Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
he victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when modifying the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `fi`. ### Patches The bug is fixed in version v0.27.5. ### References Regression test and bug fix: #1739 ### For more information Please see our [security policy](https://github.com/Exiv2/exiv2/security/policy) for information about Exiv2 security. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Exiv2/exiv2/security/
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Exiv2/exiv2/security/advisories/GHSA-mv9g-fxh2-m49m - https://github.com/Exiv2/exiv2/pull/1739 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FMDT4PJB7P43WSOM3TRQIY3J33BAFVVE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UYGDELIFFJWKUU7SO3QATCIXCZJERGAC/ - https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html - https://security.gentoo.org/glsa/202312-06
CVE ID: CVE-2021-32816 State: PUBLISHED Published: 2021-05-14T17:35:10 Last Updated: 2024-08-03T23:33:55.906Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: ProtonMail Products: WebClient Problem Types: CWE-400 Description: ProtonMail Web Client is the official AngularJS web client for the ProtonMail secure email service. ProtonMail Web Client before version 3.16.60 has a regular expression denial-of-service vulnerability. This was fixed in commit 6687fb. There is a full report available in the referenced GHSL-2021-027. Additional Analyst Notes: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2021-027-redos-ProtonMail/
Notes: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2021-027-redos-ProtonMail/ - https://github.com/ProtonMail/WebClient/commit/6687fbb867ef872c96cf4fde68cb6e9c58d3fddc
CVE ID: CVE-2021-32817 State: PUBLISHED Published: 2021-05-14T18:15:14 Last Updated: 2024-08-03T23:33:56.038Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: TryGhost Products: express-hbs Problem Types: CWE-200 Description: express-hbs is an Express handlebars template engine. express-hbs mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure vulnerabilities in downstream applications. This potential vulnerability is somewhat restricted in that only files with existing extentions (i.e. file.extension) can be included, files that lack an extension will hav
in that only files with existing extentions (i.e. file.extension) can be included, files that lack an extension will have .hbs appended to them. For complete details refer to the referenced GHSL-2021-019 report. Notes in documentation have been added to help users of express-hbs avoid this potential information exposure vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2021-019-express-hbs/ - https://www.npmjs.com/package/express-hbs - https://github.com/TryGhost/express-hbs#%EF%B8%8F-this-creates-a-potential-security-vulnerability - https://github.com/TryGhost/express-hbs/commit/ff6fad6e357699412d4e916273314e5e7af1
a-potential-security-vulnerability - https://github.com/TryGhost/express-hbs/commit/ff6fad6e357699412d4e916273314e5e7af1500e
CVE ID: CVE-2021-32818 State: PUBLISHED Published: 2021-05-14T18:20:18 Last Updated: 2024-08-03T23:33:55.938Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: netzpirat Products: haml-coffee Problem Types: CWE-79 Description: haml-coffee is a JavaScript templating solution. haml-coffee mixes pure template data with engine configuration options through the Express render API. More specifically, haml-coffee supports overriding a series of HTML helper functions through its configuration options. A vulnerable application that passes user controlled request objects to the haml-coffee template engine may introduce RCE vulnerabilities. Additionally control over the es
d request objects to the haml-coffee template engine may introduce RCE vulnerabilities. Additionally control over the escapeHtml parameter through template configuration pollution ensures that haml-coffee would not sanitize template inputs that may result in reflected Cross Site Scripting attacks against downstream applications. There is currently no fix for these issues as of the publication of this CVE. The latest version of haml-coffee is currently 1.14.1. For complete details refer to the referenced GHSL-2021-025. Additional Analyst Notes: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2021-025-haml-coffee/ - https://www.npmjs.com/package/haml-coffe
ences: - https://securitylab.github.com/advisories/GHSL-2021-025-haml-coffee/ - https://www.npmjs.com/package/haml-coffee
CVE ID: CVE-2021-32819 State: PUBLISHED Published: 2021-05-14T00:00:00 Last Updated: 2024-08-03T23:33:55.878Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: squirrellyjs Products: squirrelly Problem Types: CWE-200 Description: Squirrelly is a template engine implemented in JavaScript that works out of the box with ExpressJS. Squirrelly mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options remote code execution may be triggered in downstream applications. This issue is fixed in version 9.0.0. For complete details refer to the referenced GHSL-2021-023. Additional Analyst Notes: - C
