Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rolled browser binary paths and parameters. When the tool executes, the attacker-controlled executable/parameters are run on the host and circumvent the intended nodevm sandbox restrictions, resulting in execution of arbitrary code in the context of the host. This vulnerability was incorrectly assigned as a duplicate CVE-2025-26319 by the developers and should be considered distinct from that identifier. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://flowiseai.com/ - https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5w3r-f6gm-c25w - https://github.com/FlowiseAI/Flowise/pull/5231 - https://www.vulncheck.com/advisories/flowise-auth-command-execution-and-sa
ps://github.com/FlowiseAI/Flowise/pull/5231 - https://www.vulncheck.com/advisories/flowise-auth-command-execution-and-sandbox-bypass-via-puppeteer-and-playwright-packages
CVE ID: CVE-2025-34269 State: REJECTED Published: 2025-10-30T21:19:26.752Z Last Updated: 2025-11-07T18:20:15.157Z Description: No description available.
CVE ID: CVE-2025-34270 State: PUBLISHED Published: 2025-10-30T21:22:28.949Z Last Updated: 2025-11-17T21:36:24.190Z Vendors: Nagios Products: Log Server Problem Types: CWE-312, CWE-522 Description: Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the AD/LDAP user import functionality as it fails to obfuscate the password field during import. As a result, the plaintext password supplied for imported accounts may be exposed in the user interface, logs, or other diagnostic output. This can leak sensitive credentials to administrators or anyone with access to import results. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/s
ss to import results. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#log-server-2024R2 - https://www.nagios.com/changelog/#log-server - https://support.nagios.com/kb/article/authenticating-and-importing-users-with-ad-and-ldap-995.html - https://www.vulncheck.com/advisories/nagios-log-server-ad-ldap-import-password-not-obfuscated
CVE ID: CVE-2025-34271 State: PUBLISHED Published: 2025-10-30T21:22:51.043Z Last Updated: 2025-11-17T21:36:24.505Z Vendors: Nagios Products: Log Server Problem Types: CWE-319 Description: Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the cluster manager component when requesting sensitive credentials from peer nodes over an unencrypted channel even when SSL/TLS is enabled in the product configuration. As a result, an attacker positioned on the network path can intercept credentials in transit. Captured credentials could allow the attacker to authenticate as a cluster node or service account, enabling further unauthorized access, lateral movement, or system comprom
enticate as a cluster node or service account, enabling further unauthorized access, lateral movement, or system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#log-server-2024R2 - https://www.nagios.com/changelog/#log-server - https://www.vulncheck.com/advisories/nagios-log-server-cluster-manager-credential-requests-sent-over-plaintext
CVE ID: CVE-2025-34272 State: PUBLISHED Published: 2025-10-30T21:25:10.601Z Last Updated: 2025-11-17T21:36:24.794Z Vendors: Nagios Products: Log Server Problem Types: CWE-200 Description: In Nagios Log Server versions prior to 2024R2.0.3, when a user's configured default dashboard is deleted, the application does not reliably fall back to an empty, default dashboard. In some implementations this can result in an unexpected dashboard being presented as the user's default view. Depending on the product's dashboard sharing and access policies, this behavior may cause information exposure or unexpected privilege exposure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://w
on exposure or unexpected privilege exposure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#log-server-2024R2 - https://www.nagios.com/changelog/#log-server - https://www.vulncheck.com/advisories/nagios-log-server-non-empty-default-dashboard-fallback
CVE ID: CVE-2025-34273 State: PUBLISHED Published: 2025-10-30T21:24:43.451Z Last Updated: 2025-11-17T21:36:24.971Z Vendors: Nagios Products: Log Server Problem Types: CWE-863 Description: Nagios Log Server versions prior to 2024R2.0.3 contain an incorrect authorization vulnerability that allows non-administrator users to delete global dashboards. The application did not correctly enforce authorization checks for the global dashboard deletion workflow, enabling lower-privileged users to remove dashboards that affect other users or the overall monitoring UI. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#log-server-2024R2 - https://ww
t Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#log-server-2024R2 - https://www.nagios.com/changelog/#log-server - https://www.vulncheck.com/advisories/nagios-log-server-non-admin-dashboard-deletion
CVE ID: CVE-2025-34274 State: PUBLISHED Published: 2025-10-30T21:23:54.741Z Last Updated: 2025-11-17T21:36:25.216Z Vendors: Nagios Products: Log Server Problem Types: CWE-250 Description: Nagios Log Server versions prior to 2024R2.0.3 contain an execution with unnecessary privileges vulnerability as it runs its embedded Logstash process as the root user. If an attacker is able to compromise the Logstash process - for example by exploiting an insecure plugin, pipeline configuration injection, or a vulnerability in input parsing - the attacker could execute code with root privileges, resulting in full system compromise. The Logstash service has been altered to run as the lower-privileged 'nagi
vileges, resulting in full system compromise. The Logstash service has been altered to run as the lower-privileged 'nagios' user to reduce this risk associated with a network-facing service that can accept untrusted input or load third-party components. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#log-server-2024R2 - https://www.nagios.com/changelog/#log-server - https://www.vulncheck.com/advisories/nagios-log-server-logstash-process-root-privileges
CVE ID: CVE-2025-34277 State: PUBLISHED Published: 2025-10-30T21:25:32.852Z Last Updated: 2025-11-17T21:36:25.444Z Vendors: Nagios Products: Log Server Problem Types: CWE-94 Description: Nagios Log Server versions prior to 2024R1.3.1 contain a code injection vulnerability where malformed dashboard ID values are not properly validated before being forwarded to an internal API. An attacker able to supply crafted dashboard ID values can cause the system to execute attacker-controlled data, leading to arbitrary code execution in the context of the Log Server process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#log-server - https://ww
Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#log-server - https://www.nagios.com/changelog/#log-server-2024R1 - https://www.vulncheck.com/advisories/nagios-log-server-rce-via-malformed-dashboard-id
CVE ID: CVE-2025-34278 State: PUBLISHED Published: 2025-10-30T21:28:11.933Z Last Updated: 2025-11-17T21:36:25.596Z Vendors: Nagios Products: Network Analyzer Problem Types: CWE-79 Description: Nagios Network Analyzer versions prior to 2024R1 contain a stored cross-site scripting (XSS) vulnerability in the Source Groups page (percentile calculator menu). An attacker can supply a malicious payload which is stored by the application and later rendered in the context of other users. When a victim views the affected page the injected script executes in the victim's browser context. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#network-a
xt. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#network-analyzer - https://www.nagios.com/changelog/#network-analyzer - https://www.vulncheck.com/advisories/nagios-network-analyzer-source-groups-percentile-calculator-menu-stored-xss
CVE ID: CVE-2025-34280 State: PUBLISHED Published: 2025-10-30T21:27:41.203Z Last Updated: 2025-11-17T21:36:25.762Z Vendors: Nagios Products: Network Analyzer Problem Types: CWE-78 Description: Nagios Network Analyzer versions prior to 2024R2.0.1 contain a vulnerability in the LDAP certificate management functionality whereby the certificate removal operation fails to apply adequate input sanitation. An authenticated administrator can trigger command execution on the underlying host in the context of the web application service, resulting in remote code execution with the service's privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/sec
rvice's privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#network-analyzer - https://www.nagios.com/changelog/nagios-network-analyzer/ - https://www.vulncheck.com/advisories/nagios-network-analyzer-rce-in-ldap-certificate-removal-function
