Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
n usernames, that is intended to prevent username enumeration by returning a generic response for both valid and invalid usernames. This vulnerability allows an unauthenticated attacker to bypass this protection by submitting arbitrary userIDs to the select account page and distinguishing between valid and invalid accounts based on the system's response. For effective exploitation, an attacker needs to iterate through possible userIDs, but the impact can be limited by implementing rate limiting or similar measures. The issue has been patched in versions 4.0.3, 3.4.0, and 2.71.15. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zitadel/zitadel/security/advi
71.15. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zitadel/zitadel/security/advisories/GHSA-g9c3-xh6v-fr86 - https://github.com/zitadel/zitadel/commit/7abe759c95cb360524d88b51744d03cbb6e4dcdb - https://github.com/zitadel/zitadel/releases/tag/v2.71.15 - https://github.com/zitadel/zitadel/releases/tag/v3.4.0 - https://github.com/zitadel/zitadel/releases/tag/v4.0.3 - https://zitadel.com/docs/self-hosting/manage/production#limits-and-quotas
CVE ID: CVE-2025-57771 State: PUBLISHED Published: 2025-08-22T16:35:47.577Z Last Updated: 2025-08-22T20:03:48.870Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: RooCodeInc Products: Roo-Code Problem Types: CWE-78 Description: Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions prior to 3.25.5, Roo-Code fails to properly handle process substitution and single ampersand characters in the command parsing logic for auto-execute commands. If a user has enabled auto-approved execution for a command such as ls, an attacker who can submit crafted prompts to the agent may inject arbitrary commands to be executed alongside the i
ls, an attacker who can submit crafted prompts to the agent may inject arbitrary commands to be executed alongside the intended command. Exploitation requires attacker access to submit prompts and for the user to have enabled auto-approved command execution, which is disabled by default. This vulnerability could allow an attacker to execute arbitrary code. The issue is fixed in version 3.25.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-wrh9-463x-7wvv - https://github.com/RooCodeInc/Roo-Code/commit/de359a465c67aefc67553aa2b464591b602c4bdc
CVE ID: CVE-2025-57772 State: PUBLISHED Published: 2025-08-25T17:00:20.382Z Last Updated: 2025-08-25T20:36:07.604Z Vendors: dataease Products: dataease Problem Types: CWE-94 Description: DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.12, there is a H2 JDBC RCE bypass in DataEase. If the JDBC URL meets criteria, the getJdbcUrl method is returned, which acts as the getter for the JdbcUrl parameter provided. This bypasses H2's filtering logic and returns the H2 JDBC URL, allowing the "driver":"org.h2.Driver" to specify the H2 driver for the JDBC connection. The vulnerability has been fixed in version 2.10.12. Additional Analyst Notes: - CISA
2 driver for the JDBC connection. The vulnerability has been fixed in version 2.10.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dataease/dataease/security/advisories/GHSA-v37q-vh67-9rqv - https://github.com/dataease/dataease/commit/1644d81dff46272b09570fa1f4a8f83f01f37440
CVE ID: CVE-2025-57773 State: PUBLISHED Published: 2025-08-25T16:42:11.118Z Last Updated: 2025-08-25T20:35:26.707Z Vendors: dataease Products: dataease Problem Types: CWE-502, CWE-94 Description: DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.12, because DB2 parameters are not filtered, a JNDI injection attack can be directly launched. JNDI triggers an AspectJWeaver deserialization attack, writing to various files. This vulnerability requires commons-collections 4.x and aspectjweaver-1.9.22.jar. The vulnerability has been fixed in version 2.10.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dataease/
fixed in version 2.10.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dataease/dataease/security/advisories/GHSA-7r8j-6whv-4j5p - https://github.com/dataease/dataease/commit/8d04e92d44e1bac9284e9e64df5afd7f96d9373c
CVE ID: CVE-2025-57774 State: PUBLISHED Published: 2025-09-02T18:15:10.516Z Last Updated: 2025-09-02T19:26:41.041Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Digilent Products: DASYLab Problem Types: CWE-1285 Description: There is an out of bounds write vulnerability due to improper bounds checking resulting in invalid data when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. The vulnerability affects all versions of DASYLab. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ni.com
ity affects all versions of DASYLab. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulnerabilities-in-digilent-dasylab.html
CVE ID: CVE-2025-57775 State: PUBLISHED Published: 2025-09-02T18:21:16.129Z Last Updated: 2025-09-02T19:19:22.961Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Digilent Products: DASYLab Problem Types: CWE-1285 Description: There is a heap-based Buffer Overflow vulnerability due to improper bounds checking when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. The vulnerability affects all versions of DASYLab. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ni.com/en/support/security
ions of DASYLab. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulnerabilities-in-digilent-dasylab.html
CVE ID: CVE-2025-57776 State: PUBLISHED Published: 2025-09-02T18:16:01.400Z Last Updated: 2025-09-02T19:26:22.716Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Digilent Products: DASYLab Problem Types: CWE-1285 Description: There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. The vulnerability affects all versions of DASYLab. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.
