Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tegy to `:exception`. Please see the linked GHSA for more workaround details. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/solidusio/solidus_auth_devise/security/advisories/GHSA-xm34-v85h-9pg2 - https://github.com/solidusio/solidus_auth_devise/commit/731a6645e90ea9fd228f78ec53c6976c048a0555
CVE ID: CVE-2021-41275 State: PUBLISHED Published: 2021-11-17T19:50:11 Last Updated: 2024-08-04T03:08:31.652Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: spree Products: spree_auth_devise Problem Types: CWE-352 Description: spree_auth_devise is an open source library which provides authentication and authorization services for use with the Spree storefront framework by using an underlying Devise authentication framework. In affected versions spree_auth_devise is subject to a CSRF vulnerability that allows user account takeover. All applications using any version of the frontend component of spree_auth_devise are affected if protect_from_forgery method
plications using any version of the frontend component of spree_auth_devise are affected if protect_from_forgery method is both: Executed whether as: A before_action callback (the default). A prepend_before_action (option prepend: true given) before the :load_object hook in Spree::UserController (most likely order to find). Configured to use :null_session or :reset_session strategies (:null_session is the default in case the no strategy is given, but rails --new generated skeleton use :exception). Users are advised to update their spree_auth_devise gem. For users unable to update it may be possible to change your strategy to :exception. Please see the linked GHSA for more workaround details.
update it may be possible to change your strategy to :exception. Please see the linked GHSA for more workaround details. ### Impact CSRF vulnerability that allows user account takeover. All applications using any version of the frontend component of `spree_auth_devise` are affected if `protect_from_forgery` method is both: * Executed whether as: * A before_action callback (the default) * A prepend_before_action (option prepend: true given) before the :load_object hook in Spree::UserController (most likely order to find). * Configured to use :null_session or :reset_session strategies (:null_session is the default in case the no strategy is given, but rails --new generated skeleton use :except
trategies (:null_session is the default in case the no strategy is given, but rails --new generated skeleton use :exception). That means that applications that haven't been configured differently from what it's generated with Rails aren't affected. Thanks @waiting-for-dev for reporting and providing a patch �� ### Patches Spree 4.3 users should update to spree_auth_devise 4.4.1 Spree 4.2 users should update to spree_auth_devise 4.2.1 ### Workarounds If possible, change your strategy to :exception: ```ruby class ApplicationController < ActionController::Base protect_from_forgery with: :exception end ``` Add the following to`config/application.rb `to at least run the `:exception` strategy on t
gery with: :exception end ``` Add the following to`config/application.rb `to at least run the `:exception` strategy on the affected controller: ```ruby config.after_initialize do Spree::UsersController.protect_from_forgery with: :exception end ``` ### References https://github.com/solidusio/solidus_auth_devise/security/advisories/GHSA-xm34-v85h-9pg2 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/spree/spree_auth_devise/security/advisories/GHSA-26xx-m4q2-xhq8 - https://github.com/spree/spree_auth_devise/commit/adf6ed4cd94d66091776b5febd4ff3767362de63
CVE ID: CVE-2021-41276 State: PUBLISHED Published: 2021-12-15T19:30:22 Last Updated: 2024-08-04T03:08:31.643Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L) Vendors: Enalean Products: tuleap Problem Types: CWE-74, CWE-90 Description: Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected versions Tuleap does not sanitize properly the search filter built from the ldap_id attribute of a user during the daily synchronization. A malicious user could force accounts to be suspended or take over another account by forcing the update of the ldap_uid attribute. Note that the malicious user either need to have si
ver another account by forcing the update of the ldap_uid attribute. Note that the malicious user either need to have site administrator capability on the Tuleap instance or be an LDAP operator with the capability to create/modify account. The Tuleap instance needs to have the LDAP plugin activated and enabled for this issue to be exploitable. This issue has been patched in Tuleap Community Edition 13.2.99.31, Tuleap Enterprise Edition 13.1-5, and Tuleap Enterprise Edition 13.2-3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Enalean/tuleap/security/advisories/GHSA-887w-pv2r-x8pm - https://github.com/Enalean/tuleap/commit/bd47f29847fcd6a68d359bc8aefb8749
leap/security/advisories/GHSA-887w-pv2r-x8pm - https://github.com/Enalean/tuleap/commit/bd47f29847fcd6a68d359bc8aefb8749bb8a1b7c - https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=bd47f29847fcd6a68d359bc8aefb8749bb8a1b7c - https://tuleap.net/plugins/tracker/?aid=24149
