Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
d is part of release 1.8.1. This issue only affects users who are using function buildpacks from third-parties; pinning the builder image to a specific content-hash with a valid `lifecycle` image will also mitigate the attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/knative/func/security/advisories/GHSA-5336-2g3f-9g3m - https://github.com/knative/func/pull/1442 - https://github.com/knative/func/blob/5ca77d38744d3481cc0b795f607c5859b19588fc/buildpacks/builder.go#L37-L41 - https://github.com/knative/func/releases/tag/knative-v1.8.1
CVE ID: CVE-2022-41940 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-22T16:02:20.459Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H) Vendors: socketio Products: engine.io Problem Types: CWE-248 Description: Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. A specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process. This impacts all the users of the engine.io package, including those who uses depending packages like socket.io. There is no known workaround except upgrading to a safe version. There ar
se who uses depending packages like socket.io. There is no known workaround except upgrading to a safe version. There are patches for this issue released in versions 3.6.1 and 6.2.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/socketio/engine.io/security/advisories/GHSA-r7qp-cfhv-p84w - https://github.com/socketio/engine.io/commit/425e833ab13373edf1dd5a0706f07100db14e3c6 - https://github.com/socketio/engine.io/commit/83c4071af871fc188298d7d591e95670bf9f9085
CVE ID: CVE-2022-41941 State: PUBLISHED Published: 2023-01-25T06:06:23.147Z Last Updated: 2025-03-10T21:19:43.894Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-79 Description: GLPI is a Free Asset and IT Management Software package. Versions 10.0.0 and above, prior to 10.0.6, are subject to Cross-site Scripting. An administrator may store malicious code in help links. This issue is patched in 10.0.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-qqqm-7h6v-7cf4
CVE ID: CVE-2022-41942 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-23T16:36:07.093Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L) Vendors: sourcegraph Products: sourcegraph Problem Types: CWE-20, CWE-78 Description: Sourcegraph is a code intelligence platform. In versions prior to 4.1.0 a command Injection vulnerability existed in the gitserver service, present in all Sourcegraph deployments. This vulnerability was caused by a lack of input validation on the host parameter of the `/list-gitolite` endpoint. It was possible to send a crafted request to gitserver that would execute commands inside the container. Successful exploitation req
ble to send a crafted request to gitserver that would execute commands inside the container. Successful exploitation requires the ability to send local requests to gitserver. The issue is patched in version 4.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sourcegraph/sourcegraph/security/advisories/GHSA-pfm3-23mh-6xjp - https://github.com/sourcegraph/sourcegraph/pull/42553
CVE ID: CVE-2022-41943 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-23T16:36:01.306Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L) Vendors: sourcegraph Products: sourcegraph Problem Types: CWE-276 Description: sourcegraph is a code intelligence platform. As a site admin it was possible to execute arbitrary commands on Gitserver when the experimental `customGitFetch` feature was enabled. This experimental feature has now been disabled by default. This issue has been patched in version 4.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sourcegraph/sourcegraph/security/advis
CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sourcegraph/sourcegraph/security/advisories/GHSA-4qhq-4x4h-fxm8 - https://github.com/sourcegraph/sourcegraph/pull/42704
CVE ID: CVE-2022-41944 State: PUBLISHED Published: 2022-11-28T00:00:00.000Z Last Updated: 2025-04-23T16:34:25.779Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: discourse Products: discourse Problem Types: CWE-200 Description: Discourse is an open-source discussion platform. In stable versions prior to 2.8.12 and beta or tests-passed versions prior to 2.9.0.beta.13, under certain conditions, a user can see notifications for topics they no longer have access to. If there is sensitive information in the topic title, it will therefore have been exposed. This issue is patched in stable version 2.8.12, beta version 2.9.0.beta13, and tests-passed version 2.9.0.beta
exposed. This issue is patched in stable version 2.8.12, beta version 2.9.0.beta13, and tests-passed version 2.9.0.beta13. There are no workarounds available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-354r-jpj5-53c2 - https://github.com/discourse/discourse/commit/c6ee28ec756436cc9ce154dd2c8e4c441f92f693
CVE ID: CVE-2022-41945 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-22T16:02:30.877Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: 4ra1n Products: super-xray Problem Types: CWE-94 Description: super-xray is a vulnerability scanner (xray) GUI launcher. In version 0.1-beta, the URL is not filtered and directly spliced ​​into the command, resulting in a possible RCE vulnerability. Users should upgrade to super-xray 0.2-beta. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/4ra1n/super-xray/security/advisories/GHSA-732j-763p-cvqg - https://github.com/4ra1n/super-xray/rele
