Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-51479 State: PUBLISHED Published: 2024-12-17T18:13:02.806Z Last Updated: 2024-12-17T20:36:28.402Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: vercel Products: next.js Problem Types: CWE-285 Description: Next.js is a React framework for building full-stack web applications. In affected versions if a Next.js application is performing authorization in middleware based on pathname, it was possible for this authorization to be bypassed for pages directly under the application's root directory. For example: * [Not affected] `https://example.com/` * [Affected] `https://example.com/foo` * [Not affected] `https://example.com/foo/bar`. This issue is
tps://example.com/` * [Affected] `https://example.com/foo` * [Not affected] `https://example.com/foo/bar`. This issue is patched in Next.js `14.2.15` and later. If your Next.js application is hosted on Vercel, this vulnerability has been automatically mitigated, regardless of Next.js version. There are no official workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vercel/next.js/security/advisories/GHSA-7gfc-8cq8-jh5f - https://github.com/vercel/next.js/releases/tag/v14.2.15
CVE ID: CVE-2024-51480 State: PUBLISHED Published: 2025-01-08T15:20:28.407Z Last Updated: 2025-01-08T15:44:19.104Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: RedisTimeSeries Products: RedisTimeSeries Problem Types: CWE-122, CWE-190 Description: RedisTimeSeries is a time-series database (TSDB) module for Redis, by Redis. Executing one of these commands TS.QUERYINDEX, TS.MGET, TS.MRAGE, TS.MREVRANGE by an authenticated user, using specially crafted command arguments may cause an integer overflow, a subsequent heap overflow, and potentially lead to remote code execution. This vulnerability is fixed in 1.6.20, 1.8.15, 1.10.15, and 1.12.3. Additional Analyst Not
ead to remote code execution. This vulnerability is fixed in 1.6.20, 1.8.15, 1.10.15, and 1.12.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/RedisTimeSeries/RedisTimeSeries/security/advisories/GHSA-73x6-fqww-x8rg
CVE ID: CVE-2024-51481 State: PUBLISHED Published: 2024-10-31T16:10:22.398Z Last Updated: 2024-10-31T16:51:59.101Z Vendors: NixOS Products: nix Problem Types: CWE-693 Description: Nix is a package manager for Linux and other Unix systems. On macOS, built-in builders (such as `builtin:fetchurl`, exposed to users with `import <nix/fetchurl.nix>`) were not executed in the macOS sandbox. Thus, these builders (which are running under the `nixbld*` users) had read access to world-readable paths and write access to world-writable paths outside of the sandbox. This issue is fixed in 2.18.9, 2.19.7, 2.20.9, 2.21.5, 2.22.4, 2.23.4, and 2.24.10. Note that sandboxing is not enabled by default on macOS.
n 2.18.9, 2.19.7, 2.20.9, 2.21.5, 2.22.4, 2.23.4, and 2.24.10. Note that sandboxing is not enabled by default on macOS. The Nix sandbox is not primarily intended as a security mechanism, but as an aid to improve reproducibility and purity of Nix builds. However, sandboxing *can* mitigate the impact of other security issues by limiting what parts of the host system a build has access to. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/NixOS/nix/security/advisories/GHSA-wf4c-57rh-9pjg - https://github.com/NixOS/nix/commit/597fcc98e18e3178734d06a9e7306250e8cb8d74
CVE ID: CVE-2024-51482 State: PUBLISHED Published: 2024-10-31T18:07:25.310Z Last Updated: 2024-11-08T16:49:08.199Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: ZoneMinder Products: zoneminder Problem Types: CWE-89 Description: ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37.* <= 1.37.64 is vulnerable to boolean-based SQL Injection in function of web/ajax/event.php. This is fixed in 1.37.65. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-qm8h-3xvf-m7j3 - https://github.com/ZoneMinder/zoneminder/commit/9e7d31841ed9678a7dd06
neminder/security/advisories/GHSA-qm8h-3xvf-m7j3 - https://github.com/ZoneMinder/zoneminder/commit/9e7d31841ed9678a7dd06869037686fc9925e59f
CVE ID: CVE-2024-51483 State: PUBLISHED Published: 2024-11-01T16:19:49.670Z Last Updated: 2024-11-01T17:30:47.107Z Vendors: dgtlmoon Products: changedetection.io Problem Types: CWE-22 Description: changedetection.io is free, open source web page change detection software. Prior to version 0.47.5, when a WebDriver is used to fetch files, `source:file:///etc/passwd` can be used to retrieve local system files, where the more traditional `file:///etc/passwd` gets blocked. Version 0.47.5 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-cwgg-57xj-g77r - https://github.com/dgtlmoon/changedetecti
thub.com/dgtlmoon/changedetection.io/security/advisories/GHSA-cwgg-57xj-g77r - https://github.com/dgtlmoon/changedetection.io/blob/master/changedetectionio/model/Watch.py#L19 - https://github.com/dgtlmoon/changedetection.io/blob/master/changedetectionio/processors/__init__.py#L35 - https://github.com/user-attachments/files/17591630/CL-ChangeDetection.io.Path.Travsersal-311024-181039.pdf