CVE ID: CVE-2021-41277 State: PUBLISHED Published: 2021-11-17T20:05:11.000Z Last Updated: 2025-10-21T23:25:25.131Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L) Vendors: metabase Products: metabase Problem Types: CWE-200 Description: Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map (`admin->settings->maps->custom maps->add a map`) support and potential local file inclusion (including environment variables). URLs were not validated prior to being loaded. This issue is fixed in a new maintenance release (0.40.5 and 1.40.5), and any subsequent release after that. If you’re unable
issue is fixed in a new maintenance release (0.40.5 and 1.40.5), and any subsequent release after that. If you’re unable to upgrade immediately, you can mitigate this by including rules in your reverse proxy or load balancer or WAF to provide a validation filter before the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/metabase/metabase/security/advisories/GHSA-w73v-6p7p-fpfr - https://github.com/metabase/metabase/commit/042a36e49574c749f944e19cf80360fd3dc322f0
CVE ID: CVE-2021-41278 State: PUBLISHED Published: 2021-11-18T23:50:11 Last Updated: 2024-08-04T03:08:31.656Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N) Vendors: edgexfoundry Products: app-functions-sdk-go Problem Types: CWE-327 Description: Functions SDK for EdgeX is meant to provide all the plumbing necessary for developers to get started in processing/transforming/exporting data out of the EdgeX IoT platform. In affected versions broken encryption in app-functions-sdk “AES” transform in EdgeX Foundry releases prior to Jakarta allows attackers to decrypt messages via unspecified vectors. The app-functions-sdk exports an “aes” transform that user scripts can op
s to decrypt messages via unspecified vectors. The app-functions-sdk exports an “aes” transform that user scripts can optionally call to encrypt data in the processing pipeline. No decrypt function is provided. Encryption is not enabled by default, but if used, the level of protection may be less than the user may expects due to a broken implementation. Version v2.1.0 (EdgeX Foundry Jakarta release and later) of app-functions-sdk-go/v2 deprecates the “aes” transform and provides an improved “aes256” transform in its place. The broken implementation will remain in a deprecated state until it is removed in the next EdgeX major release to avoid breakage of existing software that depends on the
ed state until it is removed in the next EdgeX major release to avoid breakage of existing software that depends on the broken implementation. As the broken transform is a library function that is not invoked by default, users who do not use the AES transform in their processing pipelines are unaffected. Those that are affected are urged to upgrade to the Jakarta EdgeX release and modify processing pipelines to use the new "aes256" transform. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/edgexfoundry/app-functions-sdk-go/security/advisories/GHSA-6c7m-qwxj-mvhp - https://github.com/edgexfoundry/app-functions-sdk-go/commit/8fa13c6388ce76a6b878b54490eac61aa
ries/GHSA-6c7m-qwxj-mvhp - https://github.com/edgexfoundry/app-functions-sdk-go/commit/8fa13c6388ce76a6b878b54490eac61aa7d81165
CVE ID: CVE-2021-41279 State: PUBLISHED Published: 2021-11-26T18:00:11 Last Updated: 2024-08-04T03:08:31.643Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: baserproject Products: basercms Problem Types: CWE-22 Description: BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload crafted zip files capable of path traversal on the host operating system. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible. Additional Analys
nspecified number of users. If you are eligible, please update to the new version as soon as possible. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/baserproject/basercms/security/advisories/GHSA-4x2f-54wr-4hjg - https://github.com/baserproject/basercms/commit/d8ab0a81a7bce35cc95ff7dff851a7e87a084336
CVE ID: CVE-2021-41280 State: PUBLISHED Published: 2021-11-19T20:05:11 Last Updated: 2024-08-04T03:08:31.899Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: sharetribe Products: sharetribe Problem Types: CWE-78 Description: Sharetribe Go is a source available marketplace software. In affected versions operating system command injection is possible on installations of Sharetribe Go, that do not have a secret AWS Simple Notification Service (SNS) notification token configured via the `sns_notification_token` configuration parameter. This configuration parameter is unset by default. The vulnerability has been patched in version 10.2.1. Users who are unable t
onfiguration parameter is unset by default. The vulnerability has been patched in version 10.2.1. Users who are unable to upgrade should set the`sns_notification_token` configuration parameter to a secret value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sharetribe/sharetribe/security/advisories/GHSA-hjjc-p9hr-424c - https://github.com/sharetribe/sharetribe/commit/5b844f8108c5458d89f0d7ba974f42d7917b5f80 - https://github.com/sharetribe/sharetribe/releases/tag/v10.2.1
CVE ID: CVE-2021-41281 State: PUBLISHED Published: 2021-11-23T19:15:18 Last Updated: 2024-08-04T03:08:31.942Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: matrix-org Products: synapse Problem Types: CWE-22 Description: Synapse is a package for Matrix homeservers written in Python 3/Twisted. Prior to version 1.47.1, Synapse instances with the media repository enabled can be tricked into downloading a file from a remote server into an arbitrary directory. No authentication is required for the affected endpoint. The last 2 directories and file name of the path are chosen randomly by Synapse and cannot be controlled by an attacker, which limits the impact. Home
