Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ade to 0.31.22. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cube-js/cube.js/security/advisories/GHSA-6jqm-3c9g-pch7 - https://github.com/cube-js/cube.js/commit/3c614674fed6ca17df08bbba8c835ef110167570 - https://github.com/cube-js/cube.js/commit/f1140de508e359970ac82b50bae1c4bf152f6041
CVE ID: CVE-2022-23511 State: PUBLISHED Published: 2022-12-12T00:00:00.000Z Last Updated: 2025-04-23T16:28:53.545Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L) Vendors: aws Products: amazon-cloudwatch-agent Problem Types: CWE-274 Description: A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and logs from Amazon EC2 instances and on-premises servers, in versions up to and including v1.247354. When users trigger a repair of the Agent, a pop-up window opens with SYSTEM permissions. Users with administrative access to affected hosts may use this to create a new command prompt as NT AUTHORITY\SYSTEM. To t
rs with administrative access to affected hosts may use this to create a new command prompt as NT AUTHORITY\SYSTEM. To trigger this issue, the third party must be able to access the affected host and elevate their privileges such that they're able to trigger the agent repair process. They must also be able to install the tools required to trigger the issue. This issue does not affect the CloudWatch Agent for macOS or Linux. Agent users should upgrade to version 1.247355 of the CloudWatch Agent to address this issue. There is no recommended work around. Affected users must update the installed version of the CloudWatch Agent to address this issue. Additional Analyst Notes: - CVE Program Conta
pdate the installed version of the CloudWatch Agent to address this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aws/amazon-cloudwatch-agent/security/advisories/GHSA-j8x2-2m5w-j939 - https://github.com/aws/amazon-cloudwatch-agent/commit/6119858864c317ff26f41f576c169148d1250837#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52
CVE ID: CVE-2022-23512 State: PUBLISHED Published: 2022-12-14T13:09:36.800Z Last Updated: 2025-04-21T19:20:37.099Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: metersphere Products: metersphere Problem Types: CWE-22 Description: MeterSphere is a one-stop open source continuous testing platform. Versions prior to 2.4.1 are vulnerable to Path Injection in ApiTestCaseService::deleteBodyFiles which takes a user-controlled string id and passes it to ApiTestCaseService, which uses the user-provided value (testId) in new File(BODY_FILE_DIR + "/" + testId), being deleted later by file.delete(). By adding some camouflage parameters to the url, an attacker can target
+ testId), being deleted later by file.delete(). By adding some camouflage parameters to the url, an attacker can target files on the server. The vulnerability has been fixed in v2.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/metersphere/metersphere/security/advisories/GHSA-5mwp-xw7p-5j27
CVE ID: CVE-2022-23513 State: PUBLISHED Published: 2022-12-22T23:17:19.812Z Last Updated: 2025-04-15T13:32:52.300Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: pi-hole Products: AdminLTE Problem Types: CWE-284 Description: Pi-Hole is a network-wide ad blocking via your own Linux hardware, AdminLTE is a Pi-hole Dashboard for stats and more. In case of an attack, the threat actor will obtain the ability to perform an unauthorized query for blocked domains on `queryads` endpoint. In the case of application, this vulnerability exists because of a lack of validation in code on a root server path: `/admin/scripts/pi-hole/phpqueryads.php.` Potential threat actor
of a lack of validation in code on a root server path: `/admin/scripts/pi-hole/phpqueryads.php.` Potential threat actor(s) are able to perform an unauthorized query search in blocked domain lists. This could lead to the disclosure for any victims' personal blacklists. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pi-hole/AdminLTE/security/advisories/GHSA-6qh8-6rrj-7497 - https://github.com/pi-hole/AdminLTE/releases/tag/v5.18 - http://packetstormsecurity.com/files/174460/AdminLTE-PiHole-Broken-Access-Control.html
CVE ID: CVE-2022-23514 State: PUBLISHED Published: 2022-12-14T13:19:25.943Z Last Updated: 2025-11-03T21:45:53.018Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: flavorjones Products: loofah Problem Types: CWE-1333 Description: Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah < 2.19.1 contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption. This issue is patched in version 2.19.1. Additional Analyst Notes: - CVE Program Containe
ough CPU resource consumption. This issue is patched in version 2.19.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/flavorjones/loofah/security/advisories/GHSA-486f-hjj9-9vhh - https://hackerone.com/reports/1684163 - https://lists.debian.org/debian-lts-announce/2023/09/msg00011.html
CVE ID: CVE-2022-23515 State: PUBLISHED Published: 2022-12-14T13:23:02.054Z Last Updated: 2025-11-03T21:45:54.553Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: flavorjones Products: loofah Problem Types: CWE-79 Description: Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah >= 2.1.0, < 2.19.1 is vulnerable to cross-site scripting via the image/svg+xml media type in data URIs. This issue is patched in version 2.19.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flavorjones/loofah/security/advisories/GHSA-228g-948r-83gx - https://github.com/f