erability affects all versions of DASYLab. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulnerabilities-in-digilent-dasylab.html
CVE ID: CVE-2025-57777 State: PUBLISHED Published: 2025-09-02T18:22:00.738Z Last Updated: 2025-09-02T19:10:31.598Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Digilent Products: DASYLab Problem Types: CWE-1285 Description: There is an out of bounds write vulnerability due to improper bounds checking in displ2.dll when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. The vulnerability affects all versions of DASYLab. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ni.com/en/support/
all versions of DASYLab. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulnerabilities-in-digilent-dasylab.html
CVE ID: CVE-2025-57778 State: PUBLISHED Published: 2025-09-02T18:16:54.772Z Last Updated: 2025-09-02T19:23:38.292Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Digilent Products: DASYLab Problem Types: CWE-1285 Description: There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid source address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. The vulnerability affects all versions of DASYLab. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
he vulnerability affects all versions of DASYLab. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulnerabilities-in-digilent-dasylab.html
CVE ID: CVE-2025-57780 State: PUBLISHED Published: 2025-10-15T15:19:50.430Z Last Updated: 2025-10-16T03:56:23.881Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: F5 Products: F5OS - Appliance, F5OS - Chassis Problem Types: CWE-250 Description: A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to escalate their privileges. A successful exploit may allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000156771
CVE ID: CVE-2025-57781 State: PUBLISHED Published: 2025-10-06T05:16:29.331Z Last Updated: 2025-10-06T17:19:23.118Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: DENSO TEN Limited. Products: Multiple installers of DENSO TEN drive recorder viewer Problem Types: CWE-427 Description: The installers of DENSO TEN drive recorder viewer contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.denso-ten.com/jp/information/topics/2025/1002 - https:/
nalyst Notes: - CISA ADP Vulnrichment: References: - https://www.denso-ten.com/jp/information/topics/2025/1002 - https://jvn.jp/en/jp/JVN95806263/
CVE ID: CVE-2025-57788 State: PUBLISHED Published: 2025-08-20T00:00:00.000Z Last Updated: 2025-09-11T14:02:30.986Z Vendors: Commvault Products: CommCell Problem Types: CWE-259 Description: A vulnerability in a known login mechanism allows unauthenticated attackers to execute API calls without requiring user credentials. RBAC helps limit the exposure but does not eliminate risk. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://documentation.commvault.com/securityadvisories/CV_2025_08_3.html
CVE ID: CVE-2025-57789 State: PUBLISHED Published: 2025-08-20T03:22:08.764Z Last Updated: 2025-09-10T15:54:49.968Z Vendors: Commvault Products: CommCell Problem Types: CWE-257 Description: During the brief window between installation and the first administrator login, remote attackers may exploit the default credential to gain admin control. This is limited to the setup phase, before any jobs have been configured. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://documentation.commvault.com/securityadvisories/CV_2025_08_4.html
CVE ID: CVE-2025-57790 State: PUBLISHED Published: 2025-08-20T03:22:10.697Z Last Updated: 2025-09-11T14:03:15.394Z Vendors: Commvault Products: CommCell Problem Types: CWE-36 Description: A security vulnerability has been identified that allows remote attackers to perform unauthorized file system access through a path traversal issue. The vulnerability may lead to remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://documentation.commvault.com/securityadvisories/CV_2025_08_2.html
CVE ID: CVE-2025-57791 State: PUBLISHED Published: 2025-08-20T03:22:12.633Z Last Updated: 2025-09-10T15:41:57.068Z Vendors: Commvault Products: CommCell Problem Types: CWE-88 Description: A security vulnerability has been identified that allows remote attackers to inject or manipulate command-line arguments passed to internal components due to insufficient input validation. Successful exploitation results in a valid user session for a low privilege role. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://documentation.commvault.com/securityadvisories/CV_2025_08_1.html
CVE ID: CVE-2025-57797 State: PUBLISHED Published: 2025-08-27T05:43:18.734Z Last Updated: 2025-08-27T14:13:49.733Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: PFU Limited Products: ScanSnap Manager installers Problem Types: CWE-266 Description: Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authenticated local attacker may escalate privileges and execute an arbitrary command. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.pfu.ricoh.com/imaging/news/news20230606.html - https://www.pfu.ricoh.com/scansnap/software/sshome/requirem