CVE ID: CVE-2024-51484 State: PUBLISHED Published: 2024-11-11T19:46:07.809Z Last Updated: 2024-11-12T01:42:49.921Z Vendors: ampache Products: ampache Problem Types: CWE-352 Description: Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating controllers. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for t
his issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ampache/ampache/security/advisories/GHSA-h6vj-6rvc-3x29
CVE ID: CVE-2024-51485 State: PUBLISHED Published: 2024-11-11T19:45:34.243Z Last Updated: 2024-11-12T01:43:09.444Z Vendors: ampache Products: ampache Problem Types: CWE-352 Description: Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating plugins. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this
issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ampache/ampache/security/advisories/GHSA-xvfj-w962-hqcx
CVE ID: CVE-2024-51486 State: PUBLISHED Published: 2024-11-11T19:44:55.279Z Last Updated: 2024-11-12T01:43:28.573Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: ampache Products: ampache Problem Types: CWE-79 Description: Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface section of the Ampache menu, where users can change the "Custom URL - Favicon". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Ad
dressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ampache/ampache/security/advisories/GHSA-4xw5-f7xm-vpw5
CVE ID: CVE-2024-51487 State: PUBLISHED Published: 2024-11-11T19:43:07.322Z Last Updated: 2024-11-12T01:43:48.257Z Vendors: ampache Products: ampache Problem Types: CWE-352 Description: Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating catalog. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this
issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ampache/ampache/security/advisories/GHSA-5rmx-fjmc-mg6x
CVE ID: CVE-2024-51488 State: PUBLISHED Published: 2024-11-11T19:42:29.878Z Last Updated: 2024-11-12T01:44:07.126Z Vendors: ampache Products: ampache Problem Types: CWE-352 Description: Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing does not adequately validate CSRF tokens when users delete messages. This vulnerability could be exploited to forge CSRF attacks, allowing an attacker to delete messages to any user, including administrators, if they interact with a malicious request. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Add
ressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ampache/ampache/security/advisories/GHSA-46m4-5pxj-66f2
CVE ID: CVE-2024-51489 State: PUBLISHED Published: 2024-11-11T19:37:45.808Z Last Updated: 2024-11-12T01:44:27.158Z Vendors: ampache Products: ampache Problem Types: CWE-352 Description: Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing does not adequately validate CSRF tokens when users send messages to one another. This vulnerability could be exploited to forge CSRF attacks, allowing an attacker to send messages to any user, including administrators, if they interact with a malicious request. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnera
as been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ampache/ampache/security/advisories/GHSA-4q69-983r-mwwr
CVE ID: CVE-2024-51490 State: PUBLISHED Published: 2024-11-11T19:35:21.582Z Last Updated: 2024-11-12T01:44:17.324Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: ampache Products: ampache Problem Types: CWE-79 Description: Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the Ampache menu, where users can change "Custom URL - Logo". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Addition
d in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ampache/ampache/security/advisories/GHSA-x979-f6px-7j2w
CVE ID: CVE-2024-51491 State: PUBLISHED Published: 2025-01-13T21:42:11.493Z Last Updated: 2025-01-14T00:19:12.573Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: notaryproject Products: notation-go Problem Types: CWE-703 Description: notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. The issue was identified during Quarkslab's security audit on the Certificate Revocation List (CRL) based revocation check feature. After retrieving the CRL, notation-go attempts to update the CRL cache using the os.Rename method. However, this operation may fail due to operating system-specific limitations,
the CRL cache using the os.Rename method. However, this operation may fail due to operating system-specific limitations, particularly when the source and destination paths are on different mount points. This failure could lead to an unexpected program termination. In method `crl.(*FileCache).Set`, a temporary file is created in the OS dedicated area (like /tmp for, usually, Linux/Unix). The file is written and then it is tried to move it to the dedicated `notation` cache directory thanks `os.Rename`. As specified in Go documentation, OS specific restriction may apply. When used with Linux OS, it is relying on rename syscall from the libc and as per the documentation, moving a file to a diffe