iner: References: - https://github.com/flavorjones/loofah/security/advisories/GHSA-228g-948r-83gx - https://github.com/flavorjones/loofah/issues/101 - https://hackerone.com/reports/1694173 - https://lists.debian.org/debian-lts-announce/2023/09/msg00011.html
CVE ID: CVE-2022-23516 State: PUBLISHED Published: 2022-12-14T13:26:11.741Z Last Updated: 2025-11-03T21:45:56.014Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: flavorjones Products: loofah Problem Types: CWE-674 Description: Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah >= 2.2.0, < 2.19.1 uses recursion for sanitizing CDATA sections, making it susceptible to stack exhaustion and raising a SystemStackError exception. This may lead to a denial of service through CPU resource consumption. This issue is patched in version 2.19.1. Users who are unable to upgrade may be able to mit
gh CPU resource consumption. This issue is patched in version 2.19.1. Users who are unable to upgrade may be able to mitigate this vulnerability by limiting the length of the strings that are sanitized. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/flavorjones/loofah/security/advisories/GHSA-3x8r-x6xp-q4vm - https://lists.debian.org/debian-lts-announce/2023/09/msg00011.html
CVE ID: CVE-2022-23517 State: PUBLISHED Published: 2022-12-14T16:10:22.304Z Last Updated: 2025-11-03T21:45:57.498Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: rails Products: rails-html-sanitizer Problem Types: CWE-1333 Description: rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption. This issue has been patched in version 1.4.4. Additional Analyst Notes: - CVE Pr
rvice through CPU resource consumption. This issue has been patched in version 1.4.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-5x79-w82f-gw8w - https://github.com/rails/rails-html-sanitizer/commit/56c61c0cebd1e493e8ad7bca2a0191609a4a6979 - https://hackerone.com/reports/1684163 - https://lists.debian.org/debian-lts-announce/2023/09/msg00012.html
CVE ID: CVE-2022-23518 State: PUBLISHED Published: 2022-12-14T16:22:34.460Z Last Updated: 2025-11-03T21:45:59.030Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: rails Products: rails-html-sanitizer Problem Types: CWE-79 Description: rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Versions >= 1.0.3, < 1.4.4 are vulnerable to cross-site scripting via data URIs when used in combination with Loofah >= 2.1.0. This issue is patched in version 1.4.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-mcvf-2q2m-x72m - https://github.com/rai
rences: - https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-mcvf-2q2m-x72m - https://github.com/rails/rails-html-sanitizer/issues/135 - https://hackerone.com/reports/1694173 - https://lists.debian.org/debian-lts-announce/2023/09/msg00012.html
CVE ID: CVE-2022-23519 State: PUBLISHED Published: 2022-12-14T16:50:14.949Z Last Updated: 2025-11-03T21:46:00.596Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: rails Products: rails-html-sanitizer Problem Types: CWE-79 Description: rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Prior to version 1.4.4, a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer may allow an attacker to inject content if the application developer has overridden the sanitizer's allowed tags in either of the following ways: allow both "math" and "style" elements, or allow both "svg" and "style" elements. Code is o
ither of the following ways: allow both "math" and "style" elements, or allow both "svg" and "style" elements. Code is only impacted if allowed tags are being overridden. . This issue is fixed in version 1.4.4. All users overriding the allowed tags to include "math" or "svg" and "style" should either upgrade or use the following workaround immediately: Remove "style" from the overridden allowed tags, or remove "math" and "svg" from the overridden allowed tags. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-9h9g-93gc-623h - https://hackerone.com/reports/1656627 - https://lists.debian.org/debian-lts-announ
rity/advisories/GHSA-9h9g-93gc-623h - https://hackerone.com/reports/1656627 - https://lists.debian.org/debian-lts-announce/2023/09/msg00012.html
CVE ID: CVE-2022-23520 State: PUBLISHED Published: 2022-12-14T17:07:31.954Z Last Updated: 2025-11-03T21:46:02.126Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: rails Products: rails-html-sanitizer Problem Types: CWE-79 Description: rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Prior to version 1.4.4, there is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer due to an incomplete fix of CVE-2022-32209. Rails::Html::Sanitizer may allow an attacker to inject content if the application developer has overridden the sanitizer's allowed tags to allow both "select" and "style" elements. C
