Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-46713 State: PUBLISHED Published: 2025-05-22T12:23:16.871Z Last Updated: 2025-05-22T15:12:21.999Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: sandboxie-plus Products: Sandboxie Problem Types: CWE-120 Description: Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 0.0.1 and prior to 1.15.12, API_SET_SECURE_PARAM may have an arithmetic overflow deep in the memory allocation subsystem that would lead to a smaller allocation than requested, and a buffer overflow. Version 1.15.12 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gi
r overflow. Version 1.15.12 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-5g85-6p6v-r479
CVE ID: CVE-2025-46714 State: PUBLISHED Published: 2025-05-22T12:27:57.002Z Last Updated: 2025-05-22T14:21:10.879Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: sandboxie-plus Products: Sandboxie Problem Types: CWE-120 Description: Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prior to 1.15.12, API_GET_SECURE_PARAM has an arithmetic overflow leading to a small memory allocation and then a extremely large copy into the small allocation. Version 1.15.12 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sandboxie-plus/Sand
fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-c5h5-54gp-xh4q
CVE ID: CVE-2025-46715 State: PUBLISHED Published: 2025-05-22T16:46:16.419Z Last Updated: 2025-05-22T17:29:34.916Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: sandboxie-plus Products: Sandboxie Problem Types: CWE-787 Description: Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prior to version 1.15.12, Api_GetSecureParam fails to sanitize incoming pointers, and implicitly trusts that the pointer the user has passed in is safe to write to. GetRegValue then writes the contents of the SBIE registry entry selected to this address. An attacker can pass in a kernel pointer an
hen writes the contents of the SBIE registry entry selected to this address. An attacker can pass in a kernel pointer and the driver dumps the registry key contents we requested to it. This can be triggered by anyone on the system, including low integrity windows processes. Version 1.15.12 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-67p9-6h73-ff7x
CVE ID: CVE-2025-46716 State: PUBLISHED Published: 2025-05-22T16:50:18.448Z Last Updated: 2025-05-22T17:28:02.958Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: sandboxie-plus Products: Sandboxie Problem Types: CWE-125 Description: Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prior to version 1.15.12, Api_SetSecureParam fails to sanitize incoming pointers, and implicitly trusts that the pointer the user has passed in is safe to read from. SetRegValue then reads an arbitrary address, which can be a kernel pointer, into a HKLM Security SBIE registry value. This can lat
e then reads an arbitrary address, which can be a kernel pointer, into a HKLM Security SBIE registry value. This can later be retrieved by API_GET_SECURE_PARAM. Version 1.15.12 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-3984-r877-q7xp
CVE ID: CVE-2025-46717 State: PUBLISHED Published: 2025-05-12T14:52:55.408Z Last Updated: 2025-05-12T22:06:55.312Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: trifectatechfoundation Products: sudo-rs Problem Types: CWE-497 Description: sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with no (or very limited) sudo privileges can determine whether files exists in folders that they otherwise cannot access using `sudo --list <pathname>`. Users with local access to a machine can discover the existence/non-existence of certain files, revealing potentially sensitive information in the file names. This informati
existence/non-existence of certain files, revealing potentially sensitive information in the file names. This information can also be used in conjunction with other attacks. Version 0.2.6 fixes the vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/trifectatechfoundation/sudo-rs/security/advisories/GHSA-98cv-wqjx-wx8f - https://github.com/trifectatechfoundation/sudo-rs/releases/tag/v0.2.6
CVE ID: CVE-2025-46718 State: PUBLISHED Published: 2025-05-12T14:54:24.925Z Last Updated: 2025-05-12T22:06:49.474Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: trifectatechfoundation Products: sudo-rs Problem Types: CWE-497 Description: sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with limited sudo privileges (e.g. execution of a single command) can list sudo privileges of other users using the `-U` flag. This vulnerability allows users with limited sudo privileges to enumerate the sudoers file, revealing sensitive information about other users' permissions. Attackers can collect information that can b
doers file, revealing sensitive information about other users' permissions. Attackers can collect information that can be used to more targeted attacks. Systems where users either do not have sudo privileges or have the ability to run all commands as root through sudo (the default configuration on most systems) are not affected by this advisory. Version 0.2.6 fixes the vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/trifectatechfoundation/sudo-rs/security/advisories/GHSA-w9q3-g4p5-5q2r - https://github.com/trifectatechfoundation/sudo-rs/releases/tag/v0.2.6
