Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-30349 State: PUBLISHED Published: 2025-03-21T00:00:00.000Z Last Updated: 2025-04-03T19:57:27.039Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: Horde Products: IMP Problem Types: CWE-79 Description: Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to account takeover via a crafted text/html e-mail message with an onerror attribute (that may use base64-encoded JavaScript code), as exploited in the wild in March 2025. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/horde/webmail/releases/tag/v5.2.22 - https://www.horde.org/apps/
CVE Program Container: References: - https://github.com/horde/webmail/releases/tag/v5.2.22 - https://www.horde.org/apps/imp - https://lists.horde.org/archives/imp/Week-of-Mon-20250317/057781.html - https://web.archive.org/web/20250321152616/https://lists.horde.org/archives/imp/Week-of-Mon-20250317/057781.html - https://www.horde.org/download/horde - https://github.com/horde/imp/blob/fd9212ca3b72ff834504af4886f7d95138619bd4/doc/INSTALL.rst?plain=1#L61-L62 - https://www.horde.org/apps/horde - https://github.com/horde/imp/blob/fd9212ca3b72ff834504af4886f7d95138619bd4/doc/INSTALL.rst?plain=1#L23-L25 - https://lists.horde.org/archives/imp/Week-of-Mon-20250317/057784.html - https://github.com/hord
LL.rst?plain=1#L23-L25 - https://lists.horde.org/archives/imp/Week-of-Mon-20250317/057784.html - https://github.com/horde/imp/releases/tag/v6.2.27 - https://github.com/horde/base/releases/tag/v5.2.23 - https://web.archive.org/web/20250321162434/https://lists.horde.org/archives/imp/Week-of-Mon-20250317/057784.html - https://github.com/natasaka/CVE-2025-30349/
CVE ID: CVE-2025-30350 State: PUBLISHED Published: 2025-03-26T16:49:48.880Z Last Updated: 2025-03-26T18:04:30.065Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: directus Products: directus Problem Types: CWE-770 Description: Directus is a real-time API and App dashboard for managing SQL database content. The `@directus/storage-driver-s3` package starting in version 9.22.0 and prior to version 12.0.1, corresponding to Directus starting in version 9.22.0 and prior to 11.5.0, is vulnerable to asset unavailability after a burst of HEAD requests. Some tools use Directus to sync content and assets, and some of those tools use the HEAD method to check the existen
ts. Some tools use Directus to sync content and assets, and some of those tools use the HEAD method to check the existence of files. When making many HEAD requests at once, at some point, all assets are eventually served as 403. This causes denial of assets for all policies of Directus, including Admin and Public. Version 12.0.1 of the `@directus/storage-driver-s3` package, corresponding to version 11.5.0 of Directus, fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/directus/directus/security/advisories/GHSA-rv78-qqrq-73m5
CVE ID: CVE-2025-30351 State: PUBLISHED Published: 2025-03-26T17:13:42.096Z Last Updated: 2025-06-09T18:05:31.255Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: directus Products: directus Problem Types: CWE-672 Description: Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 10.10.0 and prior to version 11.5.0, a suspended user can use the token generated in session auth mode to access the API despite their status. This happens because there is a check missing in `verifySessionJWT` to verify that a user is actually still active and allowed to access the API. One can extract the session token obtained by, e.g.
