Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-39844 State: PUBLISHED Published: 2024-07-03T00:00:00 Last Updated: 2024-08-02T04:26:16.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wiki.znc.in/Category:ChangeLog - https://github.com/znc/znc/releases/tag/znc-1.9.1 - https://wiki.znc.in/ChangeLog/1.9.1 - https://www.openwall.com/lists/oss-security/2024/07/03/9 - http://www.openwall.com/lists/oss-security/2024/07/03/9
CVE ID: CVE-2024-39846 State: PUBLISHED Published: 2024-06-29T00:00:00 Last Updated: 2024-11-25T20:26:25.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: NewPass before 1.2.0 stores passwords (rather than password hashes) directly, which makes it easier to obtain unauthorized access to sensitive information. NOTE: in each case, data at rest is encrypted, but is decrypted within process memory during use. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/6eero/NewPass/commit/13f0a844d64927450fa751deb7cc06beba699720 - https://github.com/6eero/NewPass/releases/tag/v1.2.0
CVE ID: CVE-2024-39848 State: PUBLISHED Published: 2024-06-29T00:00:00.000Z Last Updated: 2025-03-27T19:08:16.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet2 Grouper before 5.6 allows authentication bypass when LDAP authentication is used in certain ways. This is related to internet2.middleware.grouper.ws.security.WsGrouperLdapAuthentication and the use of the UyY29r password for the M3vwHr account. This also affects "Grouper for Web Services" before 4.13.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://spaces.at.internet2.edu/display/Grouper/Grouper+bug+-+GRP-5515+-+web+services+LDAP+authentication+security+vulner
ttps://spaces.at.internet2.edu/display/Grouper/Grouper+bug+-+GRP-5515+-+web+services+LDAP+authentication+security+vulnerability
CVE ID: CVE-2024-39853 State: PUBLISHED Published: 2024-07-01T00:00:00 Last Updated: 2024-08-02T04:33:10.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: adolph_dudu ratio-swiper 0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/mestrtee/840f5d160aab4151bd0451cfb822e6b5
CVE ID: CVE-2024-39863 State: PUBLISHED Published: 2024-07-17T07:53:31.820Z Last Updated: 2024-09-13T17:05:03.928Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-79 Description: Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated attacker to inject a malicious link when installing a provider. Users are recommended to upgrade to version 2.9.3, which fixes this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/apache/airflow/pull/40475 - https://lists.apache.org/thread/gxkvs279f1mbvckv5q65worr6how20o3
CVE ID: CVE-2024-39864 State: PUBLISHED Published: 2024-07-05T13:40:37.937Z Last Updated: 2025-03-19T14:44:07.745Z Vendors: Apache Software Foundation Products: Apache CloudStack Problem Types: CWE-665, CWE-94 Description: The CloudStack integration API service allows running its unauthenticated API server (usually on port 8096 when configured and enabled via integration.api.port global setting) for internal portal integrations and for testing purposes. By default, the integration API service port is disabled and is considered disabled when integration.api.port is set to 0 or negative. Due to an improper initialisation logic, the integration API service would listen on a random port when its
or negative. Due to an improper initialisation logic, the integration API service would listen on a random port when its port value is set to 0 (default value). An attacker that can access the CloudStack management network could scan and find the randomised integration API service port and exploit it to perform unauthorised administrative actions and perform remote code execution on CloudStack managed hosts and result in complete compromise of the confidentiality, integrity, and availability of CloudStack managed infrastructure. Users are recommended to restrict the network access on the CloudStack management server hosts to only essential ports. Users are recommended to upgrade to version 4
access on the CloudStack management server hosts to only essential ports. Users are recommended to upgrade to version 4.18.2.1, 4.19.0.2 or later, which addresses this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/6l51r00csrct61plkyd3qg3fj99215d1 - https://cloudstack.apache.org/blog/security-release-advisory-4.19.0.2-4.18.2.1 - https://www.shapeblue.com/shapeblue-security-advisory-apache-cloudstack-security-releases-4-18-2-1-and-4-19-0-2/ - http://www.openwall.com/lists/oss-security/2024/07/05/1
CVE ID: CVE-2024-39865 State: PUBLISHED Published: 2024-07-09T12:05:19.951Z Last Updated: 2025-08-27T20:42:56.184Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-434 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted backup files. As part of this backup, files can be restored without correctly checking the path of the restored file. This could allow an attacker with access to the backup encryption key to upload malicious files, that could potentially lead to remote co
an attacker with access to the backup encryption key to upload malicious files, that could potentially lead to remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE ID: CVE-2024-39866 State: PUBLISHED Published: 2024-07-09T12:05:21.243Z Last Updated: 2025-08-27T20:42:56.328Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-267 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted backup files. This could allow an attacker with access to the backup encryption key and with the right to upload backup files to create a user with administrative privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refe