CVE ID: CVE-2025-46719 State: PUBLISHED Published: 2025-05-05T18:50:56.928Z Last Updated: 2025-05-05T19:03:53.594Z Vendors: open-webui Products: open-webui Problem Types: CWE-79 Description: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.6, a vulnerability in the way certain html tags in chat messages are rendered allows attackers to inject JavaScript code into a chat transcript. The JavaScript code will be executed in the user's browser every time that chat transcript is opened, allowing attackers to retrieve the user's access token and gain full control over their account. Chat transcripts can be shared with other use
retrieve the user's access token and gain full control over their account. Chat transcripts can be shared with other users in the same server, or with the whole open-webui community if "Enable Community Sharing" is enabled in the admin panel. If this exploit is used against an admin user, it is possible to achieve Remote Code Execution on the server where the open-webui backend is hosted. This can be done by creating a new function which contains malicious python code. This vulnerability also affects chat transcripts uploaded to `https://openwebui.com/c/<user>/<chat_id>`, allowing for wormable stored XSS in https[:]//openwebui[.]com. Version 0.6.6 contains a patch for the issue. Additional A
llowing for wormable stored XSS in https[:]//openwebui[.]com. Version 0.6.6 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/open-webui/open-webui/security/advisories/GHSA-9f4f-jv96-8766 - https://github.com/open-webui/open-webui/commit/6fd082d55ffaf6eb226efdeebc7155e3693d2d01 - https://github.com/open-webui/open-webui/blob/main/src/lib/components/chat/Messages/Markdown/MarkdownTokens.svelte#L269-L279
CVE ID: CVE-2025-46720 State: PUBLISHED Published: 2025-05-05T18:53:51.506Z Last Updated: 2025-05-05T19:00:01.531Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: keystonejs Products: keystone Problem Types: CWE-203, CWE-200 Description: Keystone is a content management system for Node.js. Prior to version 6.5.0, `{field}.isFilterable` access control can be bypassed in `update` and `delete` mutations by adding additional unique filters. These filters can be used as an oracle to probe the existence or value of otherwise unreadable fields. Specifically, when a mutation includes a `where` clause with multiple unique filters (e.g. `id` and `email`), Keystone will a
fically, when a mutation includes a `where` clause with multiple unique filters (e.g. `id` and `email`), Keystone will attempt to match records even if filtering by the latter fields would normally be rejected by `field.isFilterable` or `list.defaultIsFilterable`. This can allow malicious actors to infer the presence of a particular field value when a filter is successful in returning a result. This affects any project relying on the default or dynamic `isFilterable` behavior (at the list or field level) to prevent external users from using the filtering of fields as a discovery mechanism. While this access control is respected during `findMany` operations, it was not completely enforced dur
overy mechanism. While this access control is respected during `findMany` operations, it was not completely enforced during `update` and `delete` mutations when accepting more than one unique `where` values in filters. This has no impact on projects using `isFilterable: false` or `defaultIsFilterable: false` for sensitive fields, or for those who have otherwise omitted filtering by these fields from their GraphQL schema. This issue has been patched in `@keystone-6/core` version 6.5.0. To mitigate this issue in older versions where patching is not a viable pathway, set `isFilterable: false` statically for relevant fields to prevent filtering by them earlier in the access control pipeline (tha
lterable: false` statically for relevant fields to prevent filtering by them earlier in the access control pipeline (that is, don't use functions); set `{field}.graphql.omit.read: true` for relevant fields, which implicitly removes filtering by these fields from the GraphQL schema; and/or deny `update` and `delete` operations for the relevant lists completely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/keystonejs/keystone/security/advisories/GHSA-hg9m-67mm-7pg3
CVE ID: CVE-2025-46721 State: PUBLISHED Published: 2025-05-13T15:29:30.068Z Last Updated: 2025-05-13T19:07:23.093Z Vendors: justinas Products: nosurf Problem Types: CWE-352 Description: nosurf is cross-site request forgery (CSRF) protection middleware for Go. A vulnerability in versions prior to 1.2.0 allows an attacker who controls content on the target site, or on a subdomain of the target site (either via XSS, or otherwise) to bypass CSRF checks and issue requests on user's behalf. Due to misuse of the Go `net/http` library, nosurf categorizes all incoming requests as plain-text HTTP requests, in which case the `Referer` header is not checked to have the same origin as the target webpage.
