Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-21370 State: PUBLISHED Published: 2021-03-23T01:55:12 Last Updated: 2024-08-03T18:09:15.935Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: TYPO3 Products: TYPO3.CMS Problem Types: CWE-79 Description: TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 it has been discovered that content elements of type _menu_ are vulnerable to cross-site scripting when their referenced items get previewed in the page module. A valid backend user account is needed to exploit this vulnerability. This is fixed in versions 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1. Additional Analyst
ed to exploit this vulnerability. This is fixed in versions 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1. Additional Analyst Notes: - CVE Program Container: References: - https://packagist.org/packages/typo3/cms-backend - https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x7hc-x7fm-f7qh - https://typo3.org/security/advisory/typo3-core-sa-2021-008
CVE ID: CVE-2021-21371 State: PUBLISHED Published: 2021-03-10T21:50:14 Last Updated: 2024-08-03T18:09:15.792Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: tenable Products: integration-jira-cloud Problem Types: CWE-502 Description: Tenable for Jira Cloud is an open source project designed to pull Tenable.io vulnerability data, then generate Jira Tasks and sub-tasks based on the vulnerabilities' current state. It published in pypi as "tenable-jira-cloud". In tenable-jira-cloud before version 1.1.21, it is possible to run arbitrary commands through the yaml.load() method. This could allow an attacker with local access to the host to run arbitrary code by runn
through the yaml.load() method. This could allow an attacker with local access to the host to run arbitrary code by running the application with a specially crafted YAML configuration file. This is fixed in version 1.1.21 by using yaml.safe_load() instead of yaml.load(). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tenable/integration-jira-cloud/security/advisories/GHSA-8278-88vv-x98r - https://github.com/tenable/integration-jira-cloud/commit/f8c2095fd529e664e7fa25403a0a4a85bb3907d0 - https://pypi.org/project/tenable-jira-cloud/ - https://pyyaml.docsforge.com/master/documentation/#loading-yaml
CVE ID: CVE-2021-21372 State: PUBLISHED Published: 2021-03-26T21:20:15 Last Updated: 2024-08-03T18:09:15.920Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: nim-lang Products: security Problem Types: CWE-20, CWE-74 Description: Nimble is a package manager for the Nim programming language. In Nim release version before versions 1.2.10 and 1.4.4, Nimble doCmd is used in different places and can be leveraged to execute arbitrary commands. An attacker can craft a malicious entry in the packages.json package list to trigger code execution. Additional Analyst Notes: - CVE Program Container: References: - https://consensys.net/diligence/vulnerabilities/nim-insecure-
onal Analyst Notes: - CVE Program Container: References: - https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaults-remote-code-execution/ - https://github.com/nim-lang/security/security/advisories/GHSA-rg9f-w24h-962p - https://github.com/nim-lang/nimble/blob/master/changelog.markdown#0130 - https://github.com/nim-lang/nimble/commit/7bd63d504a4157b8ed61a51af47fb086ee818c37
CVE ID: CVE-2021-21373 State: PUBLISHED Published: 2021-03-26T21:25:19 Last Updated: 2024-08-03T18:09:15.923Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L) Vendors: nim-lang Products: security Problem Types: CWE-348 Description: Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS by default. In case of error it falls back to a non-TLS URL http://irclogs.nim-lang.org/packages.json. An attacker able to perform MitM can deliver a modified package list containing malicious software packages. If the packages are installed and used the attack es
ver a modified package list containing malicious software packages. If the packages are installed and used the attack escalates to untrusted code execution. Additional Analyst Notes: - CVE Program Container: References: - https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaults-remote-code-execution/ - https://github.com/nim-lang/nimble/blob/master/changelog.markdown#0130 - https://github.com/nim-lang/security/security/advisories/GHSA-8w52-r35x-rgp8