- https://github.com/4ra1n/super-xray/security/advisories/GHSA-732j-763p-cvqg - https://github.com/4ra1n/super-xray/releases/tag/0.2-beta
CVE ID: CVE-2022-41946 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-11-03T21:46:35.067Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: pgjdbc Products: pgjdbc Problem Types: CWE-200, CWE-377 Description: pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either `PreparedStatement.setText(int, InputStream)` or `PreparedStatemet.setBytea(int, InputStream)` will create a temporary file if the InputStream is larger than 2k. This will create a temporary file which is readable by other users on Unix like systems, but not MacOS. On Unix like systems, the system's temporary directory is shared
ble by other users on Unix like systems, but not MacOS. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this directory they are, by default, readable by other users on that same system. This vulnerability does not allow other users to overwrite the contents of these directories or files. This is purely an information disclosure vulnerability. Because certain JDK file system APIs were only added in JDK 1.7, this this fix is dependent upon the version of the JDK you are using. Java 1.7 and higher users: this vulnerability is fixed in 4.5.0. Java 1.6 and lower users: no patch is avail
are using. Java 1.7 and higher users: this vulnerability is fixed in 4.5.0. Java 1.6 and lower users: no patch is available. If you are unable to patch, or are stuck running on Java 1.6, specifying the java.io.tmpdir system environment variable to a directory that is exclusively owned by the executing user will mitigate this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-562r-vg33-8x8h - https://github.com/pgjdbc/pgjdbc/commit/9008dc9aade6dbfe4efafcd6872ebc55f4699cf5 - https://lists.debian.org/debian-lts-announce/2022/12/msg00003.html - https://lists.fedoraproject.org/archives/list/package-announce%40
debian.org/debian-lts-announce/2022/12/msg00003.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25TY2L3RMVNOC7VAHJEAO7PTT6M6JJAD/ - https://security.netapp.com/advisory/ntap-20240329-0003/
CVE ID: CVE-2022-41947 State: PUBLISHED Published: 2022-12-08T22:14:14.759Z Last Updated: 2025-04-23T16:30:27.064Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: dhis2 Products: dhis2-core Problem Types: CWE-79 Description: DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Through various features of DHIS2, an authenticated user may be able to upload a file which includes embedded javascript. The user could then potentially trick another authenticated user to open the malicious file in a browser which would trigger the javascript code, resulting in a cross-site scripting (XSS) attack. DHIS2 ad
us file in a browser which would trigger the javascript code, resulting in a cross-site scripting (XSS) attack. DHIS2 administrators should upgrade to the following hotfix releases: 2.36.12.1, 2.37.8.1, 2.38.2.1, 2.39.0.1. Users unable to upgrade may add the following simple CSP rule in your web proxy to the vulnerable endpoints: `script-src 'none'`. This workaround will prevent all javascript from running on those endpoints. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dhis2/dhis2-core/security/advisories/GHSA-763w-rm78-6xcg - https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
CVE ID: CVE-2022-41948 State: PUBLISHED Published: 2022-12-08T22:14:12.992Z Last Updated: 2025-04-23T16:30:33.084Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L) Vendors: dhis2 Products: dhis2-core Problem Types: CWE-269 Description: DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Affected versions are subject to a privilege escalation vulnerability. A DHIS2 user with authority to manage users can assign superuser privileges to themself by manually crafting an HTTP PUT request. Only users with the following DHIS2 user role authorities can exploit this vulnerability. Note that in many systems the only
users with the following DHIS2 user role authorities can exploit this vulnerability. Note that in many systems the only users with user admin privileges are also superusers. In these cases, the escalation vulnerability does not exist. The vulnerability is only exploitable by attackers who can authenticate as users with the user admin authority. As this is usually a small and relatively trusted set of users, exploit vectors will often be limited. DHIS2 administrators should upgrade to the following hotfix releases: 2.36.12.1, 2.37.8.1, 2.38.2.1, 2.39.0.1. The only known workaround to this issue is to avoid the assignment of the user management authority to any users until the patch has been
karound to this issue is to avoid the assignment of the user management authority to any users until the patch has been applied. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dhis2/dhis2-core/security/advisories/GHSA-59fm-8432-2426
CVE ID: CVE-2022-41949 State: PUBLISHED Published: 2022-12-08T21:57:50.524Z Last Updated: 2025-04-23T16:30:38.729Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: dhis2 Products: dhis2-core Problem Types: CWE-918 Description: DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. In affected versions an authenticated DHIS2 user can craft a request to DHIS2 to instruct the server to make requests to external resources (like third party servers). This could allow an attacker, for example, to identify vulnerable services which might not be otherwise exposed to the public internet or to determine whether