that a user is actually still active and allowed to access the API. One can extract the session token obtained by, e.g. login in to the app while still active and then, after the user has been suspended continue to use that token until it expires. Version 11.5.0 patches the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/directus/directus/security/advisories/GHSA-56p6-qw3c-fq2g - https://github.com/directus/directus/commit/ef179931c55b50c110feca8404901d5633940771
CVE ID: CVE-2025-30352 State: PUBLISHED Published: 2025-03-26T17:18:39.567Z Last Updated: 2025-03-27T15:15:07.652Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: directus Products: directus Problem Types: CWE-200 Description: Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0-alpha.4 and prior to version 11.5.0, the `search` query parameter allows users with access to a collection to filter items based on fields they do not have permission to view. This allows the enumeration of unknown field contents. The searchable columns (numbers & strings) are not checked against permissions when injecting the `wh
wn field contents. The searchable columns (numbers & strings) are not checked against permissions when injecting the `where` clauses for applying the search query. This leads to the possibility of enumerating those un-permitted fields. Version 11.5.0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/directus/directus/security/advisories/GHSA-7wq3-jr35-275c - https://github.com/directus/directus/commit/ac5a9964d9926f20dc063a74cb417dc7bbad676d
CVE ID: CVE-2025-30353 State: PUBLISHED Published: 2025-03-26T17:26:51.803Z Last Updated: 2025-03-26T17:44:22.290Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: directus Products: directus Problem Types: CWE-200 Description: Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.12.0 and prior to version 11.5.0, when a Flow with the "Webhook" trigger and the "Data of Last Operation" response body encounters a ValidationError thrown by a failed condition operation, the API response includes sensitive data. This includes environmental variables, sensitive API keys, user accountability information, and operational
sitive data. This includes environmental variables, sensitive API keys, user accountability information, and operational data. This issue poses a significant security risk, as any unintended exposure of this data could lead to potential misuse. Version 11.5.0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/directus/directus/security/advisories/GHSA-fm3h-p9wm-h74h
CVE ID: CVE-2025-30354 State: PUBLISHED Published: 2025-04-01T14:21:39.625Z Last Updated: 2025-04-02T15:54:07.928Z Vendors: usebruno Products: bruno Problem Types: CWE-942 Description: Bruno is an open source IDE for exploring and testing APIs. A bug in the assertion runtime caused assert expressions to run in Developer Mode, even if Safe Mode was selected. The bug resulted in the sandbox settings to be ignored for the particular case where a single request is run/sent. This vulnerability's attack surface is limited strictly to scenarios where users import collections from untrusted or malicious sources. The exploit requires deliberate action from the user—specifically, downloading and openi
untrusted or malicious sources. The exploit requires deliberate action from the user—specifically, downloading and opening an externally provided malicious Bruno collection. The vulnerability is fixed in 1.39.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/usebruno/bruno/security/advisories/GHSA-hffg-7v8v-79j3
CVE ID: CVE-2025-30355 State: PUBLISHED Published: 2025-03-27T00:59:27.996Z Last Updated: 2025-03-27T13:47:50.179Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: element-hq Products: synapse Problem Types: CWE-20 Description: Synapse is an open source Matrix homeserver implementation. A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vulnerability has been exploited in the wild and has been fixed in Synapse v1.127.1. No known workarounds are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/element-hq/synapse/security/advisories/G
tional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/element-hq/synapse/security/advisories/GHSA-v56r-hwv5-mxg6 - https://github.com/element-hq/synapse/commit/2277df2a1eb685f85040ef98fa21d41aa4cdd389 - https://github.com/element-hq/synapse/releases/tag/v1.127.1
CVE ID: CVE-2025-30356 State: PUBLISHED Published: 2025-04-01T22:06:22.576Z Last Updated: 2025-04-02T13:46:42.702Z Vendors: nasa Products: CryptoLib Problem Types: CWE-191, CWE-787 Description: CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. In 1.3.3 and earlier, a heap buffer overflow vulnerability persists in the Crypto_TC_ApplySecurity function due to an incomplete validation check on the fl (frame length) field. Although CVE-2025-29912 addressed an underflow issue involving fl, the patch fails to fully preve
(frame length) field. Although CVE-2025-29912 addressed an underflow issue involving fl, the patch fails to fully prevent unsafe calculations. As a result, an attacker can still craft malicious frames that cause a negative tf_payload_len, which is then interpreted as a large unsigned value, leading to a heap buffer overflow in a memcpy call. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nasa/CryptoLib/security/advisories/GHSA-6w2x-w7w3-85w2 - https://github.com/nasa/CryptoLib/commit/59d1bce7608c94c6131ef4877535075b0649799c
CVE ID: CVE-2025-30357 State: PUBLISHED Published: 2025-04-18T15:51:21.670Z Last Updated: 2025-04-18T16:04:12.364Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:H) Vendors: NamelessMC Products: Nameless Problem Types: CWE-706 Description: NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, if a malicious user is leaving spam comments on many topics then an administrator, unable to manually remove each spam comment, may delete the malicious account. Once an administrator deletes the malicious user's account, all their posts (comments) along with the associated topics (by unrelated users) will be marked as delet