CVE ID: CVE-2021-21374 State: PUBLISHED Published: 2021-03-26T21:25:14 Last Updated: 2024-08-03T18:09:15.923Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L) Vendors: nim-lang Products: security Problem Types: CWE-348, CWE-599, CWE-349 Description: Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS without full verification of the SSL/TLS certificate due to the default setting of httpClient. An attacker able to perform MitM can deliver a modified package list containing malicious software packages. If the packages are installed and used the
M can deliver a modified package list containing malicious software packages. If the packages are installed and used the attack escalates to untrusted code execution. Additional Analyst Notes: - CVE Program Container: References: - https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaults-remote-code-execution/ - https://github.com/nim-lang/nimble/blob/master/changelog.markdown#0130 - https://github.com/nim-lang/security/security/advisories/GHSA-c2wm-v66h-xhxx - https://github.com/nim-lang/Nim/pull/16940
CVE ID: CVE-2021-21375 State: PUBLISHED Published: 2021-03-10T22:30:25 Last Updated: 2024-08-03T18:09:15.916Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: pjsip Products: pjproject Problem Types: CWE-400 Description: PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP version 2.10 and earlier, after an initial INVITE has been sent, when two 183 responses are received, with the first one causing negotiation failure, a crash will occur. This results in a denial of service. Additional Analyst Notes: - CVE Program Container: References
, a crash will occur. This results in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjsip/pjproject/security/advisories/GHSA-hvq6-f89p-frvp - https://github.com/pjsip/pjproject/commit/97b3d7addbaa720b7ddb0af9bf6f3e443e664365 - https://lists.debian.org/debian-lts-announce/2021/04/msg00023.html - https://lists.debian.org/debian-lts-announce/2021/05/msg00020.html - https://security.gentoo.org/glsa/202107-42
CVE ID: CVE-2021-21376 State: PUBLISHED Published: 2021-03-23T15:25:22 Last Updated: 2024-08-03T18:09:15.994Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: ome Products: omero-web Problem Types: CWE-200 Description: OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads various information about the current user such as their id, name and the groups they are in, and these are available on the main webclient pages. This represents an information exposure vulnerability. Some additional information being loaded is not used by the webclient and is being removed in this release. This is fixed in vers
tional information being loaded is not used by the webclient and is being removed in this release. This is fixed in version 5.9.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ome/omero-web/security/advisories/GHSA-gfp2-w5jm-955q - https://pypi.org/project/omero-web/ - https://github.com/ome/omero-web/blob/master/CHANGELOG.md#590-march-2021 - https://www.openmicroscopy.org/security/advisories/2021-SV1/ - https://github.com/ome/omero-web/commit/952f8e5d28532fbb14fb665982211329d137908c
CVE ID: CVE-2021-21377 State: PUBLISHED Published: 2021-03-23T15:25:28 Last Updated: 2024-08-03T18:09:15.795Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: ome Products: omero-web Problem Types: CWE-601 Description: OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 supports redirection to a given URL after performing login or switching the group context. These URLs are not validated, allowing redirection to untrusted sites. OMERO.web 5.9.0 adds URL validation before redirecting. External URLs are not considered valid, unless specified in the omero.web.redirect_allowed_hosts setting. Additional An
External URLs are not considered valid, unless specified in the omero.web.redirect_allowed_hosts setting. Additional Analyst Notes: - CVE Program Container: References: - https://pypi.org/project/omero-web/ - https://github.com/ome/omero-web/blob/master/CHANGELOG.md#590-march-2021 - https://github.com/ome/omero-web/commit/952f8e5d28532fbb14fb665982211329d137908c - https://github.com/ome/omero-web/security/advisories/GHSA-g4rf-pc26-6hmr - https://www.openmicroscopy.org/security/advisories/2021-SV2/