if the application developer has overridden the sanitizer's allowed tags to allow both "select" and "style" elements. Code is only impacted if allowed tags are being overridden. This issue is patched in version 1.4.4. All users overriding the allowed tags to include both "select" and "style" should either upgrade or use this workaround: Remove either "select" or "style" from the overridden allowed tags. NOTE: Code is _not_ impacted if allowed tags are overridden using either the :tags option to the Action View helper method sanitize or the :tags option to the instance method SafeListSanitizer#sanitize. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rails
od SafeListSanitizer#sanitize. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-rrfc-7g8p-99q8 - https://hackerone.com/reports/1654310 - https://lists.debian.org/debian-lts-announce/2023/09/msg00012.html
CVE ID: CVE-2022-23521 State: PUBLISHED Published: 2023-01-17T22:17:17.765Z Last Updated: 2025-02-13T16:32:19.291Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: git Products: git Problem Types: CWE-190 Description: Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a `.gitattributes` file to the repository, which contains a set of file patterns and the attributes that should be set for paths matching this pattern. When parsing gitattributes, multiple integer overflows can occur when there is a huge number of path patterns, a huge number of attributes
ributes, multiple integer overflows can occur when there is a huge number of path patterns, a huge number of attributes for a single pattern, or when the declared attribute names are huge. These overflows can be triggered via a crafted `.gitattributes` file that may be part of the commit history. Git silently splits lines longer than 2KB when parsing gitattributes from a file, but not when parsing them from the index. Consequentially, the failure mode depends on whether the file exists in the working tree, the index or both. This integer overflow can result in arbitrary heap reads and writes, which may result in remote code execution. The problem has been patched in the versions published on
p reads and writes, which may result in remote code execution. The problem has been patched in the versions published on 2023-01-17, going back to v2.30.7. Users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/git/git/security/advisories/GHSA-c738-c5qq-xg89 - https://github.com/git/git/commit/508386c6c5857b4faa2c3e491f422c98cc69ae76 - https://security.gentoo.org/glsa/202312-15
CVE ID: CVE-2022-23522 State: PUBLISHED Published: 2023-03-30T18:04:56.599Z Last Updated: 2025-02-12T14:56:13.708Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N) Vendors: mindsdb Products: mindsdb Problem Types: CWE-22 Description: MindsDB is an open source machine learning platform. An unsafe extraction is being performed using `shutil.unpack_archive()` from a remotely retrieved tarball. Which may lead to the writing of the extracted files to an unintended location. This vulnerability is sometimes called a **TarSlip** or a **ZipSlip variant**. Unpacking files using the high-level function `shutil.unpack_archive()` from a potentially malicious tarball without validati
king files using the high-level function `shutil.unpack_archive()` from a potentially malicious tarball without validating that the destination file path remained within the intended destination directory may cause files to be overwritten outside the destination directory. An attacker could craft a malicious tarball with a filename path, such as `../../../../../../../../etc/passwd`, and then serve the archive remotely using a personal bucket `s3`, thus, retrieve the tarball through **mindsdb** and overwrite the system files of the hosting server. This issue has been addressed in version 22.11.4.3. Users are advised to upgrade. Users unable to upgrade should avoid ingesting archives from untr
ed in version 22.11.4.3. Users are advised to upgrade. Users unable to upgrade should avoid ingesting archives from untrusted sources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mindsdb/mindsdb/security/advisories/GHSA-7x45-phmr-9wqp
CVE ID: CVE-2022-23523 State: PUBLISHED Published: 2022-12-13T07:41:47.047Z Last Updated: 2025-04-18T18:28:35.965Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: rust-vmm Products: linux-loader Problem Types: CWE-125, CWE-119 Description: In versions prior to 0.8.1, the linux-loader crate uses the offsets and sizes provided in the ELF headers to determine the offsets to read from. If those offsets point beyond the end of the file this could lead to Virtual Machine Monitors using the `linux-loader` crate entering an infinite loop if the ELF header of the kernel they are loading was modified in a malicious manner. This issue has been addressed in 0.8.1. The iss
eader of the kernel they are loading was modified in a malicious manner. This issue has been addressed in 0.8.1. The issue can be mitigated by ensuring that only trusted kernel images are loaded or by verifying that the headers do not point beyond the end of the file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rust-vmm/linux-loader/security/advisories/GHSA-52h2-m2cf-9jh6 - https://github.com/rust-vmm/linux-loader/pull/125