e name of the path are chosen randomly by Synapse and cannot be controlled by an attacker, which limits the impact. Homeservers with the media repository disabled are unaffected. Homeservers with a federation whitelist are also unaffected, since Synapse will check the remote hostname, including the trailing `../`s, against the whitelist. Server administrators should upgrade to 1.47.1 or later. Server administrators using a reverse proxy could, at the expense of losing media functionality, may block the certain endpoints as a workaround. Alternatively, non-containerized deployments can be adapted to use the hardened systemd config. Additional Analyst Notes: - CVE Program Container: References
oyments can be adapted to use the hardened systemd config. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrix-org/synapse/security/advisories/GHSA-3hfw-x7gx-437c - https://github.com/matrix-org/synapse/commit/91f2bd090 - https://github.com/matrix-org/synapse/releases/tag/v1.47.1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N3WY56LCEZ4ZECLWV5KMAXF2PSMUB4F2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EU7QRE55U4IUEDLKT5IYPWL3UXMELFAS/
CVE ID: CVE-2021-41282 State: PUBLISHED Published: 2022-03-01T22:45:03 Last Updated: 2024-08-04T03:08:31.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: diag_routes.php in pfSense 2.5.2 allows sed data injection. Authenticated users are intended to be able to view data about the routes set in the firewall. The data is retrieved by executing the netstat utility, and then its output is parsed via the sed utility. Although the common protection mechanisms against command injection (i.e., the usage of the escapeshellarg function for the arguments) are used, it is still possible to inject sed-specific code and write an arbitrary file in an arbitrary location. Additional Analyst No
s still possible to inject sed-specific code and write an arbitrary file in an arbitrary location. Additional Analyst Notes: - CVE Program Container: References: - https://www.shielder.it/advisories/ - https://www.shielder.it/advisories/pfsense-remote-command-execution/ - https://docs.netgate.com/pfsense/en/latest/releases/22-01_2-6-0.html - http://packetstormsecurity.com/files/166208/pfSense-2.5.2-Shell-Upload.html
CVE ID: CVE-2021-41285 State: PUBLISHED Published: 2021-10-04T05:50:39 Last Updated: 2024-08-04T03:08:31.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ballistix MOD Utility through 2.0.2.5 is vulnerable to privilege escalation in the MODAPI.sys driver component. The vulnerability is triggered by sending a specific IOCTL request that allows low-privileged users to directly interact with physical memory via the MmMapIoSpace function call (mapping physical memory into a virtual address space). Attackers could exploit this issue to achieve local privilege escalation to NT AUTHORITY\SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VoidS
lation to NT AUTHORITY\SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VoidSec/Exploit-Development/blob/master/windows/x64/kernel/crucial_Ballistix_MOD_Utility_v.2.0.2.5/crucial_Ballistix_MOD_Utility_v.2.0.2.5_memory_dump_PoC.cpp - https://voidsec.com/crucial-mod-utility-lpe-cve-2021-41285/
CVE ID: CVE-2021-41286 State: PUBLISHED Published: 2021-10-05T15:30:41 Last Updated: 2024-08-04T03:08:32.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Omikron MultiCash Desktop 4.00.008.SP5 relies on a client-side authentication mechanism. When a user logs into the application, the validity of the password is checked locally. All communication to the database backend is made via the same technical account. Consequently, an attacker can attach a debugger to the process or create a patch that manipulates the behavior of the login function. When the function always returns the success value (corresponding to a correct password), an attacker can login with any desired account,
always returns the success value (corresponding to a correct password), an attacker can login with any desired account, such as the administrative account of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-047.txt
CVE ID: CVE-2021-41288 State: PUBLISHED Published: 2021-09-30T18:11:14 Last Updated: 2024-08-04T03:08:31.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/network-monitoring/help/read-me-complete.html#build_125467
CVE ID: CVE-2021-41289 State: PUBLISHED Published: 2021-11-15T09:30:17.433225Z Last Updated: 2024-09-17T00:36:55.811Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: ASUS Products: P453UJ BIOS Problem Types: CWE-119 Description: ASUS P453UJ contains the Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. With a general user’s permission, local attackers can modify the BIOS by replacing or filling in the content of the designated Memory DataBuffer, which causing a failure of integrity verification and further resulting in a failure to boot. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.o
er resulting in a failure to boot. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-5284-35790-1.html - https://www.asus.com/tw/supportonly/P453UJ/HelpDesk_BIOS/