CVE ID: CVE-2021-21378 State: PUBLISHED Published: 2021-03-11T02:40:14 Last Updated: 2024-08-03T18:09:16.066Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: envoyproxy Products: envoy Problem Types: CWE-287, CWE-303 Description: Envoy is a cloud-native high-performance edge/middle/service proxy. In Envoy version 1.17.0 an attacker can bypass authentication by presenting a JWT token with an issuer that is not in the provider list when Envoy's JWT Authentication filter is configured with the `allow_missing` requirement under `requires_any` due to a mistake in implementation. Envoy's JWT Authentication filter can be configured with the `allow_missing` requiremen
to a mistake in implementation. Envoy's JWT Authentication filter can be configured with the `allow_missing` requirement that will be satisfied if JWT is missing (JwtMissed error) and fail if JWT is presented or invalid. Due to a mistake in implementation, a JwtUnknownIssuer error was mistakenly converted to JwtMissed when `requires_any` was configured. So if `allow_missing` was configured under `requires_any`, an attacker can bypass authentication by presenting a JWT token with an issuer that is not in the provider list. Integrity may be impacted depending on configuration if the JWT token is used to protect against writes or modifications. This regression was introduced on 2020/11/12 in P
n if the JWT token is used to protect against writes or modifications. This regression was introduced on 2020/11/12 in PR 13839 which fixed handling `allow_missing` under RequiresAny in a JwtRequirement (see issue 13458). The AnyVerifier aggregates the children verifiers' results into a final status where JwtMissing is the default error. However, a JwtUnknownIssuer was mistakenly treated the same as a JwtMissing error and the resulting final aggregation was the default JwtMissing. As a result, `allow_missing` would allow a JWT token with an unknown issuer status. This is fixed in version 1.17.1 by PR 15194. The fix works by preferring JwtUnknownIssuer over a JwtMissing error, fixing the acci
xed in version 1.17.1 by PR 15194. The fix works by preferring JwtUnknownIssuer over a JwtMissing error, fixing the accidental conversion and bypass with `allow_missing`. A user could detect whether a bypass occurred if they have Envoy logs enabled with debug verbosity. Users can enable component level debug logs for JWT. The JWT filter logs will indicate that there is a request with a JWT token and a failure that the JWT token is missing. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/envoyproxy/envoy/security/advisories/GHSA-4996-m8hf-hj27 - https://github.com/envoyproxy/envoy/pull/15194 - https://github.com/envoyproxy/envoy/commit/ea39e3cba652bcc4b11bb
hj27 - https://github.com/envoyproxy/envoy/pull/15194 - https://github.com/envoyproxy/envoy/commit/ea39e3cba652bcc4b11bb0d5c62b017e584d2e5a
CVE ID: CVE-2021-21379 State: PUBLISHED Published: 2021-03-12T17:30:15 Last Updated: 2024-08-03T18:09:15.922Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-281 Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions of XWiki Platform, the `{{wikimacrocontent}}` executes the content with the rights of the wiki macro author instead of the caller of that wiki macro. This makes possible to inject scripts through it and they will be executed with the rights of the wiki macro (very often a user which has Programming rights). Fortunat
t and they will be executed with the rights of the wiki macro (very often a user which has Programming rights). Fortunately, no such macro exists by default in XWiki Standard but one could have been created or installed with an extension. This vulnerability has been patched in versions XWiki 12.6.3, 11.10.11 and 12.8-rc-1. There is no easy workaround other than disabling the affected macros. Inserting content in a safe way or knowing what is the user who called the wiki macro is not easy. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-v662-xpcc-9xf6 - https://jira.xwiki.org/browse/XWIKI-17759
CVE ID: CVE-2021-21380 State: PUBLISHED Published: 2021-03-23T22:45:15 Last Updated: 2024-08-03T18:09:15.981Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-89 Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions of XWiki Platform (and only those with the Ratings API installed), the Rating Script Service expose an API to perform SQL requests without escaping the from and where search arguments. This might lead to an SQL script injection quite easily for any user having Script rights on XWiki. The problem has been patched in X
