Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-21522 State: PUBLISHED Published: 2024-07-10T05:00:03.927Z Last Updated: 2024-08-01T22:20:40.935Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P) Vendors: n/a Products: audify Problem Types: CWE-129 Description: All versions of the package audify are vulnerable to Improper Validation of Array Index when frameSize is provided to the new OpusDecoder().decode or new OpusDecoder().decodeFloat functions it is not checked for negative values. This can lead to a process crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.snyk.io/vuln/SNYK-JS-AUDIFY-6370700 - https://github.com/almoghamdani/audi
ram Container: References: - https://security.snyk.io/vuln/SNYK-JS-AUDIFY-6370700 - https://github.com/almoghamdani/audify/blob/94b2fe79dc528fda2c7d59c7a0fd0e9de07dc3dc/src/opus_decoder.cpp%23L53 - https://github.com/almoghamdani/audify/blob/94b2fe79dc528fda2c7d59c7a0fd0e9de07dc3dc/src/opus_decoder.cpp%23L79 - https://gist.github.com/dellalibera/6bb866ae5d1cc2adaabe27bbd6d2d21e
CVE ID: CVE-2024-21523 State: PUBLISHED Published: 2024-07-10T05:00:01.393Z Last Updated: 2024-08-01T22:27:34.807Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P) Vendors: n/a Products: images Problem Types: CWE-400 Description: All versions of the package images are vulnerable to Denial of Service (DoS) due to providing unexpected input types to several different functions. This makes it possible to reach an assert macro, leading to a process crash. **Note:** By providing some specific integer values (like 0) to the size function, it is possible to obtain a Segmentation fault error, leading to the process crash. Additional Analyst Notes: - CISA ADP Vulnrichment: -
to obtain a Segmentation fault error, leading to the process crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.snyk.io/vuln/SNYK-JS-IMAGES-6421826 - https://github.com/zhangyuanwei/node-images/blob/691d49f4e620b4eec9f1c47b1735841d9d8b55f6/src/Image.cc - https://gist.github.com/dellalibera/8b4ea6b4db84cba212e6e6e39a6933d1
CVE ID: CVE-2024-21524 State: PUBLISHED Published: 2024-07-10T05:00:05.257Z Last Updated: 2024-08-01T22:27:34.821Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:P) Vendors: n/a Products: node-stringbuilder Problem Types: CWE-125 Description: All versions of the package node-stringbuilder are vulnerable to Out-of-bounds Read due to incorrect memory length calculation, by calling ToBuffer, ToString, or CharAt on a StringBuilder object with a non-empty string value input. It's possible to return previously allocated memory, for example, by providing negative indexes, leading to an Information Disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program
egative indexes, leading to an Information Disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.snyk.io/vuln/SNYK-JS-NODESTRINGBUILDER-6421617 - https://github.com/magiclen/node-stringbuilder/blob/5c2797d3d6bf8cb6d10fe1e077609cef9a5a7de0/src/node-stringbuilder.c%23L1281 - https://gist.github.com/dellalibera/0bb022811224f81d998fa61c3175ee67
CVE ID: CVE-2024-21525 State: PUBLISHED Published: 2024-07-10T05:00:03.124Z Last Updated: 2024-08-01T22:27:34.814Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P) Vendors: n/a Products: node-twain Problem Types: CWE-703 Description: All versions of the package node-twain are vulnerable to Improper Check or Handling of Exceptional Conditions due to the length of the source data not being checked. Creating a new twain.TwainSDK with a productName or productFamily, manufacturer, version.info property of length >= 34 chars leads to a buffer overflow vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.
lnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.snyk.io/vuln/SNYK-JS-NODETWAIN-6421153 - https://gist.github.com/dellalibera/55b87634a6c360e5be22a715f0566c99
CVE ID: CVE-2024-21526 State: PUBLISHED Published: 2024-07-10T05:00:04.671Z Last Updated: 2024-08-01T22:27:34.836Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P) Vendors: n/a Products: speaker Problem Types: CWE-400 Description: All versions of the package speaker are vulnerable to Denial of Service (DoS) when providing unexpected input types to the channels property of the Speaker object makes it possible to reach an assert macro. Exploiting this vulnerability can lead to a process crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.snyk.io/vuln/SNYK-JS-SPEAKER-6370676 - https://github.com/TooTallNate/
Program Container: References: - https://security.snyk.io/vuln/SNYK-JS-SPEAKER-6370676 - https://github.com/TooTallNate/node-speaker/blob/316afff5a393fce438cf7296011fcfc6e12aa9dc/src/binding.c%23L48
CVE ID: CVE-2024-21527 State: PUBLISHED Published: 2024-07-19T05:00:04.457Z Last Updated: 2024-09-05T13:26:11.327Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:P) Vendors: n/a Products: github.com/gotenberg/gotenberg/v8/pkg/gotenberg, github.com/gotenberg/gotenberg/v8/pkg/modules/chromium, github.com/gotenberg/gotenberg/v8/pkg/modules/webhook Problem Types: CWE-918 Description: Versions of the package github.com/gotenberg/gotenberg/v8/pkg/gotenberg before 8.1.0; versions of the package github.com/gotenberg/gotenberg/v8/pkg/modules/chromium before 8.1.0; versions of the package github.com/gotenberg/gotenberg/v8/pkg/modules/webhook before 8.1.0 are vulnerable to Serv
8.1.0; versions of the package github.com/gotenberg/gotenberg/v8/pkg/modules/webhook before 8.1.0 are vulnerable to Server-side Request Forgery (SSRF) via the /convert/html endpoint when a request is made to a file via localhost, such as <iframe src="\\localhost/etc/passwd">. By exploiting this vulnerability, an attacker can achieve local file inclusion, allowing of sensitive files read on the host system. Workaround An alternative is using either or both --chromium-deny-list and --chromium-allow-list flags. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGOTENBERGGOTENBERGV8PKGGOTENBERG-7537081 - ht
ontainer: References: - https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGOTENBERGGOTENBERGV8PKGGOTENBERG-7537081 - https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGOTENBERGGOTENBERGV8PKGMODULESCHROMIUM-7537082 - https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGOTENBERGGOTENBERGV8PKGMODULESWEBHOOK-7537083 - https://github.com/gotenberg/gotenberg/releases/tag/v8.1.0 - https://github.com/gotenberg/gotenberg/commit/ad152e62e5124b673099a9103eb6e7f933771794 - https://gist.github.com/filipochnik/bc88a3d1cc17c07cec391ee98e1e6356
CVE ID: CVE-2024-21528 State: PUBLISHED Published: 2024-09-10T05:00:01.556Z Last Updated: 2024-11-12T19:59:36.285Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P) Vendors: n/a Products: node-gettext Problem Types: CWE-1321 Description: All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations() function in gettext.js due to improper user input sanitization. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-NODEGETTEXT-6100943 - https://github.com/alexanderwallin/node-gettext/blob/65d9670f691c2eeca40dce129c95bcf8b613d344/lib/gettext.js%23L113
CVE ID: CVE-2024-21529 State: PUBLISHED Published: 2024-09-11T05:00:01.507Z Last Updated: 2024-09-11T17:51:59.141Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L/E:P) Vendors: n/a Products: dset Problem Types: CWE-1321 Description: Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property __proto__, which is recursively assigned to all the objects in the program. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-DSET-7116691 - h
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-DSET-7116691 - https://github.com/lukeed/dset/commit/16d6154e085bef01e99f01330e5a421a7f098afa