a user with administrative privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE ID: CVE-2024-39867 State: PUBLISHED Published: 2024-07-09T12:05:22.532Z Last Updated: 2025-08-27T20:42:56.449Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-425 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not properly validate the authentication when performing certain actions in the web interface allowing an unauthenticated attacker to access and edit device configuration information of devices for which they have no privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program
formation of devices for which they have no privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE ID: CVE-2024-39868 State: PUBLISHED Published: 2024-07-09T12:05:23.810Z Last Updated: 2025-08-27T20:42:56.576Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-425 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not properly validate the authentication when performing certain actions in the web interface allowing an unauthenticated attacker to access and edit VxLAN configuration information of networks for which they have no privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program
ormation of networks for which they have no privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE ID: CVE-2024-39869 State: PUBLISHED Published: 2024-07-09T12:05:25.089Z Last Updated: 2025-08-27T20:42:56.700Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-754 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected products allow to upload certificates. An authenticated attacker could upload a crafted certificates leading to a permanent denial-of-service situation. In order to recover from such an attack, the offending certificate needs to be removed manually. Additional Analyst Notes: - CISA ADP Vulnrichment: -
an attack, the offending certificate needs to be removed manually. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE ID: CVE-2024-39870 State: PUBLISHED Published: 2024-07-09T12:05:26.376Z Last Updated: 2025-08-27T20:42:56.927Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-602 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected applications can be configured to allow users to manage own users. A local authenticated user with this privilege could use this modify users outside of their own scope as well as to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http
s to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE ID: CVE-2024-39871 State: PUBLISHED Published: 2024-07-09T12:05:27.689Z Last Updated: 2025-08-27T20:42:57.056Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-863 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected applications do not properly separate the rights to edit device settings and to edit settings for communication relations. This could allow an authenticated attacker with the permission to manage devices to gain access to participant groups that the attacked does not belong to. Additional Analyst Note
ion to manage devices to gain access to participant groups that the attacked does not belong to. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE ID: CVE-2024-39872 State: PUBLISHED Published: 2024-07-09T12:05:28.983Z Last Updated: 2025-08-27T20:42:57.191Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-378 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly assign rights to temporary files created during its update process. This could allow an authenticated attacker with the 'Manage firmware updates' role to escalate their privileges on the underlying OS level. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE P
role to escalate their privileges on the underlying OS level. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE ID: CVE-2024-39873 State: PUBLISHED Published: 2024-07-09T12:05:30.268Z Last Updated: 2025-08-27T20:42:57.342Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-307 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly implement brute force protection against user credentials in its web API. This could allow an attacker to learn user credentials that are vulnerable to brute force attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https:/
o brute force attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE ID: CVE-2024-39874 State: PUBLISHED Published: 2024-07-09T12:05:31.563Z Last Updated: 2025-08-27T20:42:57.478Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-307 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly implement brute force protection against user credentials in its Client Communication component. This could allow an attacker to learn user credentials that are vulnerable to brute force attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container
s that are vulnerable to brute force attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE ID: CVE-2024-39875 State: PUBLISHED Published: 2024-07-09T12:05:32.868Z Last Updated: 2025-08-27T20:42:57.605Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-732 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows authenticated, low privilege users with the 'Manage own remote connections' permission to retrieve details about other users and group memberships. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productce