ad to an SQL script injection quite easily for any user having Script rights on XWiki. The problem has been patched in XWiki 12.9RC1. The only workaround besides upgrading XWiki would be to uninstall the Ratings API in XWiki from the Extension Manager. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-79rg-7mv3-jrr5 - https://jira.xwiki.org/browse/XWIKI-17662
CVE ID: CVE-2021-21381 State: PUBLISHED Published: 2021-03-11T00:00:00 Last Updated: 2024-08-03T18:09:15.945Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N) Vendors: flatpak Products: flatpak Problem Types: CWE-74 Description: Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In Flatpack since version 0.9.4 and before version 1.10.2 has a vulnerability in the "file forwarding" feature which can be used by an attacker to gain access to files that would not ordinarily be allowed by the app's permissions. By putting the special tokens `@@` and/or `@@u` in the Exec field of a Flatpak app's .desktop file, a malicious app p
s. By putting the special tokens `@@` and/or `@@u` in the Exec field of a Flatpak app's .desktop file, a malicious app publisher can trick flatpak into behaving as though the user had chosen to open a target file with their Flatpak app, which automatically makes that file available to the Flatpak app. This is fixed in version 1.10.2. A minimal solution is the first commit "`Disallow @@ and @@U usage in desktop files`". The follow-up commits "`dir: Reserve the whole @@ prefix`" and "`dir: Refuse to export .desktop files with suspicious uses of @@ tokens`" are recommended, but not strictly required. As a workaround, avoid installing Flatpak apps from untrusted sources, or check the contents of
t not strictly required. As a workaround, avoid installing Flatpak apps from untrusted sources, or check the contents of the exported `.desktop` files in `exports/share/applications/*.desktop` (typically `~/.local/share/flatpak/exports/share/applications/*.desktop` and `/var/lib/flatpak/exports/share/applications/*.desktop`) to make sure that literal filenames do not follow `@@` or `@@u`. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatpak/flatpak/security/advisories/GHSA-xgh4-387p-hqpp - https://github.com/flatpak/flatpak/pull/4156 - https://github.com/flatpak/flatpak/commit/8279c5818425b6812523e3805bbe242fb6a5d961 - https://github.com/flatpak/flatpak
https://github.com/flatpak/flatpak/commit/8279c5818425b6812523e3805bbe242fb6a5d961 - https://github.com/flatpak/flatpak/commit/a7401e638bf0c03102039e216ab1081922f140ae - https://github.com/flatpak/flatpak/commit/eb7946bb6248923d8c90fe9b84425fef97ae580d - https://github.com/flatpak/flatpak/releases/tag/1.10.2 - https://www.debian.org/security/2021/dsa-4868 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXNVFOIB6ZP4DGOVKAM25T6OIEP3YLGV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MXXLXC2DPJ45HSMTI5MZYHMYEGQN6AA/ - https://security.gentoo.org/glsa/202312-12
CVE ID: CVE-2021-21382 State: PUBLISHED Published: 2021-06-11T20:50:14 Last Updated: 2024-08-03T18:09:16.047Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: wireapp Products: restund Problem Types: CWE-668 Description: Restund is an open source NAT traversal server. The restund TURN server can be instructed to open a relay to the loopback address range. This allows you to reach any other service running on localhost which you might consider private. In the configuration that we ship (https://github.com/wireapp/ansible-restund/blob/master/templates/restund.conf.j2#L40-L43) the `status` interface of restund is enabled and is listening on `127.0.0.1`.The `status
plates/restund.conf.j2#L40-L43) the `status` interface of restund is enabled and is listening on `127.0.0.1`.The `status` interface allows users to issue administrative commands to `restund` like listing open relays or draining connections. It would be possible for an attacker to contact the status interface and issue administrative commands by setting `XOR-PEER-ADDRESS` to `127.0.0.1:{{restund_udp_status_port}}` when opening a TURN channel. We now explicitly disallow relaying to loopback addresses, 'any' addresses, link local addresses, and the broadcast address. As a workaround disable the `status` module in your restund configuration. However there might still be other services running on
