Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-51736 State: PUBLISHED Published: 2024-11-06T20:51:38.536Z Last Updated: 2024-11-21T23:23:26.713Z Severity: NONE (CVSS N/A CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N) Vendors: symfony Products: symfony Problem Types: CWE-77 Description: Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. On Windows, when an executable file named `cmd.exe` is located in the current working directory it will be called by the `Process` class when preparing command arguments, leading to possible hijacking. This issue has been addressed in release versions 5.4.46, 6.4.14, and 7.1.7. Users are advised to upgrade. There are no known workarounds fo
addressed in release versions 5.4.46, 6.4.14, and 7.1.7. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/symfony/symfony/security/advisories/GHSA-qq5c-677p-737q - https://github.com/symfony/symfony/security/advisories/GHSA-qq5c-677p-737q
CVE ID: CVE-2024-51737 State: PUBLISHED Published: 2025-01-08T15:27:15.780Z Last Updated: 2025-01-08T15:43:17.211Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: RediSearch Products: RediSearch Problem Types: CWE-122, CWE-190 Description: RediSearch is a Redis module that provides querying, secondary indexing, and full-text search for Redis. An authenticated redis user executing FT.SEARCH or FT.AGGREGATE with a specially crafted LIMIT command argument, or FT.SEARCH with a specially crafted KNN command argument, can trigger an integer overflow, leading to heap overflow and potential remote code execution. This vulnerability is fixed in 2.6.24, 2.8.21, and 2.10.1
leading to heap overflow and potential remote code execution. This vulnerability is fixed in 2.6.24, 2.8.21, and 2.10.10. Avoid setting value of -1 or large values for configuration parameters MAXSEARCHRESULTS and MAXAGGREGATERESULTS, to avoid exploiting large LIMIT arguments. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/RediSearch/RediSearch/security/advisories/GHSA-p2pg-67m3-4c76 - https://github.com/RediSearch/RediSearch/commit/13a2936d921dbe5a2e3c72653e0bd7b26af3a6cb
CVE ID: CVE-2024-51738 State: PUBLISHED Published: 2025-01-20T15:26:03.955Z Last Updated: 2025-01-21T14:59:35.704Z Vendors: LizardByte Products: Sunshine Problem Types: CWE-305, CWE-476, CWE-841 Description: Sunshine is a self-hosted game stream host for Moonlight. In 0.23.1 and earlier, Sunshine's pairing protocol implementation does not validate request order and is thereby vulnerable to a MITM attack, potentially allowing an unauthenticated attacker to pair a client by hijacking a legitimate pairing attempt. This bug may also be used by a remote attacker to crash Sunshine. This vulnerability is fixed in 2025.118.151840. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
e. This vulnerability is fixed in 2025.118.151840. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LizardByte/Sunshine/security/advisories/GHSA-3hrw-xv8h-9499 - https://github.com/LizardByte/Sunshine/commit/89f097ae65277d42b5d40163d09d92e412e6d7dd
CVE ID: CVE-2024-51739 State: PUBLISHED Published: 2024-11-05T18:11:37.244Z Last Updated: 2024-11-05T18:50:23.340Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Combodo Products: iTop Problem Types: CWE-200 Description: Combodo iTop is a simple, web based IT Service Management tool. Unauthenticated user can perform users enumeration, which can make it easier to bruteforce a valid account. As a fix the sentence displayed after resetting password no longer shows if the user exists or not. This fix is included in versions 2.7.11, 3.0.5, 3.1.2, and 3.2.0. Users are advised to upgrade. Users unable to upgrade may overload the dictionary entry `"UI:ResetPwd-Error-
and 3.2.0. Users are advised to upgrade. Users unable to upgrade may overload the dictionary entry `"UI:ResetPwd-Error-WrongLogin"` through an extension and replace it with a generic message. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Combodo/iTop/security/advisories/GHSA-2hmf-p27w-phf9
CVE ID: CVE-2024-51740 State: PUBLISHED Published: 2024-11-05T18:13:05.227Z Last Updated: 2024-11-05T19:02:20.310Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Combodo Products: iTop Problem Types: CWE-918 Description: Combodo iTop is a simple, web based IT Service Management tool. This vulnerability can be used to create HTTP requests on behalf of the server, from a low privileged user. The user portal form manager has been fixed to only instantiate classes derived from it. This issue has been addressed in versions 2.7.11, 3.0.5, 3.1.2, and 3.2.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Note
and 3.2.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Combodo/iTop/security/advisories/GHSA-w9g8-mxm5-ph62
CVE ID: CVE-2024-51741 State: PUBLISHED Published: 2025-01-06T21:20:19.772Z Last Updated: 2025-01-06T21:39:28.426Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: redis Products: redis Problem Types: CWE-20 Description: Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/redis/redis/security/advisories/GHSA-prpq-rh5h-46g9
