Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-32462 State: PUBLISHED Published: 2024-04-18T18:11:27.680Z Last Updated: 2025-02-13T17:52:12.189Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: flatpak Products: flatpak Problem Types: CWE-88 Description: Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a malicious or compromised Flatpak app could execute arbitrary code outside its sandbox. Normally, the `--command` argument of `flatpak run` expects to be given a command to run in the specified Flatpak app, optionally along with some arguments. However it is possible to instead pass `bw
nd to run in the specified Flatpak app, optionally along with some arguments. However it is possible to instead pass `bwrap` arguments to `--command=`, such as `--bind`. It's possible to pass an arbitrary `commandline` to the portal interface `org.freedesktop.portal.Background.RequestBackground` from within a Flatpak app. When this is converted into a `--command` and arguments, it achieves the same effect of passing arguments directly to `bwrap`, and thus can be used for a sandbox escape. The solution is to pass the `--` argument to `bwrap`, which makes it stop processing options. This has been supported since bubblewrap 0.3.0. All supported versions of Flatpak require at least that version
ptions. This has been supported since bubblewrap 0.3.0. All supported versions of Flatpak require at least that version of bubblewrap. xdg-desktop-portal version 1.18.4 will mitigate this vulnerability by only allowing Flatpak apps to create .desktop files for commands that do not start with --. The vulnerability is patched in 1.15.8, 1.10.9, 1.12.9, and 1.14.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/flatpak/flatpak/security/advisories/GHSA-phv6-cpc2-2fgj - https://github.com/flatpak/flatpak/commit/72016e3fce8fcbeab707daf4f1a02b931fcc004d - https://github.com/flatpak/flatpak/commit/81abe2a37d363f5099c3d0bdcd0caad6efc5bf97
3fce8fcbeab707daf4f1a02b931fcc004d - https://github.com/flatpak/flatpak/commit/81abe2a37d363f5099c3d0bdcd0caad6efc5bf97 - https://github.com/flatpak/flatpak/commit/b7c1a558e58aaeb1d007d29529bbb270dc4ff11e - https://github.com/flatpak/flatpak/commit/bbab7ed1e672356d1a78b422462b210e8e875931 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZFNSCFJVMAQK5AF55JBN7OSJP3CREDBD/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IB6VQAF5S2YOBULDHPUKPOEIKONOP5KO/ - http://www.openwall.com/lists/oss-security/2024/04/18/5
CVE ID: CVE-2024-32463 State: PUBLISHED Published: 2024-04-17T15:29:14.463Z Last Updated: 2024-08-02T02:13:39.303Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: phlex-ruby Products: phlex Problem Types: CWE-79 Description: phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting (XSS) vulnerability that can be exploited via maliciously crafted user data. The filter to detect and prevent the use of the `javascript:` URL scheme in the `href` attribute of an `<a>` tag could be bypassed with tab `\t` or newline `\n` characters between the characters of the protocol, e.g. `java\tscript:`. This vulnera
ssed with tab `\t` or newline `\n` characters between the characters of the protocol, e.g. `java\tscript:`. This vulnerability is fixed in 1.10.1, 1.9.2, 1.8.3, 1.7.2, 1.6.3, 1.5.3, and 1.4.2. Configuring a Content Security Policy that does not allow `unsafe-inline` would effectively prevent this vulnerability from being exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/phlex-ruby/phlex/security/advisories/GHSA-g7xq-xv8c-h98c - https://github.com/phlex-ruby/phlex/commit/9e3f5b980655817993682e409cbda72956d865cb - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy - https://developer.mozilla.or
865cb - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy#unsafe-inline
CVE ID: CVE-2024-32464 State: PUBLISHED Published: 2024-06-04T19:53:59.774Z Last Updated: 2024-08-02T02:13:39.964Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: rails Products: rails Problem Types: CWE-80, CWE-79 Description: Action Text brings rich text content and editing to Rails. Instances of ActionText::Attachable::ContentAttachment included within a rich_text_area tag could potentially contain unsanitized HTML. This vulnerability is fixed in 7.1.3.4 and 7.2.0.beta2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/rails/rails/security/advisories/GHSA-prjp-h48f-jgf6 - https://github.com/rails