CVE ID: CVE-2024-21530 State: PUBLISHED Published: 2024-10-02T05:00:02.359Z Last Updated: 2024-10-02T13:42:12.774Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N/E:P) Vendors: n/a Products: cocoon Problem Types: CWE-323 Description: Versions of the package cocoon before 0.4.0 are vulnerable to Reusing a Nonce, Key Pair in Encryption when the encrypt, wrap, and dump functions are sequentially called. An attacker can generate the same ciphertext by creating a new encrypted message with the same cocoon object. **Note:** The issue does NOT affect objects created with Cocoon::new which utilizes ThreadRng. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
s created with Cocoon::new which utilizes ThreadRng. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-RUST-COCOON-6028364 - https://github.com/fadeevab/cocoon/issues/22 - https://github.com/fadeevab/cocoon/commit/1b6392173ce35db4736a94b62b2d2973f9a71441 - https://rustsec.org/advisories/RUSTSEC-2023-0068.html - https://github.com/advisories/GHSA-6878-6wc2-pf5h
CVE ID: CVE-2024-21531 State: PUBLISHED Published: 2024-10-01T05:00:05.367Z Last Updated: 2024-11-07T15:26:05.308Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P) Vendors: n/a Products: git-shallow-clone Problem Types: CWE-78 Description: All versions of the package git-shallow-clone are vulnerable to Command injection due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-GITSHALLOWCLONE-3253853 - https://github.com/10uei011/git-shallow-clone/blob/master/index.js%23L27
CVE ID: CVE-2024-21532 State: PUBLISHED Published: 2024-10-08T05:00:03.891Z Last Updated: 2024-10-08T14:01:26.268Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P) Vendors: n/a Products: ggit Problem Types: CWE-78 Description: All versions of the package ggit are vulnerable to Command Injection via the fetchTags(branch) API, which allows user input to specify the branch to be fetched and then concatenates this string along with a git command which is then passed to the unsafe exec() Node.js child process API. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-GGIT-5731320 - https://gist.github.com/lirantal/d8f87b36
lnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-GGIT-5731320 - https://gist.github.com/lirantal/d8f87b366d2078e6118ab7bf2b005f02
CVE ID: CVE-2024-21533 State: PUBLISHED Published: 2024-10-08T05:00:05.285Z Last Updated: 2024-10-08T15:35:10.510Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P) Vendors: n/a Products: ggit Problem Types: CWE-88 Description: All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone() API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does not sanitize for user input or validate a given URL scheme, nor does it properly pass command-line flags to the git binary using the double-dash POSIX characters (--) to communicate the end of options. Additional Analyst Notes: - CISA ADP Vulnri
ing the double-dash POSIX characters (--) to communicate the end of options. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-GGIT-5731319 - https://gist.github.com/lirantal/80c6d59ac1b682a32bc9d2ff92044bb9
CVE ID: CVE-2024-21534 State: PUBLISHED Published: 2024-10-11T05:00:01.824Z Last Updated: 2024-11-18T10:37:45.634Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P) Vendors: n/a Products: jsonpath-plus, org.webjars.npm:jsonpath-plus Problem Types: CWE-94 Description: All versions of the package jsonpath-plus are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker can execute aribitrary code on the system by exploiting the unsafe default usage of vm in Node. **Note:** There were several attempts to fix it in versions [10.0.0-10.1.0](https://github.com/JSONPath-Plus/JSONPath/compare/v9.0.0...v10.1.0) but it could still be explo
versions [10.0.0-10.1.0](https://github.com/JSONPath-Plus/JSONPath/compare/v9.0.0...v10.1.0) but it could still be exploited using [different payloads](https://github.com/JSONPath-Plus/JSONPath/issues/226). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-JSONPATHPLUS-7945884 - https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-8185019 - https://github.com/JSONPath-Plus/JSONPath/compare/v9.0.0...v10.1.0 - https://github.com/JSONPath-Plus/JSONPath/issues/226