CVE ID: CVE-2025-34281 State: PUBLISHED Published: 2025-10-17T18:33:03.941Z Last Updated: 2025-11-19T01:27:12.455Z Vendors: ThingsBoard, Inc. Products: ThingsBoard Problem Types: CWE-79 Description: ThingsBoard versions < 4.2.1 contain a stored cross-site scripting (XSS) vulnerability in the dashboard's Image Upload Gallery feature. An attacker can upload an SVG file containing malicious JavaScript, which may be executed when the file is rendered in the UI. This issue results from insufficient sanitization and improper content-type validation of uploaded SVG files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/thingsboard/thingsboard/releases/tag/v4.2.1
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/thingsboard/thingsboard/releases/tag/v4.2.1 - https://github.com/thingsboard/thingsboard/pull/13927 - https://www.vulncheck.com/advisories/thingsboard-svg-image-stored-xss
CVE ID: CVE-2025-34282 State: PUBLISHED Published: 2025-10-17T18:33:41.829Z Last Updated: 2025-11-19T01:27:04.304Z Vendors: ThingsBoard, Inc. Products: ThingsBoard Problem Types: CWE-918 Description: ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the dashboard's Image Upload Gallery feature. An attacker can upload a malicious SVG file that references a remote URL. If the server processes the SVG file in a way that parses external references, it may initiate unintended outbound requests. This can be used to access internal services or resources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/thingsboard/thingsboa
or resources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/thingsboard/thingsboard/releases/tag/v4.2.1 - https://github.com/thingsboard/thingsboard/pull/13927 - https://www.vulncheck.com/advisories/thingsboard-svg-image-ssrf
CVE ID: CVE-2025-34283 State: PUBLISHED Published: 2025-10-30T21:29:37.293Z Last Updated: 2025-11-17T18:21:50.983Z Vendors: Nagios Products: XI Problem Types: CWE-497 Description: Nagios XI versions prior to 2024R1.4.2 revealed API keys to users who were not authorized for API access when using Neptune themes. An authenticated user without API privileges could view another user's or their own API key value. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-api-key-disclosure-via-neptune-themes
CVE ID: CVE-2025-34284 State: PUBLISHED Published: 2025-10-30T21:30:19.179Z Last Updated: 2025-11-17T18:21:51.157Z Vendors: Nagios Products: XI Problem Types: CWE-78 Description: Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitation enables arbitrary command execution with the privileges of the Nagios XI web application user and can be leveraged to modify configuration, exfiltrate data, disrupt monitoring operations, or execute commands on the underly
be leveraged to modify configuration, exfiltrate data, disrupt monitoring operations, or execute commands on the underlying host operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-authenticated-command-injection-via-winrm-plugin
CVE ID: CVE-2025-34286 State: PUBLISHED Published: 2025-10-30T21:42:44.052Z Last Updated: 2025-11-17T18:21:51.338Z Vendors: Nagios Products: XI Problem Types: CWE-78 Description: Nagios XI versions prior to 2026R1 contain a remote code execution vulnerability in the Core Config Manager (CCM) Run Check command. Insufficient validation/escaping of parameters used to build backend command lines allows an authenticated administrator to inject shell metacharacters that are executed on the server. Successful exploitation results in arbitrary command execution with the privileges of the Nagios XI web application user and can be leveraged to gain control of the underlying host operating system. Addi
of the Nagios XI web application user and can be leveraged to gain control of the underlying host operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-rce-via-run-check-command-in-ccm
CVE ID: CVE-2025-34287 State: PUBLISHED Published: 2025-10-30T21:39:43.482Z Last Updated: 2025-11-17T18:21:51.502Z Vendors: Nagios Products: XI Problem Types: CWE-732 Description: Nagios XI versions prior to 2024R2 contain an improperly owned script, process_perfdata.pl, which is executed periodically as the nagios user but owned by www-data. Because the file was writable by www-data, an attacker with web server privileges could modify its contents, leading to arbitrary code execution as the nagios user when the script is next run. This improper ownership and permission configuration enables local privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