CVE ID: CVE-2024-51743 State: PUBLISHED Published: 2024-11-18T20:04:10.444Z Last Updated: 2024-11-19T14:50:37.287Z Vendors: MarkUsProject Products: Markus Problem Types: CWE-434 Description: MarkUs is a web application for the submission and grading of student assignments. In versions prior to 2.4.8, an arbitrary file write vulnerability in the update/upload/create file methods in Controllers allows authenticated instructors to write arbitrary files to any location on the web server MarkUs is running on (depending on the permissions of the underlying filesystem). e.g. This can lead to a delayed remote code execution in case an attacker is able to write a Ruby file into the config/initializer
can lead to a delayed remote code execution in case an attacker is able to write a Ruby file into the config/initializers/ subfolder of the Ruby on Rails application. MarkUs v2.4.8 has addressed this issue. No known workarounds are available at the application level aside from upgrading. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MarkUsProject/Markus/security/advisories/GHSA-hwgg-qvjx-572x - https://github.com/MarkUsProject/Markus/pull/7026
CVE ID: CVE-2024-51744 State: PUBLISHED Published: 2024-11-04T21:47:12.170Z Last Updated: 2024-11-05T16:11:42.243Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: golang-jwt Products: jwt Problem Types: CWE-755 Description: golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in `ParseWithClaims` can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by `ParseWithClaims` return both error codes. If users only check for the `jwt.ErrTokenExpired ` using `error.Is`, they will ignore the embedded `jwt.ErrToke
r codes. If users only check for the `jwt.ErrTokenExpired ` using `error.Is`, they will ignore the embedded `jwt.ErrTokenSignatureInvalid` and thus potentially accept invalid tokens. A fix has been back-ported with the error handling logic from the `v5` branch to the `v4` branch. In this logic, the `ParseWithClaims` function will immediately return in "dangerous" situations (e.g., an invalid signature), limiting the combined errors only to situations where the signature is valid, but further validation failed (e.g., if the signature is valid, but is expired AND has the wrong audience). This fix is part of the 4.5.1 release. We are aware that this changes the behaviour of an established funct
g audience). This fix is part of the 4.5.1 release. We are aware that this changes the behaviour of an established function and is not 100 % backwards compatible, so updating to 4.5.1 might break your code. In case you cannot update to 4.5.0, please make sure that you are properly checking for all errors ("dangerous" ones first), so that you are not running in the case detailed above. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/golang-jwt/jwt/security/advisories/GHSA-29wx-vh33-7x7r - https://github.com/golang-jwt/jwt/commit/7b1c1c00a171c6c79bbdb40e4ce7d197060c1c2c
CVE ID: CVE-2024-51745 State: PUBLISHED Published: 2024-11-05T21:09:43.943Z Last Updated: 2024-11-05T21:28:34.001Z Vendors: bytecodealliance Products: wasmtime Problem Types: CWE-67, CWE-184 Description: Wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's filesystem sandbox implementation on Windows blocks access to special device filenames such as "COM1", "COM2", "LPT0", "LPT1", and so on, however it did not block access to the special device filenames which use superscript digits, such as "COM¹", "COM²", "LPT⁰", "LPT¹", and so on. Untrusted Wasm programs that are given access to any filesystem directory could bypass the sandbox and access devices through those special device
t are given access to any filesystem directory could bypass the sandbox and access devices through those special device filenames with superscript digits, and through them gain access peripheral devices connected to the computer, or network resources mapped to those devices. This can include modems, printers, network printers, and any other device connected to a serial or parallel port, including emulated USB serial ports. Patch releases for Wasmtime have been issued as 24.0.2, 25.0.3, and 26.0.1. Users of Wasmtime 23.0.x and prior are recommended to upgrade to one of these patched versions. There are no known workarounds for this issue. Affected Windows users are recommended to upgrade. Add
patched versions. There are no known workarounds for this issue. Affected Windows users are recommended to upgrade. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-c2f5-jxjv-2hh8 - https://github.com/bytecodealliance/cap-std/pull/371 - https://en.wikipedia.org/wiki/ISO/IEC_8859-1 - https://learn.microsoft.com/en-us/windows/win32/fileio/naming-a-file#naming-conventions
CVE ID: CVE-2024-51746 State: PUBLISHED Published: 2024-11-05T18:54:39.494Z Last Updated: 2024-11-05T20:30:02.393Z Vendors: sigstore Products: gitsign Problem Types: CWE-706 Description: Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC identity. gitsign may select the wrong Rekor entry to use during online verification when multiple entries are returned by the log. gitsign uses Rekor's search API to fetch entries that apply to a signature being verified. The parameters used for the search are the public key and the payload. The search API returns entries that match either condition rather than both. When gitsign's credential cache is used, there can be
