Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-43401 State: PUBLISHED Published: 2024-08-19T16:24:29.698Z Last Updated: 2024-08-21T14:23:29.403Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-269 Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user without script/programming right can trick a user with elevated rights to edit a content with a malicious payload using a WYSIWYG editor. The user with elevated rights is not warned beforehand that they are going to edit possibly dangerous content. The payload is executed at edit time. This vulnerability has been patched
are going to edit possibly dangerous content. The payload is executed at edit time. This vulnerability has been patched in XWiki 15.10RC1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-f963-4cq8-2gw7 - https://jira.xwiki.org/browse/XWIKI-20331 - https://jira.xwiki.org/browse/XWIKI-21311 - https://jira.xwiki.org/browse/XWIKI-21481 - https://jira.xwiki.org/browse/XWIKI-21482 - https://jira.xwiki.org/browse/XWIKI-21483 - https://jira.xwiki.org/browse/XWIKI-21484 - https://jira.xwiki.org/browse/XWIKI-21485 - https://jira.xwiki.org/browse/XWIKI-21486 - https://jira.xwiki.org/browse/XWIKI-21487 - https://jira.xwik
/XWIKI-21485 - https://jira.xwiki.org/browse/XWIKI-21486 - https://jira.xwiki.org/browse/XWIKI-21487 - https://jira.xwiki.org/browse/XWIKI-21488 - https://jira.xwiki.org/browse/XWIKI-21489 - https://jira.xwiki.org/browse/XWIKI-21490
CVE ID: CVE-2024-43402 State: PUBLISHED Published: 2024-09-04T15:29:04.752Z Last Updated: 2024-09-04T15:50:20.290Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: rust-lang Products: rust Problem Types: CWE-78, CWE-88 Description: Rust is a programming language. The fix for CVE-2024-24576, where `std::process::Command` incorrectly escaped arguments when invoking batch files on Windows, was incomplete. Prior to Rust version 1.81.0, it was possible to bypass the fix when the batch file name had trailing whitespace or periods (which are ignored and stripped by Windows). To determine whether to apply the `cmd.exe` escaping rules, the original fix for the vulnerabi
and stripped by Windows). To determine whether to apply the `cmd.exe` escaping rules, the original fix for the vulnerability checked whether the command name ended with `.bat` or `.cmd`. At the time that seemed enough, as we refuse to invoke batch scripts with no file extension. Windows removes trailing whitespace and periods when parsing file paths. For example, `.bat. .` is interpreted by Windows as `.bat`, but the original fix didn't check for that. Affected users who are using Rust 1.77.2 or greater can remove the trailing whitespace (ASCII 0x20) and trailing periods (ASCII 0x2E) from the batch file name to bypass the incomplete fix and enable the mitigations. Users are affected if their
SCII 0x2E) from the batch file name to bypass the incomplete fix and enable the mitigations. Users are affected if their code or one of their dependencies invoke a batch script on Windows with trailing whitespace or trailing periods in the name, and pass untrusted arguments to it. Rust 1.81.0 will update the standard library to apply the CVE-2024-24576 mitigations to all batch files invocations, regardless of the trailing chars in the file name. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rust-lang/rust/security/advisories/GHSA-2xg3-7mm6-98jj - https://blog.rust-lang.org/2024/04/09/cve-2024-24576.html - https://learn.microsoft.com/en-us/troubleshoot/wi
mm6-98jj - https://blog.rust-lang.org/2024/04/09/cve-2024-24576.html - https://learn.microsoft.com/en-us/troubleshoot/windows-client/shell-experience/file-folder-name-whitespace-characters
CVE ID: CVE-2024-43403 State: PUBLISHED Published: 2024-08-20T21:16:41.049Z Last Updated: 2024-08-21T16:35:41.804Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: kanisterio Products: kanister Problem Types: CWE-269 Description: Kanister is a data protection workflow management tool. The kanister has a deployment called default-kanister-operator, which is bound with a ClusterRole called edit via ClusterRoleBinding. The "edit" ClusterRole is one of Kubernetes default-created ClusterRole, and it has the create/patch/udpate verbs of daemonset resources, create verb of serviceaccount/token resources, and impersonate verb of serviceaccounts resources. A malicious u