ntainer: References: - https://github.com/rails/rails/security/advisories/GHSA-prjp-h48f-jgf6 - https://github.com/rails/rails/commit/e215bf3360e6dfe1497c1503a495e384ed6b0995
CVE ID: CVE-2024-32465 State: PUBLISHED Published: 2024-05-14T19:18:33.914Z Last Updated: 2025-11-04T16:12:12.576Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: git Products: git Problem Types: CWE-22 Description: Git is a revision control system. The Git project recommends to avoid working in untrusted repositories, and instead to clone it first with `git clone --no-local` to obtain a clean copy. Git has specific protections to make that a safe operation even with an untrusted source repository, but vulnerabilities allow those protections to be bypassed. In the context of cloning local repositories owned by other users, this vulnerability has been covered i
to be bypassed. In the context of cloning local repositories owned by other users, this vulnerability has been covered in CVE-2024-32004. But there are circumstances where the fixes for CVE-2024-32004 are not enough: For example, when obtaining a `.zip` file containing a full copy of a Git repository, it should not be trusted by default to be safe, as e.g. hooks could be configured to run within the context of that repository. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid using Git in repositories that have been obtained via archives from untrusted sources. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE P
that have been obtained via archives from untrusted sources. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/git/git/security/advisories/GHSA-vm9j-46j9-qvq4 - https://github.com/git/git/commit/7b70e9efb18c2cc3f219af399bd384c5801ba1d7 - https://git-scm.com/docs/git#_security - https://git-scm.com/docs/git-clone - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S4CK4IYTXEOBZTEM5K3T6LWOIZ3S44AR/ - http://www.openwall.com/lists/oss-security/2024/05/14/2 - https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html
CVE ID: CVE-2024-32466 State: PUBLISHED Published: 2024-04-18T15:02:43.803Z Last Updated: 2024-08-02T02:13:39.097Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: tolgee Products: tolgee-platform Problem Types: CWE-862 Description: Tolgee is an open-source localization platform. For the `/v2/projects/translations` and `/v2/projects/{projectId}/translations` endpoints, translation data was returned even when API key was missing `translation.view` scope. However, it was impossible to fetch the data when user was missing this scope. So this is only relevant for API keys generated by users permitted to `translation.view`. This vulnerability is fixed in v3.57.2 Addi
ly relevant for API keys generated by users permitted to `translation.view`. This vulnerability is fixed in v3.57.2 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/tolgee/tolgee-platform/security/advisories/GHSA-r95p-fqqv-fppc - https://github.com/tolgee/tolgee-platform/commit/f71213925d6f80019f841db0ead9baa7488c1821
CVE ID: CVE-2024-32467 State: PUBLISHED Published: 2024-04-25T16:56:26.071Z Last Updated: 2024-08-02T02:13:39.297Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L) Vendors: metersphere Products: metersphere Problem Types: CWE-200 Description: MeterSphere is an open source continuous testing platform. Prior to version 2.10.14-lts, members without space permissions can view member information from other workspaces beyond their authority. Version 2.10.14-lts fixes this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/metersphere/metersphere/security/advisories/GHSA-7499-q88f-mxqp
CVE ID: CVE-2024-32468 State: PUBLISHED Published: 2024-11-25T18:44:27.785Z Last Updated: 2024-11-25T19:26:26.427Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: denoland Products: deno Problem Types: CWE-79 Description: Deno is a runtime for JavaScript and TypeScript written in rust. Several cross-site scripting vulnerabilities existed in the `deno_doc` crate which lead to Self-XSS with deno doc --html. 1.) XSS in generated `search_index.js`, `deno_doc` outputs a JavaScript file for searching. However, the generated file used `innerHTML` on unsanitzed HTML input. 2.) XSS via property, method and enum names, `deno_doc` did not sanitize property names, metho