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE ID: CVE-2024-39876 State: PUBLISHED Published: 2024-07-09T12:05:34.146Z Last Updated: 2025-08-27T20:42:57.745Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-770 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected applications do not properly handle log rotation. This could allow an unauthenticated remote attacker to cause a denial of service condition through resource exhaustion on the device. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.co
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE ID: CVE-2024-39877 State: PUBLISHED Published: 2024-07-17T07:54:24.338Z Last Updated: 2024-09-13T17:05:04.979Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-94 Description: Apache Airflow 2.4.0, and versions before 2.9.3, has a vulnerability that allows authenticated DAG authors to craft a doc_md parameter in a way that could execute arbitrary code in the scheduler context, which should be forbidden according to the Airflow Security model. Users should upgrade to version 2.9.3 or later which has removed the vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/apache/airflow/pull/40522
lyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/apache/airflow/pull/40522 - https://lists.apache.org/thread/1xhj9dkp37d6pzn24ll2mf94wbqnb2y1
CVE ID: CVE-2024-39878 State: PUBLISHED Published: 2024-07-01T17:07:45.890Z Last Updated: 2024-08-02T04:33:11.261Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-522 Description: In JetBrains TeamCity before 2024.03.3 private key could be exposed via testing GitHub App Connection Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-39879 State: PUBLISHED Published: 2024-07-01T17:07:46.673Z Last Updated: 2024-08-02T04:33:11.258Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-522 Description: In JetBrains TeamCity before 2024.03.3 application token could be exposed in EC2 Cloud Profile settings Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-39880 State: PUBLISHED Published: 2024-07-09T21:21:47.678Z Last Updated: 2025-08-27T20:42:57.877Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: CNCSoft-G2 Problem Types: CWE-121 Description: Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events
ditional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-191-01
CVE ID: CVE-2024-39881 State: PUBLISHED Published: 2024-07-09T21:23:31.171Z Last Updated: 2025-08-27T20:42:58.039Z Vendors: Delta Electronics Products: CNCSoft-G2 Problem Types: CWE-787 Description: Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a memory corruption condition. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-191-01
CVE ID: CVE-2024-39882 State: PUBLISHED Published: 2024-07-09T21:25:02.237Z Last Updated: 2025-08-27T20:42:58.211Z Vendors: Delta Electronics Products: CNCSoft-G2 Problem Types: CWE-125 Description: Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-191-01
CVE ID: CVE-2024-39883 State: PUBLISHED Published: 2024-07-09T21:25:49.165Z Last Updated: 2025-08-27T20:42:58.407Z Vendors: Delta Electronics Products: CNCSoft-G2 Problem Types: CWE-122 Description: Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-191-01
CVE ID: CVE-2024-39884 State: PUBLISHED Published: 2024-07-04T08:36:49.772Z Last Updated: 2025-02-13T17:53:19.719Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: Handler configuration not honored Description: A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted. Users are recommended to upgrade to version 2.4.61, which fixes this issue. Additional Analyst Notes: - CISA ADP
reted. Users are recommended to upgrade to version 2.4.61, which fixes this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://httpd.apache.org/security/vulnerabilities_24.html - https://security.netapp.com/advisory/ntap-20240712-0002/ - http://www.openwall.com/lists/oss-security/2024/07/17/6
CVE ID: CVE-2024-39886 State: PUBLISHED Published: 2024-07-10T06:41:46.185Z Last Updated: 2024-08-02T04:33:10.953Z Vendors: DREAM TRAIN INTERNET INC. Products: TONE store App Problem Types: Unprotected Primary Channel Description: TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel. Since TONE store App communicates with TONE store website in cleartext, a man-in-the-middle attack may allow an attacker to obtain and/or alter communications of the affected App. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://tone.ne.jp/vulnerability/14492007.html - https://jvn.jp/en/jp/JVN28515217/
CVE ID: CVE-2024-39887 State: PUBLISHED Published: 2024-07-16T09:20:10.688Z Last Updated: 2025-02-13T17:53:20.299Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Apache Software Foundation Products: Apache Superset Problem Types: CWE-89 Description: An SQL Injection vulnerability in Apache Superset exists due to improper neutralization of special elements used in SQL commands. Specifically, certain engine-specific functions are not checked, which allows attackers to bypass Apache Superset's SQL authorization. To mitigate this, a new configuration key named DISALLOWED_SQL_FUNCTIONS has been introduced. This key disallows the use of the following PostgreSQL f
uration key named DISALLOWED_SQL_FUNCTIONS has been introduced. This key disallows the use of the following PostgreSQL functions: version, query_to_xml, inet_server_addr, and inet_client_addr. Additional functions can be added to this list for increased protection. This issue affects Apache Superset: before 4.0.2. Users are recommended to upgrade to version 4.0.2, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/j55vm41jg3l0x6w49zrmvbf3k0ts5fqz - http://www.openwall.com/lists/oss-security/2024/07/16/5