sources, create verb of serviceaccount/token resources, and impersonate verb of serviceaccounts resources. A malicious user can leverage access the worker node which has this component to make a cluster-level privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kanisterio/kanister/security/advisories/GHSA-h27c-6xm3-mcqp - https://github.com/kanisterio/kanister/blob/master/helm/kanister-operator/templates/rbac.yaml#L49
CVE ID: CVE-2024-43404 State: PUBLISHED Published: 2024-08-20T14:55:12.928Z Last Updated: 2024-08-20T20:29:22.818Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NicPWNs Products: MEGABOT Problem Types: CWE-95 Description: MEGABOT is a fully customized Discord bot for learning and fun. The `/math` command and functionality of MEGABOT versions < 1.5.0 contains a remote code execution vulnerability due to a Python `eval()`. The vulnerability allows an attacker to inject Python code into the `expression` parameter when using `/math` in any Discord channel. This vulnerability impacts any discord guild utilizing MEGABOT. This vulnerability was fixed in release
Discord channel. This vulnerability impacts any discord guild utilizing MEGABOT. This vulnerability was fixed in release version 1.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/NicPWNs/MEGABOT/security/advisories/GHSA-vhxp-4hwq-w3p2 - https://github.com/NicPWNs/MEGABOT/issues/137 - https://github.com/NicPWNs/MEGABOT/pull/138 - https://github.com/NicPWNs/MEGABOT/commit/71e79e5581ea36313700385b112d863053fb7ed6 - https://github.com/NicPWNs/MEGABOT/releases/tag/v1.5.0
CVE ID: CVE-2024-43405 State: PUBLISHED Published: 2024-09-04T15:36:23.277Z Last Updated: 2024-09-04T16:21:54.357Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: projectdiscovery Products: nuclei Problem Types: CWE-78 Description: Nuclei is a vulnerability scanner powered by YAML based templates. Starting in version 3.0.0 and prior to version 3.3.2, a vulnerability in Nuclei's template signature verification system could allow an attacker to bypass the signature check and possibly execute malicious code via custom code template. The vulnerability is present in the template signature verification process, specifically in the `signer` package. The vulnerability
ility is present in the template signature verification process, specifically in the `signer` package. The vulnerability stems from a discrepancy between how the signature verification process and the YAML parser handle newline characters, combined with the way multiple signatures are processed. This allows an attacker to inject malicious content into a template while maintaining a valid signature for the benign part of the template. CLI users are affected if they execute custom code templates from unverified sources. This includes templates authored by third parties or obtained from unverified repositories. SDK Users are affected if they are developers integrating Nuclei into their platform
ained from unverified repositories. SDK Users are affected if they are developers integrating Nuclei into their platforms, particularly if they permit the execution of custom code templates by end-users. The vulnerability is addressed in Nuclei v3.3.2. Users are strongly recommended to update to this version to mitigate the security risk. As an interim measure, users should refrain from using custom templates if unable to upgrade immediately. Only trusted, verified templates should be executed. Those who are unable to upgrade Nuclei should disable running custom code templates as a workaround. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/projectdiscover
tes as a workaround. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-7h5p-mmpp-hgmm - https://github.com/projectdiscovery/nuclei/commit/0da993afe6d41b4b1b814e8fad23a2acba13c60a
CVE ID: CVE-2024-43406 State: PUBLISHED Published: 2024-08-20T15:00:06.571Z Last Updated: 2024-08-20T17:42:14.854Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: lf-edge Products: ekuiper Problem Types: CWE-89 Description: LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. A user could utilize and exploit SQL Injection to allow the execution of malicious SQL query via Get method in sqlKvStore. This vulnerability is fixed in 1.14.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lf-edge/ekuiper/security/advisories/GHSA-r5ph-4jxm-6j9p - https://github
Vulnrichment: References: - https://github.com/lf-edge/ekuiper/security/advisories/GHSA-r5ph-4jxm-6j9p - https://github.com/lf-edge/ekuiper/commit/1a9c745649438feaac357d282959687012b65503