sue is fixed in version 9.0.0. For complete details refer to the referenced GHSL-2021-023. Additional Analyst Notes: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2021-023-squirrelly/ - https://github.com/squirrellyjs/squirrelly/pull/254 - https://github.com/squirrellyjs/squirrelly/commit/c12418a026f73df645ba927fd29358efe02fed1e - https://github.com/squirrellyjs/squirrelly/commit/dca7a1e7ee91d8a6ffffb655f3f15647486db9da
CVE ID: CVE-2021-32820 State: PUBLISHED Published: 2021-05-14T18:25:14 Last Updated: 2024-08-03T23:33:56.314Z Vendors: express-handlebars Products: express-handlebars Problem Types: CWE-200 Description: Express-handlebars is a Handlebars view engine for Express. Express-handlebars mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure vulnerabilities in downstream applications. This potential vulnerability is somewhat restricted in that only files with existing extentions (i.e. file.extension) can be included, files that lack an extension will have .handlebars appended to them. For complet
(i.e. file.extension) can be included, files that lack an extension will have .handlebars appended to them. For complete details refer to the referenced GHSL-2021-018 report. Notes in documentation have been added to help users avoid this potential information exposure vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2021-018-express-handlebars/ - https://www.npmjs.com/package/express-handlebars - https://github.com/express-handlebars/express-handlebars/pull/163 - https://github.com/express-handlebars/express-handlebars/commit/78c47a235c4ad7bc2674bddd8ec2721567ed8c72 - https://github.com/express-handlebars/express
ebars/express-handlebars/commit/78c47a235c4ad7bc2674bddd8ec2721567ed8c72 - https://github.com/express-handlebars/express-handlebars/blob/78c47a235c4ad7bc2674bddd8ec2721567ed8c72/README.md#danger-
CVE ID: CVE-2021-32821 State: PUBLISHED Published: 2023-01-03T00:00:00.000Z Last Updated: 2025-03-10T21:33:30.800Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: mootools Products: mootools-core Problem Types: CWE-400 Description: MooTools is a collection of JavaScript utilities for JavaScript developers. All known versions include a CSS selector parser that is vulnerable to Regular Expression Denial of Service (ReDoS). An attack requires that an attacker can inject a string into a CSS selector at runtime, which is quite common with e.g. jQuery CSS selectors. No patches are available for this issue. Additional Analyst Notes: - CVE Program Container: - CISA
Query CSS selectors. No patches are available for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2020-345-redos-mootools/
CVE ID: CVE-2021-32822 State: PUBLISHED Published: 2021-08-16T18:45:10 Last Updated: 2024-08-03T23:33:55.940Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: pillarjs Products: hbs Problem Types: CWE-538 Description: The npm hbs package is an Express view engine wrapper for Handlebars. Depending on usage, users of hbs may be vulnerable to a file disclosure vulnerability. There is currently no patch for this vulnerability. hbs mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options a file disclosure vulnerability may be triggered in downstream applications. For an example PoC see t
figuration options a file disclosure vulnerability may be triggered in downstream applications. For an example PoC see the referenced GHSL-2021-020. Additional Analyst Notes: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2021-020-pillarjs-hbs/
CVE ID: CVE-2021-32823 State: PUBLISHED Published: 2021-06-23T23:40:12 Last Updated: 2024-08-03T23:33:55.878Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: dmendel Products: bindata Problem Types: CWE-400 Description: In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions it is very slow for certain classes in BinData to be created. For example BinData::Bit100000, BinData::Bit100001, BinData::Bit100002, BinData::Bit<N>. In combination with <user_input>.constantize there is a potential for a CPU-based DoS. In version 2.4.10 bindata improved the creation time of Bits and Integers. Additional Analy
tential for a CPU-based DoS. In version 2.4.10 bindata improved the creation time of Bits and Integers. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dmendel/bindata/commit/d99f050b88337559be2cb35906c1f8da49531323 - https://github.com/rubysec/ruby-advisory-db/issues/476 - https://about.gitlab.com/releases/2021/06/01/security-release-gitlab-13-12-2-released/#update-bindata-dependency - https://rubygems.org/gems/bindata - https://github.com/dmendel/bindata/blob/v2.4.10/ChangeLog.rdoc#version-2410-2021-05-18-
CVE ID: CVE-2021-32824 State: PUBLISHED Published: 2023-01-03T00:00:00.000Z Last Updated: 2025-03-10T21:33:25.495Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Apache Products: Dubbo Problem Types: CWE-502 Description: Apache Dubbo is a java based, open source RPC framework. Versions prior to 2.6.10 and 2.7.10 are vulnerable to pre-auth remote code execution via arbitrary bean manipulation in the Telnet handler. The Dubbo main service port can be used to access a Telnet Handler which offers some basic methods to collect information about the providers and methods exposed by the service and it can even allow to shutdown the service. This endpoint is unpr