used with Linux OS, it is relying on rename syscall from the libc and as per the documentation, moving a file to a different mountpoint raises an EXDEV error, interpreted as Cross device link not permitted error. Some Linux distribution, like RedHat use a dedicated filesystem (tmpfs), mounted on a specific mountpoint (usually /tmp) for temporary files. When using such OS, revocation check based on CRL will repeatedly crash notation. As a result the signature verification process is aborted as process crashes. This issue has been addressed in version 1.3.0-rc.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vul
are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/notaryproject/notation-go/security/advisories/GHSA-qjh3-4j3h-vmwp - https://github.com/notaryproject/notation-go/commit/3c3302258ad510fbca2f8a73731569d91f07d196 - https://man7.org/linux/man-pages/man2/rename.2.html
CVE ID: CVE-2024-51492 State: PUBLISHED Published: 2024-11-01T16:22:46.645Z Last Updated: 2024-11-01T20:18:15.274Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L) Vendors: zusam Products: zusam Problem Types: CWE-79 Description: Zusam is a free and open-source way to self-host private forums. Prior to version 0.5.6, specially crafted SVG files uploaded to the service as images allow for unrestricted script execution on (raw) image load. With certain payloads, theft of the target user’s long-lived session token is possible. Note that Zusam, at the time of writing, uses a user’s static API key as a long-lived session token, and these terms can be used interchangeably on
of writing, uses a user’s static API key as a long-lived session token, and these terms can be used interchangeably on the platform. This session token/API key remains valid indefinitely, so long as the user doesn’t expressly request a new one via their Settings page. Version 0.5.6 fixes the cross-site scripting vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zusam/zusam/security/advisories/GHSA-96fx-5rqv-jfxh - https://github.com/zusam/zusam/commit/5930fdf86fa4abed01f0b345c8ec3c443656db9a - https://github.com/zusam/zusam/releases/tag/0.5.6 - https://pfeister.dev/CVE-2024-51492
CVE ID: CVE-2024-51493 State: PUBLISHED Published: 2024-11-05T18:17:29.812Z Last Updated: 2024-11-05T19:01:48.187Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: OctoPrint Products: OctoPrint Problem Types: CWE-620 Description: OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.2 contain a vulnerability that allows an attacker that has gained temporary control over an authenticated victim's OctoPrint browser session to retrieve/recreate/delete the user's or - if the victim has admin permissions - the global API key without having to reauthenticate by re-entering the user account's password
m has admin permissions - the global API key without having to reauthenticate by re-entering the user account's password. An attacker could use a stolen API key to access OctoPrint through its API, or disrupt workflows depending on the API key they deleted. This vulnerability will be patched in version 1.10.3 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OctoPrint/OctoPrint/security/advisories/GHSA-cc6x-8cc7-9953
CVE ID: CVE-2024-51494 State: PUBLISHED Published: 2024-11-15T15:43:38.436Z Last Updated: 2024-11-15T16:04:20.950Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: librenms Products: librenms Problem Types: CWE-79 Description: LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Port Settings" page allows authenticated users to inject arbitrary JavaScript through the "descr" parameter when editing a device's port settings. This vulnerability can lead to the execution of malicious code when the "Port Settings" page is visited, potentially compromising the user's session and allowi
ution of malicious code when the "Port Settings" page is visited, potentially compromising the user's session and allowing unauthorized actions. This vulnerability is fixed in 24.10.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/librenms/librenms/security/advisories/GHSA-7663-37rg-c377 - https://github.com/librenms/librenms/commit/82a744bfe29017b8b58b5752ab9e1b335bedf0a0
CVE ID: CVE-2024-51495 State: PUBLISHED Published: 2024-11-15T15:44:50.033Z Last Updated: 2024-11-15T16:01:15.639Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: librenms Products: librenms Problem Types: CWE-79 Description: LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the Device Overview page allows authenticated users to inject arbitrary JavaScript through the "overwrite_ip" parameter when editing a device. This vulnerability results in the execution of malicious code when the device overview page is visited, potentially compromising the accounts of other users. This vulne