CVE ID: CVE-2021-41290 State: PUBLISHED Published: 2021-09-30T10:40:49.516786Z Last Updated: 2024-09-16T22:25:25.496Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ECOA Products: ECS Router Controller ECS (FLASH), RiskBuster Terminator E6L45, RiskBuster System RB 3.0.0, RiskBuster System TRANE 1.0, Graphic Control Software, SmartHome II E9246, RiskTerminator Problem Types: CWE-434 Description: ECOA BAS controller suffers from an arbitrary file write and path traversal vulnerability. Using the POST parameters, unauthenticated attackers can remotely set arbitrary values for location and content type and gain the possibility to execute arbitrary code on the
an remotely set arbitrary values for location and content type and gain the possibility to execute arbitrary code on the affected device. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-5126-ca315-1.html
CVE ID: CVE-2021-41291 State: PUBLISHED Published: 2021-09-30T10:40:51.070385Z Last Updated: 2024-09-16T23:36:07.656Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ECOA Products: ECS Router Controller ECS (FLASH), RiskBuster Terminator E6L45, RiskBuster System RB 3.0.0, RiskBuster System TRANE 1.0, Graphic Control Software, SmartHome II E9246, RiskTerminator Problem Types: CWE-22 Description: ECOA BAS controller suffers from a path traversal content disclosure vulnerability. Using the GET parameter in File Manager, unauthenticated attackers can remotely disclose directory content on the affected device. Additional Analyst Notes: - CVE Program Container: Refe
can remotely disclose directory content on the affected device. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-5127-3cbd3-1.html
CVE ID: CVE-2021-41292 State: PUBLISHED Published: 2021-09-30T10:40:52.625489Z Last Updated: 2024-09-17T03:32:30.239Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ECOA Products: ECS Router Controller ECS (FLASH), RiskBuster Terminator E6L45, RiskBuster System RB 3.0.0, RiskBuster System TRANE 1.0, Graphic Control Software, SmartHome II E9246, RiskTerminator Problem Types: CWE-288 Description: ECOA BAS controller suffers from an authentication bypass vulnerability. An unauthenticated attacker through cookie poisoning can remotely bypass authentication and disclose sensitive information and circumvent physical access controls in smart homes and buildings
authentication and disclose sensitive information and circumvent physical access controls in smart homes and buildings and manipulate HVAC. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-5128-b075a-1.html
CVE ID: CVE-2021-41293 State: PUBLISHED Published: 2021-09-30T10:40:54.205787Z Last Updated: 2024-09-16T19:41:34.779Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ECOA Products: ECS Router Controller ECS (FLASH), RiskBuster Terminator E6L45, RiskBuster System RB 3.0.0, RiskBuster System TRANE 1.0, Graphic Control Software, SmartHome II E9246, RiskTerminator Problem Types: CWE-22 Description: ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files disclosure. Using the specific POST parameter, unauthenticated attackers can remotely disclose arbitrary files on the affected device and disclose sensitive and system information.
d attackers can remotely disclose arbitrary files on the affected device and disclose sensitive and system information. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-5129-7e623-1.html
CVE ID: CVE-2021-41294 State: PUBLISHED Published: 2021-09-30T10:40:55.828791Z Last Updated: 2024-09-17T03:53:41.840Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: ECOA Products: ECS Router Controller ECS (FLASH), RiskBuster Terminator E6L45, RiskBuster System RB 3.0.0, RiskBuster System TRANE 1.0, Graphic Control Software, SmartHome II E9246, RiskTerminator Problem Types: CWE-22 Description: ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files deletion. Using the specific GET parameter, unauthenticated attackers can remotely delete arbitrary files on the affected device and cause denial of service scenario. Additional
ed attackers can remotely delete arbitrary files on the affected device and cause denial of service scenario. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-5130-7de92-1.html
CVE ID: CVE-2021-41295 State: PUBLISHED Published: 2021-09-30T10:40:57.384362Z Last Updated: 2024-09-17T00:52:20.343Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: ECOA Products: ECS Router Controller ECS (FLASH), RiskBuster Terminator E6L45, RiskBuster System RB 3.0.0, RiskBuster System TRANE 1.0, Graphic Control Software, SmartHome II E9246, RiskTerminator Problem Types: CWE-352 Description: ECOA BAS controller has a Cross-Site Request Forgery vulnerability, thus authenticated attacker can remotely place a forged request at a malicious web page and execute CRUD commands (GET, POST, PUT, DELETE) to perform arbitrary operations in the system. Additional Anal
b page and execute CRUD commands (GET, POST, PUT, DELETE) to perform arbitrary operations in the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-5131-c653b-1.html
CVE ID: CVE-2021-41296 State: PUBLISHED Published: 2021-09-30T10:40:58.921644Z Last Updated: 2024-09-17T03:17:33.292Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ECOA Products: ECS Router Controller ECS (FLASH), RiskBuster Terminator E6L45, RiskBuster System RB 3.0.0, RiskBuster System TRANE 1.0, Graphic Control Software, SmartHome II E9246, RiskTerminator Problem Types: CWE-521 Description: ECOA BAS controller uses weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control of the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-5
ol of the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-5132-65705-1.html