CVE ID: CVE-2024-21535 State: PUBLISHED Published: 2024-10-15T05:00:03.815Z Last Updated: 2024-10-15T14:02:35.726Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P) Vendors: n/a Products: markdown-to-jsx Problem Types: CWE-79 Description: Versions of the package markdown-to-jsx before 7.4.0 are vulnerable to Cross-site Scripting (XSS) via the src property due to improper input sanitization. An attacker can execute arbitrary code by injecting a malicious iframe element in the markdown. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-MARKDOWNTOJSX-6258886 - https://github.com/quantizor/markdown-to-jsx/commit/8eb7
- https://security.snyk.io/vuln/SNYK-JS-MARKDOWNTOJSX-6258886 - https://github.com/quantizor/markdown-to-jsx/commit/8eb74da825c0d8d2e9508d73c672bcae36ba555a
CVE ID: CVE-2024-21536 State: PUBLISHED Published: 2024-10-19T05:00:04.056Z Last Updated: 2024-10-21T16:31:29.125Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P) Vendors: n/a Products: http-proxy-middleware Problem Types: CWE-400 Description: Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch. An attacker could kill the Node.js process and crash the server by making requests to certain paths. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-HTTPPROXYMIDDLEWARE-8229906 - h
lyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-HTTPPROXYMIDDLEWARE-8229906 - https://gist.github.com/mhassan1/28be67266d82a53708ed59ce5dc3c94a - https://github.com/chimurai/http-proxy-middleware/commit/788b21e4aff38332d6319557d4a5b1b13b1f9a22 - https://github.com/chimurai/http-proxy-middleware/commit/0b4274e8cc9e9a2c5a06f35fbf456ccfcebc55a5
CVE ID: CVE-2024-21537 State: PUBLISHED Published: 2024-10-31T05:00:03.948Z Last Updated: 2024-10-31T13:39:14.418Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P) Vendors: n/a Products: lilconfig Problem Types: CWE-94 Description: Versions of the package lilconfig from 3.1.0 and before 3.1.1 are vulnerable to Arbitrary Code Execution due to the insecure usage of eval in the dynamicImport function. An attacker can exploit this vulnerability by passing a malicious input through the defaultLoaders function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-LILCONFIG-6263789 - https://github.com/antonk52/lilconfig/pu
chment: References: - https://security.snyk.io/vuln/SNYK-JS-LILCONFIG-6263789 - https://github.com/antonk52/lilconfig/pull/48 - https://github.com/antonk52/lilconfig/releases/tag/v3.1.1 - https://github.com/antonk52/lilconfig/commit/2c68a1ab8764fc74acc46771e1ad39ab07a9b0a7
CVE ID: CVE-2024-21538 State: PUBLISHED Published: 2024-11-08T05:00:04.695Z Last Updated: 2025-05-20T14:38:35.942Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P) Vendors: n/a Products: cross-spawn, org.webjars.npm:cross-spawn Problem Types: CWE-1333 Description: Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very large and well crafted string. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230 - https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-8366349 - https://github.com/moxystudio/node-cross-spawn/pull/160 - https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f - https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff
CVE ID: CVE-2024-21539 State: PUBLISHED Published: 2024-11-19T05:00:02.929Z Last Updated: 2024-11-19T15:18:10.708Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P) Vendors: n/a Products: @eslint/plugin-kit Problem Types: CWE-1333 Description: Versions of the package @eslint/plugin-kit before 0.2.3 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash the program by exploiting this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-ESLINTPLUGINKIT-8340627 - https://github.com/eslint/rewrite/commit/071be842f0b
: - https://security.snyk.io/vuln/SNYK-JS-ESLINTPLUGINKIT-8340627 - https://github.com/eslint/rewrite/commit/071be842f0bd58de4863cdf2ab86d60f49912abf
CVE ID: CVE-2024-21540 State: REJECTED Published: 2024-11-13T05:00:06.224Z Last Updated: 2024-11-17T08:52:02.062Z Description: No description available.