user's account, all their posts (comments) along with the associated topics (by unrelated users) will be marked as deleted. This issue has been patched in version 2.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/NamelessMC/Nameless/security/advisories/GHSA-22mc-7c9m-gv8h - https://github.com/NamelessMC/Nameless/commit/7040924e27f99aa486c619a5b4ca809051a1ca7f - https://github.com/NamelessMC/Nameless/releases/tag/v2.2.0
CVE ID: CVE-2025-30358 State: PUBLISHED Published: 2025-03-27T14:49:11.592Z Last Updated: 2025-03-27T15:04:59.072Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: mesop-dev Products: mesop Problem Types: CWE-915 Description: Mesop is a Python-based UI framework that allows users to build web applications. A class pollution vulnerability in Mesop prior to version 0.14.1 allows attackers to overwrite global variables and class attributes in certain Mesop modules during runtime. This vulnerability could directly lead to a denial of service (DoS) attack against the server. Additionally, it could also result in other severe consequences given the application's impl
attack against the server. Additionally, it could also result in other severe consequences given the application's implementation, such as identity confusion, where an attacker could impersonate an assistant or system role within conversations. This impersonation could potentially enable jailbreak attacks when interacting with large language models (LLMs). Just like the Javascript's prototype pollution, this vulnerability could leave a way for attackers to manipulate the intended data-flow or control-flow of the application at runtime and lead to severe consequences like remote code execution when gadgets are available. Users should upgrade to version 0.14.1 to obtain a fix for the issue. A
emote code execution when gadgets are available. Users should upgrade to version 0.14.1 to obtain a fix for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mesop-dev/mesop/security/advisories/GHSA-f3mf-hm6v-jfhh - https://github.com/mesop-dev/mesop/commit/748e20d4a363d89b841d62213f5b0c6b4bed788f
CVE ID: CVE-2025-30359 State: PUBLISHED Published: 2025-06-03T17:39:16.531Z Last Updated: 2025-06-03T17:50:03.130Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: webpack Products: webpack-dev-server Problem Types: CWE-749 Description: webpack-dev-server allows users to use webpack with a development server that provides live reloading. Prior to version 5.2.1, webpack-dev-server users' source code may be stolen when they access a malicious web site. Because the request for classic script by a script tag is not subject to same origin policy, an attacker can inject a malicious script in their site and run the script. Note that the attacker has to know the port
an attacker can inject a malicious script in their site and run the script. Note that the attacker has to know the port and the output entrypoint script path. Combined with prototype pollution, the attacker can get a reference to the webpack runtime variables. By using `Function::toString` against the values in `__webpack_modules__`, the attacker can get the source code. Version 5.2.1 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-4v9v-hfq4-rm2v - https://github.com/webpack/webpack-dev-server/commit/d2575ad8dfed9207ed810b5ea0ccf465115a2239
CVE ID: CVE-2025-30360 State: PUBLISHED Published: 2025-06-03T17:41:59.457Z Last Updated: 2025-06-03T17:58:12.605Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: webpack Products: webpack-dev-server Problem Types: CWE-346 Description: webpack-dev-server allows users to use webpack with a development server that provides live reloading. Prior to version 5.2.1, webpack-dev-server users' source code may be stolen when you access a malicious web site with non-Chromium based browser. The `Origin` header is checked to prevent Cross-site WebSocket hijacking from happening, which was reported by CVE-2018-14732. But webpack-dev-server always allows IP address `Origi
t hijacking from happening, which was reported by CVE-2018-14732. But webpack-dev-server always allows IP address `Origin` headers. This allows websites that are served on IP addresses to connect WebSocket. An attacker can obtain source code via a method similar to that used to exploit CVE-2018-14732. Version 5.2.1 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-9jgg-88mc-972h - https://github.com/webpack/webpack-dev-server/commit/5c9378bb01276357d7af208a0856ca2163db188e - https://github.com/webpack/webpack-dev-server/commit/72efaab83381a0e1c4914adf401cbd210b7de7eb - https:
856ca2163db188e - https://github.com/webpack/webpack-dev-server/commit/72efaab83381a0e1c4914adf401cbd210b7de7eb - https://github.com/webpack/webpack-dev-server/blob/55220a800ba4e30dbde2d98785ecf4c80b32f711/lib/Server.js#L3113-L3127
CVE ID: CVE-2025-30361 State: PUBLISHED Published: 2025-03-27T16:22:42.924Z Last Updated: 2025-03-27T18:49:27.739Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-287 Description: WeGIA is a Web manager for charitable institutions. A security vulnerability was identified in versions prior to 3.2.6, where it is possible to change a user's password without verifying the old password. This issue exists in the control.php endpoint and allows unauthorized attackers to bypass authentication and authorization mechanisms to reset the password of any user, including admin accounts. Version 3.2.6 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gith
n accounts. Version 3.2.6 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-m6qw-r3m9-jf7h