alicious code when the device overview page is visited, potentially compromising the accounts of other users. This vulnerability is fixed in 24.10.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/librenms/librenms/security/advisories/GHSA-p66q-ppwr-q5j8 - https://github.com/librenms/librenms/commit/4568188ce9097a2e3a3b563311077f2bb82455c0
CVE ID: CVE-2024-51496 State: PUBLISHED Published: 2024-11-15T15:45:55.729Z Last Updated: 2024-11-15T17:19:08.596Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: librenms Products: librenms Problem Types: CWE-79 Description: LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Reflected Cross-Site Scripting (XSS) vulnerability in the "metric" parameter of the "/wireless" and "/health" endpoints allows attackers to inject arbitrary JavaScript. This vulnerability results in the execution of malicious code when a user accesses the page with a malicious "metric" parameter, potentially compromising their session and allowing unauthorized
accesses the page with a malicious "metric" parameter, potentially compromising their session and allowing unauthorized actions. This vulnerability is fixed in 24.10.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/librenms/librenms/security/advisories/GHSA-28p7-f6h6-3jh3 - https://github.com/librenms/librenms/commit/aef739a438ffb507e927a4ec87b359164a7a053a
CVE ID: CVE-2024-51497 State: PUBLISHED Published: 2024-11-15T15:46:59.546Z Last Updated: 2024-11-15T17:17:08.505Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: librenms Products: librenms Problem Types: CWE-79 Description: LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Custom OID" tab of a device allows authenticated users to inject arbitrary JavaScript through the "unit" parameter when creating a new OID. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, compromising their accounts and enabling unauthorized actions.
f malicious code in the context of other users' sessions, compromising their accounts and enabling unauthorized actions. This vulnerability is fixed in 24.10.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/librenms/librenms/security/advisories/GHSA-gv4m-f6fx-859x - https://github.com/librenms/librenms/commit/42b156e42a3811c23758772ce8c63d4d3eaba59b
CVE ID: CVE-2024-51498 State: PUBLISHED Published: 2024-11-04T23:07:17.704Z Last Updated: 2024-11-05T16:47:40.398Z Vendors: imputnet Products: cobalt Problem Types: CWE-79 Description: cobalt is a media downloader that doesn't piss you off. A malicious cobalt instance could serve links with the `javascript:` protocol, resulting in Cross-site Scripting (XSS) when the user tries to download an item from a picker. This issue has been present since commit `66bac03e`, was mitigated in commit `97977efa` (correctly configured web instances were no longer vulnerable) and fully fixed in commit `c4be1d3a` (included in release version 10.2.1). Users are advised to upgrade. Users unable to upgrade shoul
d in commit `c4be1d3a` (included in release version 10.2.1). Users are advised to upgrade. Users unable to upgrade should enable a content-security-policy. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/imputnet/cobalt/security/advisories/GHSA-cm4c-v4cm-3735 - https://github.com/imputnet/cobalt/commit/66bac03e3078e4e781d2d3903c05ad66a883a354 - https://github.com/imputnet/cobalt/commit/97977efabd92375f270d1818f38de3b0682c2f19 - https://github.com/imputnet/cobalt/commit/c4be1d3a37b0deb6b6087ec7a815262ac942daf1
CVE ID: CVE-2024-51499 State: PUBLISHED Published: 2024-11-18T19:52:30.504Z Last Updated: 2024-11-18T20:14:42.805Z Vendors: MarkUsProject Products: Markus Problem Types: CWE-434 Description: MarkUs is a web application for the submission and grading of student assignments. In versions prior to 2.4.8, an arbitrary file write vulnerability accessible via the update_files method of the SubmissionsController allows authenticated users (e.g. students) to write arbitrary files to any location on the web server MarkUs is running on (depending on the permissions of the underlying filesystem). e.g. This can lead to a delayed remote code execution in case an attacker is able to write a Ruby file into
ilesystem). e.g. This can lead to a delayed remote code execution in case an attacker is able to write a Ruby file into the config/initializers/ subfolder of the Ruby on Rails application. MarkUs v2.4.8 has addressed this issue. No known workarounds are available at the application level aside from upgrading. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MarkUsProject/Markus/security/advisories/GHSA-j95p-7936-f75w - https://github.com/MarkUsProject/Markus/pull/7026