputs. Developers who maintain or contribute to the repos WilderForge/WilderForge, WilderForge/ExampleMod, WilderForge/WilderWorkspace, WilderForge/WildermythGameProvider, WilderForge/AutoSplitter, WilderForge/SpASM, WilderForge/thrixlvault, WilderForge/MassHash, and/or WilderForge/DLC_Disabler; as well as u
plitter, WilderForge/SpASM, WilderForge/thrixlvault, WilderForge/MassHash, and/or WilderForge/DLC_Disabler; as well as users who fork any of the above repositories and reuse affected GitHub Actions workflows, are affected. End users of any the above software and users who only install pre-built releases or artifacts are not affected. This vulnerability does not impact runtime behavior of the software or compiled outputs unless those outputs were produced during exploitation of this vulnerability. A current workaround is to disable GitHub Actions in affected repositories, or remove the affected workflows. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Wild
remove the affected workflows. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/WilderForge/WilderForge/security/advisories/GHSA-m6r3-c73x-8fw5 - https://codeql.github.com/codeql-query-help/javascript/js-actions-command-injection - https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#preventing-script-injection - https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#understanding-the-risk-of-script-injection - https://securitylab.github.com/research/github-actions-untrusted-input
CVE ID: CVE-2025-49014 State: PUBLISHED Published: 2025-06-19T15:08:04.875Z Last Updated: 2025-06-23T17:38:15.404Z Vendors: jqlang Products: jq Problem Types: CWE-416 Description: jq is a command-line JSON processor. In version 1.8.0 a heap use after free vulnerability exists within the function f_strflocaltime of /src/builtin.c. This issue has been patched in commit 499c91b, no known fix version exists at time of publication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jqlang/jq/security/advisories/GHSA-rmjp-cr27-wpg2 - https://github.com/jqlang/jq/commit/499c91bca9d4d027833bc62787d1bb075c03680e
CVE ID: CVE-2025-49015 State: PUBLISHED Published: 2025-06-18T00:00:00.000Z Last Updated: 2025-06-18T14:47:35.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Couchbase .NET SDK (client library) before 3.7.1 does not properly enable hostname verification for TLS certificates. In fact, the SDK was also using IP addresses instead of hostnames due to a configuration option that was incorrectly enabled by default. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.couchbase.com/tags/security - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts/
CVE ID: CVE-2025-49029 State: PUBLISHED Published: 2025-07-01T13:27:47.139Z Last Updated: 2025-07-01T13:40:20.458Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: bitto.kazi Products: Custom Login And Signup Widget Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in bitto.Kazi Custom Login And Signup Widget allows Code Injection.This issue affects Custom Login And Signup Widget: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/custom-login-and-signup-widget/vulnerability/wordpress-custom-login-and-signup-widget-pl
k.com/database/wordpress/plugin/custom-login-and-signup-widget/vulnerability/wordpress-custom-login-and-signup-widget-plugin-1-0-arbitrary-code-execution-vulnerability?_s_id=cve
CVE ID: CVE-2025-49031 State: PUBLISHED Published: 2025-07-16T11:28:00.228Z Last Updated: 2025-07-16T20:26:35.688Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Stefan M. Products: SMu Manual DoFollow Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stefan M. SMu Manual DoFollow allows Reflected XSS. This issue affects SMu Manual DoFollow: from n/a through 1.8.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/manuall-dofollow/vulnerability/wordpress-smu-manual-dofollow-plugin-1-8-1-reflected-cross-site-scr
base/wordpress/plugin/manuall-dofollow/vulnerability/wordpress-smu-manual-dofollow-plugin-1-8-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49032 State: PUBLISHED Published: 2025-07-03T12:09:15.820Z Last Updated: 2025-07-03T13:15:11.711Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: PublishPress Products: Gutenberg Blocks Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress Gutenberg Blocks allows Stored XSS.This issue affects Gutenberg Blocks: from n/a through 3.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/advanced-gutenberg/vulnerability/wordpress-gutenberg-blocks-plugin-3-3-1-cross-site-scripting-xss-vulne
wordpress/plugin/advanced-gutenberg/vulnerability/wordpress-gutenberg-blocks-plugin-3-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49033 State: PUBLISHED Published: 2025-08-14T10:34:22.669Z Last Updated: 2025-08-14T14:43:02.537Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Metagauss Products: ProfileGrid Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid allows Blind SQL Injection. This issue affects ProfileGrid : from n/a through 5.9.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/profilegrid-user-profiles-groups-and-communities/vulnerability/wordpress-profilegrid-5-9-5-3-sql-injection-vulner
plugin/profilegrid-user-profiles-groups-and-communities/vulnerability/wordpress-profilegrid-5-9-5-3-sql-injection-vulnerability?_s_id=cve