around disable the `status` module in your restund configuration. However there might still be other services running on `127.0.0.0/8` that you do not want to have exposed. The `turn` module can be disabled. Restund will still perform STUN and this might already be enough for initiating calls in your environments. TURN is only used as a last resort when other NAT traversal options do not work. One should also make sure that the TURN server is set up with firewall rules so that it cannot relay to other addresses that you don't want the TURN server to relay to. For example other services in the same VPC where the TURN server is running. Ideally TURN servers should be deployed in an isolated fa
her services in the same VPC where the TURN server is running. Ideally TURN servers should be deployed in an isolated fashion where they can only reach what they need to reach to perform their task of assisting NAT-traversal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wireapp/restund/security/advisories/GHSA-96j5-w9jq-pv2x - https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p - https://github.com/wireapp/restund/pull/7 - https://docs.wire.com/understand/restund.html - https://github.com/wireapp/ansible-restund/blob/master/templates/restund.conf.j2#L40-L43 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0732 - http
ob/master/templates/restund.conf.j2#L40-L43 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0732 - https://www.rtcsec.com/post/2021/01/details-about-cve-2020-26262-bypass-of-coturns-default-access-control-protection/#further-concerns-what-else
CVE ID: CVE-2021-21383 State: PUBLISHED Published: 2021-03-18T17:10:16 Last Updated: 2024-08-03T18:09:15.970Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N) Vendors: Requarks Products: wiki Problem Types: CWE-79 Description: Wiki.js an open-source wiki app built on Node.js. Wiki.js before version 2.5.191 is vulnerable to stored cross-site scripting through mustache expressions in code blocks. This vulnerability exists due to mustache expressions being parsed by Vue during content injection even though it is contained within a `<pre>` element. By creating a crafted wiki page, a malicious Wiki.js user may stage a stored cross-site scripting attack. This allows the attac
ting a crafted wiki page, a malicious Wiki.js user may stage a stored cross-site scripting attack. This allows the attacker to execute malicious JavaScript when the page is viewed by other users. For an example see referenced GitHub Security Advisory. Commit 5ffa189383dd716f12b56b8cae2ba0d075996cf1 fixes this vulnerability by adding the v-pre directive to all `<pre>` tags during the render. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Requarks/wiki/security/advisories/GHSA-6xx4-m8gx-826r - https://github.com/Requarks/wiki/commit/5ffa189383dd716f12b56b8cae2ba0d075996cf1 - https://github.com/Requarks/wiki/releases/tag/2.5.191
CVE ID: CVE-2021-21384 State: PUBLISHED Published: 2021-03-18T23:50:13 Last Updated: 2024-08-03T18:09:15.790Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N) Vendors: ericcornelissen Products: shescape Problem Types: CWE-88 Description: shescape is a simple shell escape package for JavaScript. In shescape before version 1.1.3, anyone using _Shescape_ to defend against shell injection may still be vulnerable against shell injection if the attacker manages to insert a into the payload. For an example see the referenced GitHub Security Advisory. The problem has been patched in version 1.1.3. No further changes are required. Additional Analyst Notes: - CVE Program Contai
oblem has been patched in version 1.1.3. No further changes are required. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ericcornelissen/shescape/security/advisories/GHSA-f2rp-38vg-j3gh - https://github.com/ericcornelissen/shescape/commit/07a069a66423809cbedd61d980c11ca44a29ea2b - https://github.com/ericcornelissen/shescape/releases/tag/v1.1.3 - https://www.npmjs.com/package/shescape
CVE ID: CVE-2021-21385 State: PUBLISHED Published: 2021-03-24T20:45:17 Last Updated: 2024-08-03T18:09:15.930Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: openMF Products: mifos-mobile Problem Types: CWE-295, CWE-297 Description: Mifos-Mobile Android Application for MifosX is an Android Application built on top of the MifosX Self-Service platform. Mifos-Mobile before commit e505f62 disables HTTPS hostname verification of its HTTP client. Additionally it accepted any self-signed certificate as valid. Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid for the host. Disabling it can allow for man-in-th