ut the providers and methods exposed by the service and it can even allow to shutdown the service. This endpoint is unprotected. Additionally, a provider method can be invoked using the `invoke` handler. This handler uses a safe version of FastJson to process the call arguments. However, the resulting list is later processed with `PojoUtils.realize` which can be used to instantiate arbitrary classes and invoke its setters. Even though FastJson is properly protected with a default blocklist, `PojoUtils.realize` is not, and an attacker can leverage that to achieve remote code execution. Versions 2.6.10 and 2.7.10 contain fixes for this issue. Additional Analyst Notes: - CVE Program Container:
execution. Versions 2.6.10 and 2.7.10 contain fixes for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2021-034_043-apache-dubbo/
CVE ID: CVE-2021-32825 State: PUBLISHED Published: 2021-08-16T19:00:13 Last Updated: 2024-08-03T23:33:55.930Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: bblfsh Products: bblfshd Problem Types: CWE-23 Description: bblfshd is an open source self-hosted server for source code parsing. In bblfshd before commit 4265465b9b6fb5663c30ee43806126012066aad4 there is a "zipslip" vulnerability. The unsafe handling of symbolic links in an unpacking routine may enable attackers to read and/or write to arbitrary locations outside the designated target folder. This issue may lead to arbitrary file write (with same permissions as the program running the unpack operation) if
lder. This issue may lead to arbitrary file write (with same permissions as the program running the unpack operation) if the attacker can control the archive file. Additionally, if the attacker has read access to the unpacked files, he may be able to read arbitrary system files the parent process has permissions to read. For more details including a PoC see the referenced GHSL-2020-258. Additional Analyst Notes: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2020-258-zipslip-bblfshd/ - https://github.com/bblfsh/bblfshd/pull/341 - https://github.com/bblfsh/bblfshd/commit/4265465b9b6fb5663c30ee43806126012066aad4
CVE ID: CVE-2021-32826 State: PUBLISHED Published: 2021-08-16T21:00:10 Last Updated: 2024-08-03T23:33:55.912Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: proxyee-down-org Products: proxyee-down Problem Types: CWE-78 Description: Proxyee-Down is open source proxy software. An attacker being able to provide an extension script (eg: through a MiTM attack or by hosting a malicious extension) may be able to run arbitrary commands on the system running Proxyee-Down. For more details including a PoC see the referenced GHSL-2021-053. As of the writing of this CVE there is currently no patched version. Additional Analyst Notes: - CVE Program Container: References
writing of this CVE there is currently no patched version. Additional Analyst Notes: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2021-053-proxyee-down/
CVE ID: CVE-2021-32827 State: PUBLISHED Published: 2021-08-16T20:50:09 Last Updated: 2024-08-03T23:33:56.183Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N) Vendors: mock-server Products: mockserver Problem Types: CWE-74 Description: MockServer is open source software which enables easy mocking of any system you integrate with via HTTP or HTTPS. An attacker that can trick a victim into visiting a malicious site while running MockServer locally, will be able to run arbitrary code on the MockServer machine. With an overly broad default CORS configuration MockServer allows any site to send cross-site requests. Additionally, MockServer allows you to create dynamic expec
tion MockServer allows any site to send cross-site requests. Additionally, MockServer allows you to create dynamic expectations using Javascript or Velocity templates. Both engines may allow an attacker to execute arbitrary code on-behalf of MockServer. By combining these two issues (Overly broad CORS configuration + Script injection), an attacker could serve a malicious page so that if a developer running MockServer visits it, they will get compromised. For more details including a PoC see the referenced GHSL-2021-059. Additional Analyst Notes: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2021-059-mockserver/ - https://www.oracle.com/security-alerts/
erences: - https://securitylab.github.com/advisories/GHSL-2021-059-mockserver/ - https://www.oracle.com/security-alerts/cpujan2022.html
CVE ID: CVE-2021-32828 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-03-10T21:32:27.606Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Hyland Products: Nuxeo Problem Types: CWE-502 Description: The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the `oauth2` REST API is vulnerable to Reflected Cross-Site Scripting (XSS). This XSS can be escalated to Remote Code Execution (RCE) by levering the automation API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2021-072-nuxeo - ht
ram Container: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2021-072-nuxeo - https://github.com/nuxeo/nuxeo/blob/master/modules/platform/nuxeo-platform-oauth/src/main/java/org/nuxeo/ecm/webengine/oauth2/OAuth2Callback.java
CVE ID: CVE-2021-32829 State: PUBLISHED Published: 2021-08-17T16:00:12 Last Updated: 2024-08-03T23:33:55.855Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: zstackio Products: zstack Problem Types: CWE-94 Description: ZStack is open source IaaS(infrastructure as a service) software aiming to automate datacenters, managing resources of compute, storage, and networking all by APIs. Affected versions of ZStack REST API are vulnerable to post-authentication Remote Code Execution (RCE) via bypass of the Groovy shell sandbox. The REST API exposes the GET zstack/v1/batch-queries?script endpoint which is backed up by the BatchQueryAction class. Messages are repre