on unsanitzed HTML input. 2.) XSS via property, method and enum names, `deno_doc` did not sanitize property names, method names and enum names. The first XSS most likely didn't have an impact since `deno doc --html` is expected to be used locally with own packages. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/denoland/deno/security/advisories/GHSA-qqwr-j9mm-fhw6 - https://github.com/denoland/deno_doc/blob/dc556c848831d7ae48f3eff2ababc6e75eb6b73e/src/html/templates/pages/search.js#L120-L144
CVE ID: CVE-2024-32469 State: PUBLISHED Published: 2024-07-10T19:10:36.304Z Last Updated: 2024-08-02T02:13:39.100Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: decidim Products: decidim Problem Types: CWE-79 Description: Decidim is a participatory democracy framework. The pagination feature used in searches and filters is subject to potential XSS attack through a malformed URL using the GET parameter `per_page`. This vulnerability is fixed in 0.27.6 and 0.28.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/decidim/decidim/security/advisories/GHSA-7cx8-44pc-xv3q - https://github.com/decidim/decid
erences: - https://github.com/decidim/decidim/security/advisories/GHSA-7cx8-44pc-xv3q - https://github.com/decidim/decidim/releases/tag/v0.27.6 - https://github.com/decidim/decidim/releases/tag/v0.28.1
CVE ID: CVE-2024-32470 State: PUBLISHED Published: 2024-04-18T15:05:26.408Z Last Updated: 2024-08-02T02:13:39.286Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: tolgee Products: tolgee-platform Problem Types: CWE-863 Description: Tolgee is an open-source localization platform. When API key created by admin user is used it bypasses the permission check at all. This error was introduced in v3.57.2 and immediately fixed in v3.57.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/tolgee/tolgee-platform/security/advisories/GHSA-pm57-hcm8-38gw - https://github.com/tolgee/tolgee-platform/security/adviso
lgee/tolgee-platform/security/advisories/GHSA-pm57-hcm8-38gw - https://github.com/tolgee/tolgee-platform/security/advisories/GHSA-r95p-fqqv-fppc - https://github.com/tolgee/tolgee-platform/commit/a0d861028d931f8a54387770eaf3a75031b81234
CVE ID: CVE-2024-32472 State: PUBLISHED Published: 2024-04-17T21:23:57.452Z Last Updated: 2024-08-02T02:13:39.129Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: excalidraw Products: excalidraw Problem Types: CWE-79, CWE-80 Description: excalidraw is an open source virtual hand-drawn style whiteboard. A stored XSS vulnerability in Excalidraw's web embeddable component. This allows arbitrary JavaScript to be run in the context of the domain where the editor is hosted. There were two vectors. One rendering untrusted string as iframe's `srcdoc` without properly sanitizing against HTML injection. Second by improperly sanitizing against attribute HTML injection.
c` without properly sanitizing against HTML injection. Second by improperly sanitizing against attribute HTML injection. This in conjunction with allowing `allow-same-origin` sandbox flag (necessary for several embeds) resulted in the XSS. This vulnerability is fixed in 0.17.6 and 0.16.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/excalidraw/excalidraw/security/advisories/GHSA-m64q-4jqh-f72f - https://github.com/excalidraw/excalidraw/commit/6be752e1b6d776ccfbd3bb9eea17463cb264121d - https://github.com/excalidraw/excalidraw/commit/988f81911ca58e3ca2583e0dd44a954dd00e09d0
CVE ID: CVE-2024-32473 State: PUBLISHED Published: 2024-04-18T21:55:50.445Z Last Updated: 2024-08-21T14:21:22.127Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: moby Products: moby Problem Types: CWE-668 Description: Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. In 26.0.0, IPv6 is not disabled on network interfaces, including those belonging to networks where `--ipv6=false`. An container with an `ipvlan` or `macvlan` interface will normally be configured to share an external network link with the host machine. Because of this direct access, (1)
will normally be configured to share an external network link with the host machine. Because of this direct access, (1) Containers may be able to communicate with other hosts on the local network over link-local IPv6 addresses, (2) if router advertisements are being broadcast over the local network, containers may get SLAAC-assigned addresses, and (3) the interface will be a member of IPv6 multicast groups. This means interfaces in IPv4-only networks present an unexpectedly and unnecessarily increased attack surface. The issue is patched in 26.0.2. To completely disable IPv6 in a container, use `--sysctl=net.ipv6.conf.all.disable_ipv6=1` in the `docker create` or `docker run` command. Or, in