CVE ID: CVE-2025-30362 State: PUBLISHED Published: 2025-03-27T16:23:55.947Z Last Updated: 2025-03-27T18:43:33.703Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-79 Description: WeGIA is a Web manager for charitable institutions. A stored Cross-Site Scripting (XSS) vulnerability was identified in versions prior to 3.2.8. This vulnerability allows unauthorized scripts to be executed within the user's browser context. Stored XSS is particularly critical, as the malicious code is permanently stored on the server and executed whenever a compromised page is loaded, affecting all users accessing this page. Version 3.2.8 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichmen
affecting all users accessing this page. Version 3.2.8 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-fmcm-gp6j-xr87
CVE ID: CVE-2025-30363 State: PUBLISHED Published: 2025-03-27T16:26:08.713Z Last Updated: 2025-03-27T18:45:34.485Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-79 Description: WeGIA is a Web manager for charitable institutions. A stored Cross-Site Scripting (XSS) vulnerability was identified in versions prior to 3.2.6. This vulnerability allows unauthorized scripts to be executed within the user's browser context. Stored XSS is particularly critical, as the malicious code is permanently stored on the server and executed whenever a compromised page is loaded, affecting all users accessing this page. Version 3.2.6 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichmen
affecting all users accessing this page. Version 3.2.6 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-qhfm-2qfp-h4m3
CVE ID: CVE-2025-30364 State: PUBLISHED Published: 2025-03-27T16:27:26.630Z Last Updated: 2025-03-27T18:44:33.518Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89 Description: WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.2.8 in the endpoint /WeGIA/html/funcionario/remuneracao.php, in the id_funcionario parameter. This vulnerability allows the execution of arbitrary SQL commands, which can compromise the confidentiality, integrity, and availability of stored data. Version 3.2.8 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/secur
e issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-x3ff-5qp7-43qv
CVE ID: CVE-2025-30365 State: PUBLISHED Published: 2025-03-27T16:28:45.276Z Last Updated: 2025-03-27T18:43:47.680Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89 Description: WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.2.8 in the endpoint /WeGIA/html/socio/sistema/controller/query_geracao_auto.php, specifically in the query parameter. This vulnerability allows the execution of arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. Version 3.2.8 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCe
on 3.2.8 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-ghx8-h92j-h422
CVE ID: CVE-2025-30366 State: PUBLISHED Published: 2025-03-27T16:29:45.478Z Last Updated: 2025-03-27T18:42:57.036Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-79 Description: WeGIA is a Web manager for charitable institutions. Versions prior to 3.2.8 are vulnerable to stored cross-site scripting. This vulnerability allows unauthorized scripts to be executed within the user's browser context. Stored XSS is particularly critical, as the malicious code is permanently stored on the server and executed whenever a compromised page is loaded, affecting all users accessing this page. Version 3.2.8 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
cessing this page. Version 3.2.8 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-pwr9-fr8r-8h48
CVE ID: CVE-2025-30367 State: PUBLISHED Published: 2025-03-27T16:30:34.283Z Last Updated: 2025-03-27T18:40:10.011Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89 Description: WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.2.6 in the nextPage parameter of the /WeGIA/controle/control.php endpoint. This vulnerability allows attacker to manipulate SQL queries and access sensitive database information, such as table names and sensitive data. Version 3.2.6 contains a fix for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-7j9v-xgmm-h7wr
CVE ID: CVE-2025-30368 State: PUBLISHED Published: 2025-03-31T16:26:48.673Z Last Updated: 2025-03-31T18:59:32.854Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: zulip Products: zulip Problem Types: CWE-566 Description: Zulip is an open-source team collaboration tool. The API for deleting an organization export is supposed to be restricted to organization administrators, but its handler failed to check that the field belongs to the same organization as the user. Therefore, an administrator of any organization was incorrectly allowed to delete an export of a different organization. This is fixed in Zulip Server 10.1. Additional Analyst Notes: - CISA ADP Vulnric
an export of a different organization. This is fixed in Zulip Server 10.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zulip/zulip/security/advisories/GHSA-rmhr-5ffq-qcrc - https://github.com/zulip/zulip/commit/07dcee36b2a34d63429d7a706f880628cf3433df - https://zulip.readthedocs.io/en/latest/overview/changelog.html#zulip-server-10-1
CVE ID: CVE-2025-30369 State: PUBLISHED Published: 2025-03-31T16:32:54.301Z Last Updated: 2025-03-31T18:17:38.643Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: zulip Products: zulip Problem Types: CWE-566 Description: Zulip is an open-source team collaboration tool. The API for deleting an organization custom profile field is supposed to be restricted to organization administrators, but its handler failed to check that the field belongs to the same organization as the user. Therefore, an administrator of any organization was incorrectly allowed to delete custom profile fields belonging to a different organization. This is fixed in Zulip Server 10.1. Addition
owed to delete custom profile fields belonging to a different organization. This is fixed in Zulip Server 10.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zulip/zulip/security/advisories/GHSA-fcgx-q63f-7gw4