- https://www.pfu.ricoh.com/imaging/news/news20230606.html - https://www.pfu.ricoh.com/scansnap/software/sshome/requirement.html - https://jvn.jp/en/jp/JVN69684540/
CVE ID: CVE-2025-57799 State: PUBLISHED Published: 2025-09-01T15:46:27.137Z Last Updated: 2025-09-02T18:09:44.881Z Vendors: lemon8866 Products: StreamVault Problem Types: CWE-78 Description: StreamVault is a multi-platform video parsing and downloading tool. Prior to version 250822, after logging into the StreamVault-system, an attacker can modify certain system parameters, construct malicious commands, execute command injection attacks against the system, and ultimately gain server privileges. Users of all versions of the StreamVault system to date who have not modified their background passwords or use weak passwords are at risk of having their systems taken over via remote command executi
eir background passwords or use weak passwords are at risk of having their systems taken over via remote command execution. This issue has been patched in version 250822. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lemon8866/StreamVault/security/advisories/GHSA-qg4r-92hv-g9f4 - https://github.com/lemon8866/StreamVault/commit/2e3f1f54b7d8a4e6389b640796866ac1108780ef
CVE ID: CVE-2025-57800 State: PUBLISHED Published: 2025-08-22T17:02:04.472Z Last Updated: 2025-08-22T17:25:46.579Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: advplyr Products: audiobookshelf Problem Types: CWE-523, CWE-598, CWE-601 Description: Audiobookshelf is an open-source self-hosted audiobook server. In versions 2.6.0 through 2.26.3, the application does not properly restrict redirect callback URLs during OIDC authentication. An attacker can craft a login link that causes Audiobookshelf to store an arbitrary callback in a cookie, which is later used to redirect the user after authentication. The server then issues a 302 redirect to the attacker-cont
hich is later used to redirect the user after authentication. The server then issues a 302 redirect to the attacker-controlled URL, appending sensitive OIDC tokens as query parameters. This allows an attacker to obtain the victim's tokens and perform full account takeover, including creating persistent admin users if the victim is an administrator. Tokens are further leaked via browser history, Referer headers, and server logs. This vulnerability impacts all Audiobookshelf deployments using OIDC; no IdP misconfiguration is required. The issue is fixed in version 2.28.0. No known workarounds exist. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/advplyr/aud
known workarounds exist. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/advplyr/audiobookshelf/security/advisories/GHSA-vpc2-w73p-39px - https://github.com/advplyr/audiobookshelf/commit/99a3867ce934b797e21e6ba5390d4b679e35f7cb
CVE ID: CVE-2025-57801 State: PUBLISHED Published: 2025-08-22T19:54:05.854Z Last Updated: 2025-08-22T20:06:00.913Z Vendors: Consensys Products: gnark Problem Types: CWE-347 Description: gnark is a zero-knowledge proof system framework. In versions prior to 0.14.0, the Verify function in eddsa.go and ecdsa.go used the S value from a signature without asserting that 0 ≤ S < order, leading to a signature malleability vulnerability. Because gnark’s native EdDSA and ECDSA circuits lack essential constraints, multiple distinct witnesses can satisfy the same public inputs. In protocols where nullifiers or anti-replay checks are derived from R and S, this enables signature malleability and may allow
ocols where nullifiers or anti-replay checks are derived from R and S, this enables signature malleability and may allow double spending. This issue has been addressed in version 0.14.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Consensys/gnark/security/advisories/GHSA-95v9-hv42-pwrj - https://github.com/Consensys/gnark/commit/0ba6730f05537a351517998add89a61a0d82716e
CVE ID: CVE-2025-57802 State: PUBLISHED Published: 2025-08-25T17:39:06.395Z Last Updated: 2025-08-25T17:52:01.098Z Vendors: airlinklabs Products: daemon Problem Types: CWE-61 Description: Airlink's Daemon interfaces with Docker and the Panel to provide secure access for controlling instances via the Panel. In version 1.0.0, an attacker with access to the affected container can create symbolic links inside the mounted directory (/app/data). Because the container bind-mounts an arbitrary host path, these symlinks can point to sensitive locations on the host filesystem. When the application or other processes follow these symlinks, the attacker can gain unauthorized read access to host files ou