CVE ID: CVE-2022-23524 State: PUBLISHED Published: 2022-12-15T00:28:34.540Z Last Updated: 2025-04-18T15:59:27.542Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: helm Products: helm Problem Types: CWE-400 Description: Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to Uncontrolled Resource Consumption, resulting in Denial of Service. Input to functions in the _strvals_ package can cause a stack overflow. In Go, a stack overflow cannot be recovered from. Applications that use functions from the _strvals_ package in the Helm SDK can have a Denial of Service attack when they use this package and it
ctions from the _strvals_ package in the Helm SDK can have a Denial of Service attack when they use this package and it panics. This issue has been patched in 3.10.3. SDK users can validate strings supplied by users won't create large arrays causing significant memory usage before passing them to the _strvals_ functions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/helm/helm/security/advisories/GHSA-6rx9-889q-vv2r
CVE ID: CVE-2022-23525 State: PUBLISHED Published: 2022-12-15T00:38:09.873Z Last Updated: 2025-04-18T15:58:58.833Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: helm Products: helm Problem Types: CWE-476 Description: Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in the _repo_package. The _repo_ package contains a handler that processes the index file of a repository. For example, the Helm client adds references to chart repositories where charts are managed. The _repo_ package parses the index file of the repository and loads it into structures Go can work with. Som
e managed. The _repo_ package parses the index file of the repository and loads it into structures Go can work with. Some index files can cause array data structures to be created causing a memory violation. Applications that use the _repo_ package in the Helm SDK to parse an index file can suffer a Denial of Service when that input causes a panic that cannot be recovered from. The Helm Client will panic with an index file that causes a memory violation panic. Helm is not a long running service so the panic will not affect future uses of the Helm client. This issue has been patched in 3.10.3. SDK users can validate index files that are correctly formatted before passing them to the _repo_ fu
patched in 3.10.3. SDK users can validate index files that are correctly formatted before passing them to the _repo_ functions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/helm/helm/security/advisories/GHSA-53c4-hhmh-vw5q - https://github.com/helm/helm/commit/638ebffbc2e445156f3978f02fd83d9af1e56f5b
CVE ID: CVE-2022-23526 State: PUBLISHED Published: 2022-12-15T00:43:40.383Z Last Updated: 2025-04-18T15:58:33.758Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: helm Products: helm Problem Types: CWE-476 Description: Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in the_chartutil_ package that can cause a segmentation violation. The _chartutil_ package contains a parser that loads a JSON Schema validation file. For example, the Helm client when rendering a chart will validate its values with the schema file. The _chartutil_ package parses the schema file and loads it
ering a chart will validate its values with the schema file. The _chartutil_ package parses the schema file and loads it into structures Go can work with. Some schema files can cause array data structures to be created causing a memory violation. Applications that use the _chartutil_ package in the Helm SDK to parse a schema file can suffer a Denial of Service when that input causes a panic that cannot be recovered from. Helm is not a long running service so the panic will not affect future uses of the Helm client. This issue has been patched in 3.10.3. SDK users can validate schema files that are correctly formatted before passing them to the _chartutil_ functions. Additional Analyst Notes:
te schema files that are correctly formatted before passing them to the _chartutil_ functions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/helm/helm/security/advisories/GHSA-67fx-wx78-jx33 - https://github.com/helm/helm/commit/bafafa8bb1b571b61d7a9528da8d40c307dade3d
CVE ID: CVE-2022-23527 State: PUBLISHED Published: 2022-12-14T17:22:30.105Z Last Updated: 2025-04-18T14:23:56.649Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: zmartzone Products: mod_auth_openidc Problem Types: CWE-601 Description: mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server. Versions prior to 2.4.12.2 are vulnerable to Open Redirect. When providing a logout parameter to the redirect URI, the existing code in oidc_validate_redirect_url() does not properly check for URLs that start with /\t, leading to an open redirect. This issue has been patched in version 2.4.12.2. Users unable to upgr
that start with /\t, leading to an open redirect. This issue has been patched in version 2.4.12.2. Users unable to upgrade can mitigate the issue by configuring mod_auth_openidc to only allow redirection when the destination matches a given regular expression with OIDCRedirectURLsAllowed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-q6f2-285m-gr53 - https://github.com/zmartzone/mod_auth_openidc/blob/v2.4.12.1/auth_openidc.conf#L975-L984 - https://lists.debian.org/debian-lts-announce/2023/07/msg00020.html
CVE ID: CVE-2022-23529 State: REJECTED Published: 2022-12-21T20:50:06.685Z Last Updated: 2025-02-13T15:46:20.507Z Description: No description available.