le, to identify vulnerable services which might not be otherwise exposed to the public internet or to determine whether a specific file is present on the DHIS2 server. DHIS2 administrators should upgrade to the following hotfix releases: 2.36.12.1, 2.37.8.1, 2.38.2.1, 2.39.0.1. At this time, there is no known workaround or mitigation for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dhis2/dhis2-core/security/advisories/GHSA-6qh9-rxc8-7943 - https://github.com/dhis2/dhis2-core/commit/dc3166c216da53e12a16bfdc51055823b838c1c3
CVE ID: CVE-2022-41950 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-22T16:02:09.609Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: 4ra1n Products: super-xray Problem Types: CWE-250 Description: super-xray is the GUI alternative for vulnerability scanning tool xray. In 0.2-beta, a privilege escalation vulnerability was discovered. This caused inaccurate default xray permissions. Note: this vulnerability only affects Linux and Mac OS systems. Users should upgrade to super-xray 0.3-beta. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/4ra1n/super-xray/security/advisorie
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/4ra1n/super-xray/security/advisories/GHSA-2g28-xrw6-fq5f - https://github.com/4ra1n/super-xray/releases/tag/0.3-beta
CVE ID: CVE-2022-41951 State: PUBLISHED Published: 2023-11-27T20:27:33.911Z Last Updated: 2024-08-03T12:56:38.599Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: oroinc Products: platform Problem Types: CWE-22 Description: OroPlatform is a PHP Business Application Platform (BAP) designed to make development of custom business applications easier and faster. Path Traversal is possible in `Oro\Bundle\GaufretteBundle\FileManager::getTemporaryFileName`. With this method, an attacker can pass the path to a non-existent file, which will allow writing the content to a new file that will be available during script execution. This vulnerability has been fixed in versi
ing the content to a new file that will be available during script execution. This vulnerability has been fixed in version 5.0.9. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/oroinc/platform/security/advisories/GHSA-9v3j-4j64-p937
CVE ID: CVE-2022-41952 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-23T16:35:54.250Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: matrix-org Products: synapse Problem Types: CWE-400 Description: Synapse before 1.52.0 with URL preview functionality enabled will attempt to generate URL previews for media stream URLs without properly limiting connection time. Connections will only be terminated after `max_spider_size` (default: 10M) bytes have been downloaded, which can in some cases lead to long-lived connections towards the streaming media server (for instance, Icecast). This can cause excessive traffic and connections toward
ons towards the streaming media server (for instance, Icecast). This can cause excessive traffic and connections toward such servers if their stream URL is, for example, posted to a large room with many Synapse instances with URL preview enabled. Version 1.52.0 implements a timeout mechanism which will terminate URL preview connections after 30 seconds. Since generating URL previews for media streams is not supported and always fails, 1.53.0 additionally implements an allow list for content types for which Synapse will even attempt to generate a URL preview. Upgrade to 1.53.0 to fully resolve the issue. As a workaround, turn off URL preview functionality by setting `url_preview_enabled: fals
.0 to fully resolve the issue. As a workaround, turn off URL preview functionality by setting `url_preview_enabled: false` in the Synapse configuration file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matrix-org/synapse/security/advisories/GHSA-4822-jvwx-w47h - https://github.com/matrix-org/synapse/pull/11784 - https://github.com/matrix-org/synapse/pull/11936 - https://github.com/matrix-org/synapse/releases/tag/v1.52.0 - https://github.com/matrix-org/synapse/releases/tag/v1.53.0
CVE ID: CVE-2022-41953 State: PUBLISHED Published: 2023-01-17T21:03:14.721Z Last Updated: 2025-03-10T21:22:28.600Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: git-for-windows Products: git Problem Types: CWE-426 Description: Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are uncomfortable with using Git on the command-line. Git GUI has a function to clone repositories. Immediately after the local clone is available, Git GUI will automatically post-process it, among other things running a spell checker called `aspell.exe` if it was found. Git GUI is implemented as a Tcl/Tk script. Due to the unfortun
ning a spell checker called `aspell.exe` if it was found. Git GUI is implemented as a Tcl/Tk script. Due to the unfortunate design of Tcl on Windows, the search path when looking for an executable _always includes the current directory_. Therefore, malicious repositories can ship with an `aspell.exe` in their top-level directory which is executed by Git GUI without giving the user a chance to inspect it first, i.e. running untrusted code. This issue has been addressed in version 2.39.1. Users are advised to upgrade. Users unable to upgrade should avoid using Git GUI for cloning. If that is not a viable option, at least avoid cloning from untrusted sources. Additional Analyst Notes: - CVE Pro