he application or other processes follow these symlinks, the attacker can gain unauthorized read access to host files outside the container. This issue has been patched in version 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/airlinklabs/daemon/security/advisories/GHSA-hrfv-wm8p-mg8m - https://github.com/airlinklabs/daemon/commit/5e6222dd9eec6d7cb0876b12507e3d6011797693
CVE ID: CVE-2025-57803 State: PUBLISHED Published: 2025-08-26T17:25:59.148Z Last Updated: 2025-11-03T18:13:43.901Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ImageMagick Products: ImageMagick Problem Types: CWE-122, CWE-190 Description: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2 for ImageMagick's 32-bit build, a 32-bit integer overflow in the BMP encoder’s scanline-stride computation collapses bytes_per_line (stride) to a tiny value while the per-row writer still emits 3 × width bytes for 24-bpp images. The row base pointer advances using the (overflowed) stride, s
row writer still emits 3 × width bytes for 24-bpp images. The row base pointer advances using the (overflowed) stride, so the first row immediately writes past its slot and into adjacent heap memory with attacker-controlled bytes. This is a classic, powerful primitive for heap corruption in common auto-convert pipelines. This issue has been patched in versions 6.9.13-28 and 7.1.2-2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mxvv-97wh-cfmm - https://github.com/ImageMagick/ImageMagick/commit/2c55221f4d38193adcb51056c14cf238fbcc35d7 - https://github.com/dlemstra/Magick.NET/release
ImageMagick/ImageMagick/commit/2c55221f4d38193adcb51056c14cf238fbcc35d7 - https://github.com/dlemstra/Magick.NET/releases/tag/14.8.1
CVE ID: CVE-2025-57804 State: PUBLISHED Published: 2025-08-25T21:04:52.642Z Last Updated: 2025-11-03T18:13:44.839Z Vendors: python-hyper Products: h2 Problem Types: CWE-93 Description: h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior to version 4.3.0, an HTTP/2 request splitting vulnerability allows attackers to perform request smuggling attacks by injecting CRLF characters into headers. This occurs when servers downgrade HTTP/2 requests to HTTP/1.1 without properly validating header names/values, enabling attackers to manipulate request boundaries and bypass security controls. This issue has been patched in version 4.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment
ypass security controls. This issue has been patched in version 4.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/python-hyper/h2/security/advisories/GHSA-847f-9342-265h - https://github.com/python-hyper/h2/commit/035e9899f95e3709af098f578bfc3cd302298e3a
CVE ID: CVE-2025-57805 State: PUBLISHED Published: 2025-08-25T21:15:50.878Z Last Updated: 2025-08-26T19:09:47.842Z Vendors: The-Scratch-Channel Products: tsc-web-client Problem Types: CWE-20 Description: The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint used to publish articles, can be used to post an article in any category with any date, regardless of who's logged in. This issue has been patched in version 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/The-Scratch-Channel/tsc-web-client/security/advisories/GHSA-h5rj-2466-qr23
CVE ID: CVE-2025-57806 State: PUBLISHED Published: 2025-09-03T00:47:24.262Z Last Updated: 2025-09-03T15:44:45.651Z Vendors: LearningCircuit Products: local-deep-research Problem Types: CWE-312, CWE-522 Description: Local Deep Research is an AI-powered research assistant for deep, iterative research. Versions 0.2.0 through 0.6.7 stored confidential information, including API keys, in a local SQLite database without encryption. This behavior was not clearly documented outside of the database architecture page. Users were not given the ability to configure the database location, allowing anyone with access to the container or host filesystem to retrieve sensitive data in plaintext by accessing
n, allowing anyone with access to the container or host filesystem to retrieve sensitive data in plaintext by accessing the .db file. This is fixed in version 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-4h8c-qrcq-cv5c - https://github.com/LearningCircuit/local-deep-research/pull/578 - http://github.com/LearningCircuit/local-deep-research/releases/tag/v1.0.0
CVE ID: CVE-2025-57807 State: PUBLISHED Published: 2025-09-05T21:16:02.742Z Last Updated: 2025-11-03T18:13:45.798Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: ImageMagick Products: ImageMagick Problem Types: CWE-787, CWE-122, CWE-131 Description: ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob(), which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob(), which then expands by quantum + length (amortized) instead of offset + length, and copies to data + offset. When offset ≫ extent, the