API returns entries that match either condition rather than both. When gitsign's credential cache is used, there can be multiple entries that use the same ephemeral keypair / signing certificate. As gitsign assumes both conditions are matched by Rekor, there is no additional validation that the entry's hash matches the payload being verified, meaning that the wrong entry can be used to successfully pass verification. Impact is minimal as while gitsign does not match the payload against the entry, it does ensure that the certificate matches. This would need to be exploited during the certificate validity window (10 minutes) by the key holder. Additional Analyst Notes: - CISA ADP Vulnrichment:
uring the certificate validity window (10 minutes) by the key holder. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sigstore/gitsign/security/advisories/GHSA-8pmp-678w-c8xx
CVE ID: CVE-2024-51747 State: PUBLISHED Published: 2024-11-11T19:22:27.261Z Last Updated: 2024-11-12T01:45:29.297Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: kanboard Products: kanboard Problem Types: CWE-22, CWE-27 Description: Kanboard is project management software that focuses on the Kanban methodology. An authenticated Kanboard admin can read and delete arbitrary files from the server. File attachments, that are viewable or downloadable in Kanboard are resolved through its `path` entry in the `project_has_files` SQLite db. Thus, an attacker who can upload a modified sqlite.db through the dedicated feature, can set arbitrary file links, by abusing
an attacker who can upload a modified sqlite.db through the dedicated feature, can set arbitrary file links, by abusing path traversals. Once the modified db is uploaded and the project page is accessed, a file download can be triggered and all files, readable in the context of the Kanboard application permissions, can be downloaded. This issue has been addressed in version 1.2.42 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kanboard/kanboard/security/advisories/GHSA-78pf-vg56-5p8v
CVE ID: CVE-2024-51748 State: PUBLISHED Published: 2024-11-11T19:20:29.400Z Last Updated: 2024-11-12T14:44:13.741Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: kanboard Products: kanboard Problem Types: CWE-22 Description: Kanboard is project management software that focuses on the Kanban methodology. An authenticated Kanboard admin can run arbitrary php code on the server in combination with a file write possibility. The user interface language is determined and loaded by the setting `application_language` in the `settings` table. Thus, an attacker who can upload a modified sqlite.db through the dedicated feature, has control over the filepath, which i
s, an attacker who can upload a modified sqlite.db through the dedicated feature, has control over the filepath, which is loaded. Exploiting this vulnerability has one constraint: the attacker must be able to place a file (called translations.php) on the system. However, this is not impossible, think of anonymous FTP server or another application that allows uploading files. Once the attacker has placed its file with the actual php code as the payload, the attacker can craft a sqlite db settings, which uses path traversal to point to the directory, where the `translations.php` file is stored. Then gaining code execution after importing the crafted sqlite.db. This issue has been addressed in
hp` file is stored. Then gaining code execution after importing the crafted sqlite.db. This issue has been addressed in version 1.2.42 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kanboard/kanboard/security/advisories/GHSA-jvff-x577-j95p
CVE ID: CVE-2024-51749 State: PUBLISHED Published: 2024-11-12T16:34:21.603Z Last Updated: 2024-11-12T17:14:30.943Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: element-hq Products: element-web Problem Types: CWE-451 Description: Element is a Matrix web client built using the Matrix React SDK. Versions of Element Web and Desktop earlier than 1.11.85 do not check if thumbnails for attachments, stickers and images are coherent. It is possible to add thumbnails to events trigger a file download once clicked. Fixed in element-web 1.11.85. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/element-hq/element-web/security/advisories
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/element-hq/element-web/security/advisories/GHSA-5486-384g-mcx2 - https://github.com/element-hq/element-web/commit/a00c343435d633e64de2c0548217aa611c7bbef5
CVE ID: CVE-2024-51750 State: PUBLISHED Published: 2024-11-12T16:34:27.928Z Last Updated: 2024-11-12T17:12:21.715Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L) Vendors: element-hq Products: element-web Problem Types: CWE-248 Description: Element is a Matrix web client built using the Matrix React SDK. A malicious homeserver can send invalid messages over federation which can prevent Element Web and Desktop from rendering single messages or the entire room containing them. This was patched in Element Web and Desktop 1.11.85. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/element-hq/element-web/security/advisories/GHSA-w36j-v56h-q9
: - CISA ADP Vulnrichment: References: - https://github.com/element-hq/element-web/security/advisories/GHSA-w36j-v56h-q9pc - https://github.com/element-hq/element-web/commit/231073c578d5f92b33cde7aa2b0b9c5836b2dc48