ning. If that is not a viable option, at least avoid cloning from untrusted sources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/git-for-windows/git/security/advisories/GHSA-v4px-mx59-w99c - https://github.com/git-for-windows/git/pull/4219 - https://github.com/git-for-windows/git/commit/7360767e8dfc1895a932324079f7d45d7791d39f - https://www.tcl.tk/man/tcl8.6/TclCmd/exec.html#M23
CVE ID: CVE-2022-41954 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-23T16:34:44.117Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: joniles Products: mpxj Problem Types: CWE-200, CWE-377 Description: MPXJ is an open source library to read and write project plans from a variety of file formats and databases. On Unix-like operating systems (not Windows or macos), MPXJ's use of `File.createTempFile(..)` results in temporary files being created with the permissions `-rw-r--r--`. This means that any other user on the system can read the contents of this file. When MPXJ is reading a schedule file which requires the creation of a tempora
system can read the contents of this file. When MPXJ is reading a schedule file which requires the creation of a temporary file or directory, a knowledgeable local user could locate these transient files while they are in use and would then be able to read the schedule being processed by MPXJ. The problem has been patched, MPXJ version 10.14.1 and later includes the necessary changes. Users unable to upgrade may set `java.io.tmpdir` to a directory to which only the user running the application has access will prevent other users from accessing these temporary files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/joniles/mpxj/secur
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/joniles/mpxj/security/advisories/GHSA-jf2p-4gqj-849g - https://github.com/joniles/mpxj/commit/ae0af24345d79ad45705265d9927fe55e94a5721
CVE ID: CVE-2022-41955 State: PUBLISHED Published: 2023-01-14T00:09:07.032Z Last Updated: 2024-08-03T12:56:38.649Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: autolab Products: Autolab Problem Types: CWE-78 Description: Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that enables instructors to offer autograded programming assignments to their students over the Web. A remote code execution vulnerability was discovered in Autolab's MOSS functionality, whereby an instructor with access to the feature might be able to execute code on the server hosting Autolab. This vulnerability has been patche
th access to the feature might be able to execute code on the server hosting Autolab. This vulnerability has been patched in version 2.10.0. As a workaround, disable the MOSS feature if it is unneeded by replacing the body of `run_moss` in `app/controllers/courses_controller.rb` with `render(plain: "Feature disabled", status: :bad_request) && return`. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/autolab/Autolab/security/advisories/GHSA-x5r3-vf3p-3269 - https://securitylab.github.com/advisories/GHSL-2022-100_Autolab/
CVE ID: CVE-2022-41956 State: PUBLISHED Published: 2023-01-14T00:40:32.121Z Last Updated: 2024-08-03T12:56:38.655Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: autolab Products: Autolab Problem Types: CWE-22 Description: Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that enables instructors to offer autograded programming assignments to their students over the Web. A file disclosure vulnerability was discovered in Autolab's remote handin feature, whereby users are able to hand-in assignments using paths outside their submission directory. Users can then view the submission to view the file
hand-in assignments using paths outside their submission directory. Users can then view the submission to view the file's contents. The vulnerability has been patched in version 2.10.0. As a workaround, ensure that the field for the remote handin feature is empty (Edit Assessment > Advanced > Remote handin path), and that you are not running Autolab as `root` (or any user that has write access to `/`). Alternatively, disable the remote handin feature if it is unneeded by replacing the body of `local_submit` in `app/controllers/assessment/handin.rb` with `render(plain: "Feature disabled", status: :bad_request) && return`. Additional Analyst Notes: - CVE Program Container: References: - https
ture disabled", status: :bad_request) && return`. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/autolab/Autolab/security/advisories/GHSA-g7x7-mgrv-f24x - https://securitylab.github.com/advisories/GHSL-2022-100_Autolab/ - https://www.stackhawk.com/blog/rails-path-traversal-guide-examples-and-prevention/
CVE ID: CVE-2022-41957 State: PUBLISHED Published: 2022-11-28T00:00:00.000Z Last Updated: 2025-04-23T16:34:20.206Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: julianhille Products: MuhammaraJS Problem Types: CWE-690 Description: Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. The package muhammara before 2.6.2 and from 3.0.0 and before 3.3.0, as well as all versions of muhammara's predecessor package hummus, are vulnerable to Denial of Service (DoS) when supplied with a maliciously crafted PDF file to be parsed. The issue has been patched in muhammara version 3.4.0 and the fix has been backported to versio