figuration enables local privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-privilege-escalation-via-improperly-owned-script
CVE ID: CVE-2025-34292 State: PUBLISHED Published: 2025-10-27T14:36:52.888Z Last Updated: 2025-10-27T21:09:42.910Z Vendors: BeWelcome Products: Rox Problem Types: CWE-502 Description: Rox, the software running BeWelcome, contains a PHP object injection vulnerability resulting from deserialization of untrusted data. User-controlled input is passed to PHP's unserialize(): the POST parameter `formkit_memory_recovery` in \\RoxPostHandler::getCallbackAction and the 'memory cookie' read by \\RoxModelBase::getMemoryCookie (bwRemember). (1) If present, `formkit_memory_recovery` is processed and passed to unserialize(), and (2) restore-from-memory functionality calls unserialize() on the bwRemember c
processed and passed to unserialize(), and (2) restore-from-memory functionality calls unserialize() on the bwRemember cookie value. Gadget chains present in Rox and bundled libraries enable exploitation of object injection to write arbitrary files or achieve remote code execution. Successful exploitation can lead to full site compromise. This vulnerability was remediated with commit c60bf04 (2025-06-16). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/BeWelcome/rox - https://gist.github.com/mcdruid/c0f7c42b28949c7d86cf77d0c674f398 - https://github.com/BeWelcome/rox/commit/c60bf04 - https://www.vulncheck.com/advisories/rox-php-object-injection-rce
CVE ID: CVE-2025-34293 State: PUBLISHED Published: 2025-10-24T21:16:13.672Z Last Updated: 2025-10-27T15:23:13.831Z Vendors: Naviga Global / Miles 33 Products: GN4 Publishing System Problem Types: CWE-639 Description: GN4 Publishing System versions prior to 2.6 contain an insecure direct object reference (IDOR) vulnerability via the API. Authenticated requests to the API's object endpoints allow an authenticated user to request arbitrary user IDs and receive sensitive account data for those users, including the stored password and the account's security question and answer. The exposed recovery data and encrypted password may be used to reset or take over the target account. Additional Analys
The exposed recovery data and encrypted password may be used to reset or take over the target account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.miles33.com/news/news/5955/naviga--miles-33--acquisition.html - https://nne.navigacloud.com/GN4Help/gn4_introduction_to_gn4.htm - https://www.miles33.com/section/14/gn4 - https://www.vulncheck.com/advisories/gn4-publishing-system-idor-information-disclosure
CVE ID: CVE-2025-34294 State: PUBLISHED Published: 2025-10-28T15:48:15.981Z Last Updated: 2025-11-19T01:26:55.446Z Vendors: Wazuh, Inc. Products: Wazuh Problem Types: CWE-367 Description: Wazuh's File Integrity Monitoring (FIM), when configured with automatic threat removal, contains a time-of-check/time-of-use (TOCTOU) race condition that can allow a local, low-privileged attacker to cause the Wazuh service (running as NT AUTHORITY\SYSTEM) to delete attacker-controlled files or paths. The root cause is insufficient synchronization and lack of robust final-path validation in the threat-removal workflow: the agent records an active-response action and proceeds to perform deletion without guar
n the threat-removal workflow: the agent records an active-response action and proceeds to perform deletion without guaranteeing the deletion target is the originally intended file. This can result in SYSTEM-level arbitrary file or folder deletion and consequent local privilege escalation. Wazuh made an attempted fix via pull request 8697 on 2025-07-10, but that change was incomplete. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wazuh.com/blog/detecting-and-responding-to-malicious-files-using-cdb-lists-and-active-response/ - https://documentation.wazuh.com/current/user-manual/capabilities/active-response/index.html - https://github.com/wazuh/wazuh-documentation/pu
.wazuh.com/current/user-manual/capabilities/active-response/index.html - https://github.com/wazuh/wazuh-documentation/pull/8697 - https://www.vulncheck.com/advisories/wazuh-file-integrity-monitoring-and-active-response-arbitrary-file-deletion-as-system