CVE ID: CVE-2024-51751 State: PUBLISHED Published: 2024-11-06T19:11:38.731Z Last Updated: 2024-11-06T19:58:13.376Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: gradio-app Products: gradio Problem Types: CWE-22 Description: Gradio is an open-source Python package designed to enable quick builds of a demo or web application. If File or UploadButton components are used as a part of Gradio application to preview file content, an attacker with access to the application might abuse these components to read arbitrary files from the application server. This issue has been addressed in release version 5.5.0 and all users are advised to upgrade. There are no known
server. This issue has been addressed in release version 5.5.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gradio-app/gradio/security/advisories/GHSA-rhm9-gp5p-5248
CVE ID: CVE-2024-51752 State: PUBLISHED Published: 2024-11-05T19:16:41.831Z Last Updated: 2024-11-05T20:15:07.923Z Vendors: workos Products: authkit-nextjs Problem Types: CWE-532 Description: The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js. In affected versions refresh tokens are logged to the console when the disabled by default `debug` flag, is enabled. This issue has been patched in version 0.13.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/workos/authkit-nextjs/securit
ility. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/workos/authkit-nextjs/security/advisories/GHSA-5wmg-9cvh-qw25 - https://github.com/workos/authkit-nextjs/commit/15a332632f7560b03cc6d8cc8da24fd2ac931da7 - https://github.com/workos/authkit-nextjs/releases/tag/v0.13.2
CVE ID: CVE-2024-51753 State: PUBLISHED Published: 2024-11-05T19:14:47.097Z Last Updated: 2024-11-05T20:16:29.928Z Vendors: workos Products: authkit-remix Problem Types: CWE-532 Description: The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In affected versions refresh tokens are logged to the console when the disabled by default `debug` flag, is enabled. This issue has been patched in version 0.4.1. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/workos/authkit-remix/security/advisori
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/workos/authkit-remix/security/advisories/GHSA-v2qh-f584-6hj8 - https://github.com/workos/authkit-remix/commit/32d5bcd54c795c1e2a3204f8e3977ab9ad57ec06 - https://github.com/workos/authkit-remix/releases/tag/v0.4.1
CVE ID: CVE-2024-51754 State: PUBLISHED Published: 2024-11-06T19:28:17.553Z Last Updated: 2025-05-29T09:03:17.579Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: twigphp Products: Twig Problem Types: CWE-668 Description: Twig is a template language for PHP. In a sandbox, an attacker can call `__toString()` on an object even if the `__toString()` method is not allowed by the security policy when the object is part of an array or an argument list (arguments to a function or a filter for instance). This issue has been patched in versions 3.11.2 and 3.14.1. All users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: -
and 3.14.1. All users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/twigphp/Twig/security/advisories/GHSA-6377-hfv9-hqf6 - https://github.com/twigphp/Twig/commit/2bb8c2460a2c519c498df9b643d5277117155a73
CVE ID: CVE-2024-51755 State: PUBLISHED Published: 2024-11-06T19:27:05.347Z Last Updated: 2024-11-07T15:12:59.408Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: twigphp Products: Twig Problem Types: CWE-668 Description: Twig is a template language for PHP. In a sandbox, an attacker can access attributes of Array-like objects as they were not checked by the security policy. They are now checked via the property policy and the `__isset()` method is now called after the security check. This is a BC break. This issue has been patched in versions 3.11.2 and 3.14.1. All users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst
3.11.2 and 3.14.1. All users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/twigphp/Twig/security/advisories/GHSA-jjxq-ff2g-95vh - https://github.com/twigphp/Twig/commit/831c148e786178e5f2fde9db67266be3bf241c21
CVE ID: CVE-2024-51756 State: PUBLISHED Published: 2024-11-05T22:06:10.098Z Last Updated: 2024-11-06T14:39:54.948Z Vendors: bytecodealliance Products: cap-std Problem Types: CWE-22 Description: The cap-std project is organized around the eponymous `cap-std` crate, and develops libraries to make it easy to write capability-based code. cap-std's filesystem sandbox implementation on Windows blocks access to special device filenames such as "COM1", "COM2", "LPT0", "LPT1", and so on, however it did not block access to the special device filenames which use superscript digits, such as "COM¹", "COM²", "LPT⁰", "LPT¹", and so on. Untrusted filesystem paths could bypass the sandbox and access devices
ch as "COM¹", "COM²", "LPT⁰", "LPT¹", and so on. Untrusted filesystem paths could bypass the sandbox and access devices through those special device filenames with superscript digits, and through them provide access peripheral devices connected to the computer, or network resources mapped to those devices. This can include modems, printers, network printers, and any other device connected to a serial or parallel port, including emulated USB serial ports. The bug is fixed in #371, which is published in cap-primitives 3.4.1, cap-std 3.4.1, and cap-async-std 3.4.1. There are no known workarounds for this issue. Affected Windows users are recommended to upgrade. Additional Analyst Notes: - CISA