ain-text HTTP requests, in which case the `Referer` header is not checked to have the same origin as the target webpage. If the attacker has control over HTML contents on either the target website (e.g. `example.com`), or on a website hosted on a subdomain of the target (e.g. `attacker.example.com`), they will also be able to manipulate cookies set for the target website. By acquiring the secret CSRF token from the cookie, or overriding the cookie with a new token known to the attacker, `attacker.example.com` is able to craft cross-site requests to `example.com`. A patch for the issue was released in nosurf 1.2.0. In lieu of upgrading to a patched version of nosurf, users may additionally us
r the issue was released in nosurf 1.2.0. In lieu of upgrading to a patched version of nosurf, users may additionally use another HTTP middleware to ensure that a non-safe HTTP request is coming from the same origin (e.g. by requiring a `Sec-Fetch-Site: same-origin` header in the request). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/justinas/nosurf/security/advisories/GHSA-w9hf-35q4-vcjw - https://github.com/justinas/nosurf/commit/ec9bb776d8e5ba9e906b6eb70428f4e7b009feee - https://github.com/advisories/GHSA-rq77-p4h8-4crw - https://github.com/justinas/nosurf-cve-2025-46721 - https://github.com/justinas/nosurf/releases/tag/v1.2.0
CVE ID: CVE-2025-46722 State: PUBLISHED Published: 2025-05-29T16:36:12.879Z Last Updated: 2025-05-29T18:13:02.824Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: vllm-project Products: vllm Problem Types: CWE-1288, CWE-1023 Description: vLLM is an inference and serving engine for large language models (LLMs). In versions starting from 0.7.0 to before 0.9.0, in the file vllm/multimodal/hasher.py, the MultiModalHasher class has a security and data integrity issue in its image hashing method. Currently, it serializes PIL.Image.Image objects using only obj.tobytes(), which returns only the raw pixel data, without including metadata such as the image’s shape (wi
sing only obj.tobytes(), which returns only the raw pixel data, without including metadata such as the image’s shape (width, height, mode). As a result, two images of different sizes (e.g., 30x100 and 100x30) with the same pixel byte sequence could generate the same hash value. This may lead to hash collisions, incorrect cache hits, and even data leakage or security risks. This issue has been patched in version 0.9.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vllm-project/vllm/security/advisories/GHSA-c65p-x677-fgj6 - https://github.com/vllm-project/vllm/pull/17378 - https://github.com/vllm-project/vllm/commit/99404f53c72965b41558aceb1bc2380875f5d848
CVE ID: CVE-2025-46723 State: PUBLISHED Published: 2025-05-02T22:18:55.696Z Last Updated: 2025-05-06T14:37:52.764Z Vendors: openvm-org Products: openvm Problem Types: CWE-131 Description: OpenVM is a performant and modular zkVM framework built for customization and extensibility. In version 1.0.0, OpenVM is vulnerable to overflow through byte decomposition of pc in AUIPC chip. A typo results in the highest limb of pc being range checked to 8-bits instead of 6-bits. This results in the if statement never being triggered because the enumeration gives i=0,1,2, when instead the enumeration should give i=1,2,3, leaving pc_limbs[3] range checked to 8-bits instead of 6-bits. This leads to a vulnera
enumeration should give i=1,2,3, leaving pc_limbs[3] range checked to 8-bits instead of 6-bits. This leads to a vulnerability where the pc_limbs decomposition differs from the true pc, which means a malicious prover can make the destination register take a different value than the AUIPC instruction dictates, by making the decomposition overflow the BabyBear field. This issue has been patched in version 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openvm-org/openvm/security/advisories/GHSA-jf2r-x3j4-23m7 - https://github.com/openvm-org/openvm/commit/68da4b50c033da5603517064aa0a08e1bbf70a01 - https://cantina.xyz/code/c486d600-bed0-4fc6-aed1-de759f