CVE ID: CVE-2025-34298 State: PUBLISHED Published: 2025-10-30T21:25:52.056Z Last Updated: 2025-11-17T21:36:25.925Z Vendors: Nagios Products: Log Server Problem Types: CWE-281 Description: Nagios Log Server versions prior to 2024R1.3.2 contain a privilege escalation vulnerability in the account email-change workflow. A user could set their own email to an invalid value and, due to insufficient validation and authorization checks tied to email identity state, trigger inconsistent account state that granted elevated privileges or bypassed intended access controls. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-log-server-2024r1/ - https:
nalyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-log-server-2024r1/ - https://www.vulncheck.com/advisories/nagios-log-server-set-email-privilege-escalation
CVE ID: CVE-2025-34299 State: PUBLISHED Published: 2025-11-07T13:51:33.738Z Last Updated: 2025-11-19T01:26:43.554Z Vendors: Monsta Limited of New Zealand Products: Monsta FTP Problem Types: CWE-434 Description: Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads. This flaw enables attackers to execute arbitrary code by uploading a specially crafted file from a malicious (S)FTP server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.monstaftp.com/notes/ - https://labs.watchtowr.com/whats-that-coming-over-the-hill-monsta-ftp-remote-code-execution-cve-2025-34299/ - https://www.vulncheck.com/advisories/monst
-that-coming-over-the-hill-monsta-ftp-remote-code-execution-cve-2025-34299/ - https://www.vulncheck.com/advisories/monsta-ftp-unauthenticated-arbitrary-file-upload
CVE ID: CVE-2025-34300 State: PUBLISHED Published: 2025-07-16T12:57:27.400Z Last Updated: 2025-11-04T22:20:17.088Z Vendors: Sawtooth Software Products: Lighthouse Studio Problem Types: CWE-20, CWE-1336 Description: A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the ciwweb.pl http://ciwweb.pl/ Perl web application. Exploitation allows an unauthenticated attacker can execute arbitrary commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://sawtoothsoftware.com/resources/software-downloads/lighthouse-studio/version-history - https://slcyber.io/assetnote-security-research-center/rce-in-the-most-popular-s
oads/lighthouse-studio/version-history - https://slcyber.io/assetnote-security-research-center/rce-in-the-most-popular-survey-software-youve-never-heard-of/ - https://www.vulncheck.com/advisories/sawtooth-software-lighthouse-studio-preauthentication-rce
CVE ID: CVE-2025-34301 State: PUBLISHED Published: 2025-10-28T14:35:16.716Z Last Updated: 2025-10-28T16:02:33.613Z Vendors: IPFire.org Products: IPFire Problem Types: CWE-79 Description: IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code into the COUNTRY_CODE parameter when creating a location group. When a user adds a new location group, the application issues an HTTP POST request with the ACTION parameter set to savelocationgrp, and the value of the COUNTRY_CODE parameter determines the flag displayed for that group. The value of this parameter is stored and late
the COUNTRY_CODE parameter determines the flag displayed for that group. The value of this parameter is stored and later rendered in the web interface without proper sanitization or encoding, allowing malicious scripts to be executed in the context of other users viewing the affected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ipfire.org/blog/ipfire-2-29-core-update-198-released - https://bugzilla.ipfire.org/show_bug.cgi?id=13876 - https://www.vulncheck.com/advisories/ipfire-stored-xss-via-location-group-creation
CVE ID: CVE-2025-34302 State: PUBLISHED Published: 2025-10-28T14:33:32.017Z Last Updated: 2025-10-29T19:00:31.741Z Vendors: IPFire.org Products: IPFire Problem Types: CWE-79 Description: IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the PROT parameter when creating a new service. When a user adds a service, the application issues an HTTP POST request with the ACTION parameter set to saveservice, and the protocol type is specified in the PROT parameter. The value of this parameter is stored and later rendered in the web interface without proper sanitiza
he PROT parameter. The value of this parameter is stored and later rendered in the web interface without proper sanitization or encoding, allowing injected scripts to execute in the context of other users viewing the affected service entry. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ipfire.org/blog/ipfire-2-29-core-update-198-released - https://bugzilla.ipfire.org/show_bug.cgi?id=13877 - https://www.vulncheck.com/advisories/ipfire-stored-xss-via-service-creation