ses the GET zstack/v1/batch-queries?script endpoint which is backed up by the BatchQueryAction class. Messages are represented by the APIBatchQueryMsg, dispatched to the QueryFacadeImpl facade and handled by the BatchQuery class. The HTTP request parameter script is mapped to the APIBatchQueryMsg.script property and evaluated as a Groovy script in BatchQuery.query the evaluation of the user-controlled Groovy script is sandboxed by SandboxTransformer which will apply the restrictions defined in the registered (sandbox.register()) GroovyInterceptor. Even though the sandbox heavily restricts the receiver types to a small set of allowed types, the sandbox is non effective at controlling any code
avily restricts the receiver types to a small set of allowed types, the sandbox is non effective at controlling any code placed in Java annotations and therefore vulnerable to meta-programming escapes. This issue leads to post-authenticated remote code execution. For more details see the referenced GHSL-2021-065. This issue is patched in versions 3.8.21, 3.10.8, and 4.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2021-065-zstack/ - https://github.com/zstackio/zstack/security/advisories/GHSA-6xgq-7rqg-x3q5 - https://blog.orange.tw/2019/02/abusing-meta-programming-for-unauthenticated-rce.html
CVE ID: CVE-2021-32830 State: PUBLISHED Published: 2021-08-17T18:00:13 Last Updated: 2024-08-03T23:33:55.856Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: diez Products: diez Problem Types: CWE-78 Description: The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. All versions of this package are vulnerable as of the wr
f the library calls the vulnerable method with untrusted input. All versions of this package are vulnerable as of the writing of this CVE. Additional Analyst Notes: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2021-061-diez-generation-cmd-injection/ - https://github.com/diez/diez - https://www.npmjs.com/package/%40diez/generation
CVE ID: CVE-2021-32831 State: PUBLISHED Published: 2021-08-30T20:40:21 Last Updated: 2024-08-03T23:33:56.088Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: totaljs Products: framework Problem Types: CWE-94 Description: Total.js framework (npm package total.js) is a framework for Node.js platfrom written in pure JavaScript similar to PHP's Laravel or Python's Django or ASP.NET MVC. In total.js framework before version 3.4.9, calling the utils.set function with user-controlled values leads to code-injection. This can cause a variety of impacts that include arbitrary code execution. This is fixed in version 3.4.9. Additional Analyst Notes: - CVE Program Contain
s that include arbitrary code execution. This is fixed in version 3.4.9. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/totaljs/framework/commit/887b0fa9e162ef7a2dd9cec20a5ca122726373b3 - https://securitylab.github.com/advisories/GHSL-2021-066-totaljs-totaljs/ - https://github.com/totaljs/framework/blob/e644167d5378afdc45cb0156190349b2c07ef235/changes.txt#L11 - https://www.npmjs.com/package/total.js
CVE ID: CVE-2021-32832 State: PUBLISHED Published: 2021-08-30T20:55:13 Last Updated: 2024-08-03T23:33:55.938Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: RocketChat Products: Rocket.Chat Problem Types: CWE-400 Description: Rocket.Chat is an open-source fully customizable communications platform developed in JavaScript. In Rocket.Chat before versions 3.11.3, 3.12.2, and 3.13 an issue with certain regular expressions could lead potentially to Denial of Service. This was fixed in versions 3.11.3, 3.12.2, and 3.13. Additional Analyst Notes: - CVE Program Container: References: - https://docs.rocket.chat/guides/security/security-updates - https://securitylab.
- CVE Program Container: References: - https://docs.rocket.chat/guides/security/security-updates - https://securitylab.github.com/advisories/GHSL-2020-310-redos-Rocket.Chat/ - https://github.com/RocketChat/Rocket.Chat/releases/tag/3.11.3 - https://github.com/RocketChat/Rocket.Chat/commit/4a0dce973e37ec3f56ca2231d6030511dbdd094c
CVE ID: CVE-2021-32833 State: PUBLISHED Published: 2021-09-09T01:30:10 Last Updated: 2024-08-03T23:33:56.022Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: MediaBrowser Products: Emby.Releases Problem Types: CWE-552 Description: Emby Server is a personal media server with apps on many devices. In Emby Server on Windows there is a set of arbitrary file read vulnerabilities. This vulnerability is known to exist in version 4.6.4.0 and may not be patched in later versions. Known vulnerable routes are /Videos/Id/hls/PlaylistId/SegmentId.SegmentContainer, /Images/Ratings/theme/name and /Images/MediaInfo/theme/name. For more details including proof of concept code,
ontainer, /Images/Ratings/theme/name and /Images/MediaInfo/theme/name. For more details including proof of concept code, refer to the referenced GHSL-2021-051. This issue may lead to unauthorized access to the system especially when Emby Server is configured to be accessible from the Internet. Additional Analyst Notes: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2021-051-emby/