nvm-org/openvm/commit/68da4b50c033da5603517064aa0a08e1bbf70a01 - https://cantina.xyz/code/c486d600-bed0-4fc6-aed1-de759fd29fa2/findings/21 - https://github.com/openvm-org/openvm/blob/0f94c8a3dfa7536c1231465d1bdee5fc607a5993/extensions/rv32im/circuit/src/auipc/core.rs#L135 - https://github.com/openvm-org/openvm/releases/tag/v1.1.0
CVE ID: CVE-2025-46724 State: PUBLISHED Published: 2025-05-20T17:22:13.475Z Last Updated: 2025-05-20T17:53:34.242Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: langroid Products: langroid Problem Types: CWE-94 Description: Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `TableChatAgent` uses `pandas eval()`. If fed by untrusted user input, like the case of a public-facing LLM application, it may be vulnerable to code injection. Langroid 0.53.15 sanitizes input to `TableChatAgent` by default to tackle the most common attack vectors, and added several warnings about the risky behavior in t
ChatAgent` by default to tackle the most common attack vectors, and added several warnings about the risky behavior in the project documentation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/langroid/langroid/security/advisories/GHSA-jqq5-wc57-f8hj - https://github.com/langroid/langroid/commit/0d9e4a7bb3ae2eef8d38f2e970ff916599a2b2a6
CVE ID: CVE-2025-46725 State: PUBLISHED Published: 2025-05-20T17:24:31.618Z Last Updated: 2025-05-20T17:53:02.636Z Vendors: langroid Products: langroid Problem Types: CWE-94 Description: Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `LanceDocChatAgent` uses pandas eval() through `compute_from_docs()`. As a result, an attacker may be able to make the agent run malicious commands through `QueryPlan.dataframe_calc]`) compromising the host system. Langroid 0.53.15 sanitizes input to the affected function by default to tackle the most common attack vectors, and added several warnings about the risky behavior in the project docum
fault to tackle the most common attack vectors, and added several warnings about the risky behavior in the project documentation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/langroid/langroid/security/advisories/GHSA-22c2-9gwg-mj59 - https://github.com/langroid/langroid/commit/0d9e4a7bb3ae2eef8d38f2e970ff916599a2b2a6
CVE ID: CVE-2025-46726 State: PUBLISHED Published: 2025-05-05T19:21:19.597Z Last Updated: 2025-05-05T20:07:01.257Z Vendors: langroid Products: langroid Problem Types: CWE-611 Description: Langroid is a framework for building large-language-model-powered applications. Prior to version 0.53.4, a LLM application leveraging `XMLToolMessage` class may be exposed to untrusted XML input that could result in DoS and/or exposing local files with sensitive information. Version 0.53.4 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/langroid/langroid/security/advisories/GHSA-pw95-88fg-3j6f - https://github.com/langroid/langroid/commit/36e7e7db4dd1636d
langroid/langroid/security/advisories/GHSA-pw95-88fg-3j6f - https://github.com/langroid/langroid/commit/36e7e7db4dd1636de225c2c66c84052b1e9ac3c3 - https://github.com/langroid/langroid/blob/df6227e6c079ec22bb2768498423148d6685acff/langroid/agent/xml_tool_message.py#L51-L52
CVE ID: CVE-2025-46727 State: PUBLISHED Published: 2025-05-07T23:07:40.563Z Last Updated: 2025-05-08T14:01:06.865Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: rack Products: rack Problem Types: CWE-400, CWE-770 Description: Rack is a modular Ruby web server interface. Prior to versions 2.2.14, 3.0.16, and 3.1.14, `Rack::QueryParser` parses query strings and `application/x-www-form-urlencoded` bodies into Ruby data structures without imposing any limit on the number of parameters, allowing attackers to send requests with extremely large numbers of parameters. The vulnerability arises because `Rack::QueryParser` iterates over each `&`-separated key-value pai