6 in a container, use `--sysctl=net.ipv6.conf.all.disable_ipv6=1` in the `docker create` or `docker run` command. Or, in the service configuration of a `compose` file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/moby/moby/security/advisories/GHSA-x84c-p2g9-rqv9 - https://github.com/moby/moby/commit/7cef0d9cd1cf221d8c0b7b7aeda69552649e0642
CVE ID: CVE-2024-32474 State: PUBLISHED Published: 2024-04-18T19:50:44.541Z Last Updated: 2024-08-02T02:13:39.118Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: getsentry Products: sentry Problem Types: CWE-312, CWE-117 Description: Sentry is an error tracking and performance monitoring platform. Prior to 24.4.1, when authenticating as a superuser to Sentry with a username and password, the password is leaked as cleartext in logs under the _event_: `auth-index.validate_superuser`. An attacker with access to the log data could use these leaked credentials to login to the Sentry system as superuser. Self-hosted users on affected versions should upgrade to 24.4
ed credentials to login to the Sentry system as superuser. Self-hosted users on affected versions should upgrade to 24.4.1 or later. Users can configure the logging level to exclude logs of the `INFO` level and only generate logs for levels at `WARNING` or more. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/getsentry/sentry/security/advisories/GHSA-6cjm-4pxw-7xp9 - https://github.com/getsentry/sentry/pull/66393 - https://github.com/getsentry/sentry/pull/69148 - https://github.com/getsentry/sentry/commit/d5b34568d9f1c41362ccb62141532a0a2169512f
CVE ID: CVE-2024-32475 State: PUBLISHED Published: 2024-04-18T14:18:18.947Z Last Updated: 2024-08-02T02:13:39.139Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: envoyproxy Products: envoy Problem Types: CWE-253, CWE-617 Description: Envoy is a cloud-native, open source edge and service proxy. When an upstream TLS cluster is used with `auto_sni` enabled, a request containing a `host`/`:authority` header longer than 255 characters triggers an abnormal termination of Envoy process. Envoy does not gracefully handle an error when setting SNI for outbound TLS connection. The error can occur when Envoy attempts to use the `host`/`:authority` header value longer tha
outbound TLS connection. The error can occur when Envoy attempts to use the `host`/`:authority` header value longer than 255 characters as SNI for outbound TLS connection. SNI length is limited to 255 characters per the standard. Envoy always expects this operation to succeed and abnormally aborts the process when it fails. This vulnerability is fixed in 1.30.1, 1.29.4, 1.28.3, and 1.27.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/envoyproxy/envoy/security/advisories/GHSA-3mh5-6q8v-25wj - https://github.com/envoyproxy/envoy/commit/b47fc6648d7c2dfe0093a601d44cb704b7bad382
CVE ID: CVE-2024-32476 State: PUBLISHED Published: 2024-04-26T15:24:13.245Z Last Updated: 2024-08-02T02:13:38.994Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: argoproj Products: argo-cd Problem Types: CWE-400 Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. There is a Denial of Service (DoS) vulnerability via OOM using jq in ignoreDifferences. This vulnerability has been patched in version(s) 2.10.7, 2.9.12 and 2.8.16. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/argoproj/argo-cd/security/advisories/GHSA-9m6p-x4h2-6frq - https://github.com/argoproj/argo-
ences: - https://github.com/argoproj/argo-cd/security/advisories/GHSA-9m6p-x4h2-6frq - https://github.com/argoproj/argo-cd/commit/7893979a1e78d59cedd0ba790ded24e30bb40657 - https://github.com/argoproj/argo-cd/commit/9e5cc5a26ff0920a01816231d59fdb5eae032b5a - https://github.com/argoproj/argo-cd/commit/e2df7315fb7d96652186bf7435773a27be330cac