CVE ID: CVE-2024-21541 State: PUBLISHED Published: 2024-11-13T05:00:12.270Z Last Updated: 2025-01-16T11:24:30.637Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P) Vendors: n/a Products: dom-iterator, org.webjars.npm:dom-iterator Problem Types: CWE-94 Description: Versions of the package dom-iterator before 1.0.1 are vulnerable to Arbitrary Code Execution due to use of the Function constructor without complete input sanitization. Function generates a new function body and thus care must be given to ensure that the inputs to Function are not attacker-controlled. The risks involved are similar to that of allowing attacker-controlled input to reach eval. Additional Ana
r-controlled. The risks involved are similar to that of allowing attacker-controlled input to reach eval. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-DOMITERATOR-6157199 - https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-8383166 - https://github.com/matthewmueller/dom-iterator/commit/9e0e0fad5a251de5b42feb326c4204eb04080805
CVE ID: CVE-2024-21542 State: PUBLISHED Published: 2024-12-10T05:00:01.546Z Last Updated: 2025-07-24T13:07:39.995Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N/E:P) Vendors: n/a Products: luigi Problem Types: CWE-29 Description: Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the _extract_packages_archive function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-PYTHON-LUIGI-7830489 - https://github.com/spotify/luigi/issues/3301 - https://github.com/spotify/luigi/commit/b5d1b965ead7d9f777a3216369b5
89 - https://github.com/spotify/luigi/issues/3301 - https://github.com/spotify/luigi/commit/b5d1b965ead7d9f777a3216369b5baf23ec08999 - https://github.com/spotify/luigi/releases/tag/v3.6.0 - https://github.com/L3ster1337/Poc-CVE-2024-21542
CVE ID: CVE-2024-21543 State: PUBLISHED Published: 2024-12-13T05:00:16.747Z Last Updated: 2025-02-20T22:02:38.155Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N/E:P) Vendors: n/a Products: djoser Problem Types: CWE-287 Description: Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate() function fails. This is because the system falls back to querying the database directly, granting access to users with valid credentials, and eventually bypassing custom authentication checks such as two-factor authentication, LDAP validations, or requirements from configured AUTHENTICATION_BACKENDS. Additional Analyst Notes: - CISA A
ntication, LDAP validations, or requirements from configured AUTHENTICATION_BACKENDS. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.snyk.io/vuln/SNYK-PYTHON-DJOSER-8366540 - https://github.com/sunscrapers/djoser/releases/tag/2.3.0 - https://github.com/sunscrapers/djoser/issues/795 - https://github.com/sunscrapers/djoser/pull/819 - https://github.com/sunscrapers/djoser/commit/d33c3993c0c735f23cbedc60fa59fce69354f19d
CVE ID: CVE-2024-21544 State: PUBLISHED Published: 2024-12-13T05:00:14.744Z Last Updated: 2025-10-01T10:28:03.507Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P) Vendors: n/a Products: spatie/browsershot Problem Types: CWE-20 Description: Versions of the package spatie/browsershot before 5.0.1 are vulnerable to Improper Input Validation due to improper URL validation in the setUrl method. An attacker can exploit this vulnerability by using leading whitespace (%20) before the file:// protocol, resulting in Local File Inclusion, which allows the attacker to read sensitive files on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://s
tacker to read sensitive files on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-PHP-SPATIEBROWSERSHOT-8496745 - https://github.com/spatie/browsershot/blob/1e212b596c104138550ed4ef1b9977d8df570c67/src/Browsershot.php%23L258-L269 - https://github.com/spatie/browsershot/commit/fae8396641b961f62bd756920b14f01a4391296e
CVE ID: CVE-2024-21545 State: PUBLISHED Published: 2024-09-24T07:25:12.184Z Last Updated: 2024-09-24T14:57:45.924Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: Proxmox Products: pve-manager, libpve-storage-perl, libpve-http-server-perl, pmg-api, libpve-common-perl (Promox VE 8), libpve-common-perl (Promox Mail Gateway 8) Problem Types: CWE-73 Description: Proxmox Virtual Environment is an open-source server management platform for enterprise virtualization. Insufficient safeguards against malicious API response values allow authenticated attackers with 'Sys.Audit' or 'VM.Monitor' privileges to download arbitrary host files via the API. When handling the res
ttackers with 'Sys.Audit' or 'VM.Monitor' privileges to download arbitrary host files via the API. When handling the result from a request handler before returning it to the user, the handle_api2_request function will check for the ‘download’ or ‘data’->’download’ objects inside the request handler call response object. If present, handle_api2_request will read a local file defined by this object and return it to the user. Two endpoints were identified which can control the object returned by a request handler sufficiently that the ’download’ object is defined and user controlled. This results in arbitrary file read. The privileges of this file read can result in full compromise of the syste