mbers of parameters. The vulnerability arises because `Rack::QueryParser` iterates over each `&`-separated key-value pair and adds it to a Hash without enforcing an upper bound on the total number of parameters. This allows an attacker to send a single request containing hundreds of thousands (or more) of parameters, which consumes excessive memory and CPU during parsing. An attacker can trigger denial of service by sending specifically crafted HTTP requests, which can cause memory exhaustion or pin CPU resources, stalling or crashing the Rack server. This results in full service disruption until the affected worker is restarted. Versions 2.2.14, 3.0.16, and 3.1.14 fix the issue. Some other
ervice disruption until the affected worker is restarted. Versions 2.2.14, 3.0.16, and 3.1.14 fix the issue. Some other mitigations are available. One may use middleware to enforce a maximum query string size or parameter count, or employ a reverse proxy (such as Nginx) to limit request sizes and reject oversized query strings or bodies. Limiting request body sizes and query string lengths at the web server or CDN level is an effective mitigation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rack/rack/security/advisories/GHSA-gjh7-p2fx-99vx - https://github.com/rack/rack/commit/2bb5263b464b65ba4b648996a579dbd180d2b712 - https://github.com/rack/rack/comm
-99vx - https://github.com/rack/rack/commit/2bb5263b464b65ba4b648996a579dbd180d2b712 - https://github.com/rack/rack/commit/3f5a4249118d09d199fe480466c8c6717e43b6e3 - https://github.com/rack/rack/commit/cd6b70a1f2a1016b73dc906f924869f4902c2d74
CVE ID: CVE-2025-46728 State: PUBLISHED Published: 2025-05-06T00:45:25.130Z Last Updated: 2025-05-06T02:43:44.757Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: yhirose Products: cpp-httplib Problem Types: CWE-400 Description: cpp-httplib is a C++ header-only HTTP/HTTPS server and client library. Prior to version 0.20.1, the library fails to enforce configured size limits on incoming request bodies when `Transfer-Encoding: chunked` is used or when no `Content-Length` header is provided. A remote attacker can send a chunked request without the terminating zero-length chunk, causing uncontrolled memory allocation on the server. This leads to potential exhausti
he terminating zero-length chunk, causing uncontrolled memory allocation on the server. This leads to potential exhaustion of system memory and results in a server crash or unresponsiveness. Version 0.20.1 fixes the issue by enforcing limits during parsing. If the limit is exceeded at any point during reading, the connection is terminated immediately. A short-term workaround through a Reverse Proxy is available. If updating the library immediately is not feasible, deploy a reverse proxy (e.g., Nginx, HAProxy) in front of the `cpp-httplib` application. Configure the proxy to enforce maximum request body size limits, thereby stopping excessively large requests before they reach the vulnerable
enforce maximum request body size limits, thereby stopping excessively large requests before they reach the vulnerable library code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-px83-72rx-v57c - https://github.com/yhirose/cpp-httplib/commit/7b752106ac42bd5b907793950d9125a0972c8e8e
CVE ID: CVE-2025-46729 State: PUBLISHED Published: 2025-05-12T10:37:04.011Z Last Updated: 2025-05-12T12:38:34.647Z Vendors: julmud Products: phpDVDProfiler Problem Types: CWE-79 Description: julmud/phpDVDProfiler is an adoption of the defunct phpDVDProfiler project, which allows users to display on the web their DVD collections maintained with Invelos's DVDProfiler software. Starting in v_20230807 and prior to v_20250511, cross-site scripting in the search function. v_20250511 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/julmud/phpDVDProfiler/security/advisories/GHSA-x3rx-6c2m-6vg9 - https://github.com/julmud/phpDVDProfil
ttps://github.com/julmud/phpDVDProfiler/security/advisories/GHSA-x3rx-6c2m-6vg9 - https://github.com/julmud/phpDVDProfiler/commit/c97e4b577969d5f6ca8171333b362fcdbec838a7 - https://github.com/julmud/phpDVDProfiler/releases/tag/v_20250511 - https://www.openbugbounty.org/reports/3456782 - https://www.openbugbounty.org/reports/3512265