CVE ID: CVE-2024-32477 State: PUBLISHED Published: 2024-04-18T19:58:25.993Z Last Updated: 2024-08-02T02:13:39.109Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: denoland Products: deno Problem Types: CWE-78, CWE-362 Description: Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. By using ANSI escape sequences and a race between `libc::tcflush(0, libc::TCIFLUSH)` and reading standard input, it's possible to manipulate the permission prompt and force it to allow an unsafe action regardless of the user input. Some ANSI escape sequences act as a info request to the master terminal emulator and the terminal emulator sends back the rep
ANSI escape sequences act as a info request to the master terminal emulator and the terminal emulator sends back the reply in the PTY channel. standard streams also use this channel to send and get data. For example the `\033[6n` sequence requests the current cursor position. These sequences allow us to append data to the standard input of Deno. This vulnerability allows an attacker to bypass Deno permission policy. This vulnerability is fixed in 1.42.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/denoland/deno/security/advisories/GHSA-95cj-3hr2-7j5j
CVE ID: CVE-2024-32478 State: PUBLISHED Published: 2024-04-19T14:37:57.617Z Last Updated: 2024-08-02T02:13:39.117Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: git-ecosystem Products: git-credential-manager Problem Types: CWE-732 Description: Git Credential Manager (GCM) is a secure Git credential helper. Prior to 2.5.0, the Debian package does not set root ownership on installed files. This allows user 1001 on a multi-user system can replace binary and gain other users' privileges. This vulnerability is fixed in 2.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/git-ecosystem/git-credential
t Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/git-ecosystem/git-credential-manager/security/advisories/GHSA-3c3g-h9rx-f7vq - https://github.com/git-ecosystem/git-credential-manager/commit/d9ac33c5b1478383672b4425f5ecf875a62efba9
CVE ID: CVE-2024-32479 State: PUBLISHED Published: 2024-04-22T22:07:08.958Z Last Updated: 2024-08-02T02:13:38.943Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: librenms Products: librenms Problem Types: CWE-79 Description: LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Prior to version 24.4.0, there is improper sanitization on the `Service` template name, which can lead to stored Cross-site Scripting. Version 24.4.0 fixes this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/librenms/librenms/security/advisories/GHSA-72m9-7c8x-pmmw - https://github.com/li
iner: References: - https://github.com/librenms/librenms/security/advisories/GHSA-72m9-7c8x-pmmw - https://github.com/librenms/librenms/commit/19344f0584d4d6d4526fdf331adc60530e3f685b - https://github.com/librenms/librenms/blob/a61c11db7e8ef6a437ab55741658be2be7d14d34/app/Http/Controllers/ServiceTemplateController.php#L67C23-L67C23
CVE ID: CVE-2024-32480 State: PUBLISHED Published: 2024-04-22T22:10:50.221Z Last Updated: 2024-08-02T02:13:39.173Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: librenms Products: librenms Problem Types: CWE-89 Description: LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Versions prior to 24.4.0 are vulnerable to SQL injection. The `order` parameter is obtained from `$request`. After performing a string check, the value is directly incorporated into an SQL statement and concatenated, resulting in a SQL injection vulnerability. An attacker may extract a whole database this way. Version 24.4.0 fixes the issue. Additional Analyst Not
vulnerability. An attacker may extract a whole database this way. Version 24.4.0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/librenms/librenms/security/advisories/GHSA-jh57-j3vq-h438 - https://github.com/librenms/librenms/commit/83fe4b10c440d69a47fe2f8616e290ba2bd3a27c
CVE ID: CVE-2024-32481 State: PUBLISHED Published: 2024-04-25T17:00:54.082Z Last Updated: 2024-08-02T02:13:39.300Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: vyperlang Products: vyper Problem Types: CWE-681 Description: Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. Starting in version 0.3.8 and prior to version 0.4.0b1, when looping over a `range` of the form `range(start, start + N)`, if `start` is negative, the execution will always revert. This issue is caused by an incorrect assertion inserted by the code generation of the range `stmt.parse_For_range()`. The issue arises when `start` is signed, instead of using `sle`,