CVE ID: CVE-2024-43407 State: PUBLISHED Published: 2024-08-21T15:03:41.629Z Last Updated: 2024-08-21T19:54:12.846Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: ckeditor Products: ckeditor4 Problem Types: CWE-79 Description: CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A potential vulnerability has been discovered in CKEditor 4 Code Snippet GeSHi plugin. The vulnerability allowed a reflected XSS attack by exploiting a flaw in the GeSHi syntax highlighter library hosted by the victim. The GeSHi library was included as a vendor dependency in CKEditor 4 source files. In a specific scenario, an attacker could craft a malicious script t
as a vendor dependency in CKEditor 4 source files. In a specific scenario, an attacker could craft a malicious script that could be executed by sending a request to the GeSHi library hosted on a PHP web server. The GeSHi library is no longer actively maintained. Due to the lack of ongoing support and updates, potential security vulnerabilities have been identified with its continued use. To mitigate these risks and enhance the overall security of the CKEditor 4, we have decided to completely remove the GeSHi library as a dependency. This change aims to maintain a secure environment and reduce the risk of any security incidents related to outdated or unsupported software. The fix is be avail
vironment and reduce the risk of any security incidents related to outdated or unsupported software. The fix is be available in version 4.25.0-lts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-7r32-vfj5-c2jv - https://github.com/ckeditor/ckeditor4/commit/71072c9f7f263329841bd38e7e5309074c82ef94 - https://github.com/ckeditor/ckeditor4/commit/951e7d75fcbcaa2590b0719fb0bb0dd0539ca6fa
CVE ID: CVE-2024-43408 State: PUBLISHED Published: 2024-08-20T16:28:48.424Z Last Updated: 2024-09-03T14:56:18.687Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: discourse Products: discourse-placeholder-theme-component Problem Types: CWE-79 Description: Discourse Placeholder Forms will let you build dynamic documentation. Unsanitized and stored user input was injected in the html of the post. The vulnerability is fixed in commit a62f711d5600e4e5d86f342d52932cb6221672e7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse-placeholder-theme-component/security/advisories/GHSA-9wx4-cmv3-g5jw - https://github.
s://github.com/discourse/discourse-placeholder-theme-component/security/advisories/GHSA-9wx4-cmv3-g5jw - https://github.com/discourse/discourse-placeholder-theme-component/commit/a62f711d5600e4e5d86f342d52932cb6221672e7
CVE ID: CVE-2024-43409 State: PUBLISHED Published: 2024-08-20T15:05:04.338Z Last Updated: 2024-09-03T14:58:35.797Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: TryGhost Products: Ghost Problem Types: CWE-284 Description: Ghost is a Node.js content management system. Improper authentication on some endpoints used for member actions would allow an attacker to perform member-only actions, and read member information. This security vulnerability is present in Ghost v4.46.0-v5.89.4. v5.89.5 contains a fix for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/TryGhost/Ghost/security/advisories/GHSA-78x2-cwp9-5j42 -
tes: - CISA ADP Vulnrichment: References: - https://github.com/TryGhost/Ghost/security/advisories/GHSA-78x2-cwp9-5j42 - https://github.com/TryGhost/Ghost/commit/dac25612520b571f58679764ecc27109e641d1db
CVE ID: CVE-2024-43410 State: PUBLISHED Published: 2024-08-21T15:09:34.316Z Last Updated: 2024-08-21T15:35:25.998Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Eugeny Products: russh Problem Types: CWE-770 Description: Russh is a Rust SSH client & server library. Allocating an untrusted amount of memory allows any unauthenticated user to OOM a russh server. An SSH packet consists of a 4-byte big-endian length, followed by a byte stream of this length. After parsing and potentially decrypting the 4-byte length, russh allocates enough memory for this bytestream, as a performance optimization to avoid reallocations later. But this length is entirely untrusted
for this bytestream, as a performance optimization to avoid reallocations later. But this length is entirely untrusted and can be set to any value by the client, causing this much memory to be allocated, which will cause the process to OOM within a few such requests. This vulnerability is fixed in 0.44.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Eugeny/russh/security/advisories/GHSA-vgvv-x7xg-6cqg - https://github.com/Eugeny/russh/commit/f660ea3f64b86d11d19e33076012069f02431e55
CVE ID: CVE-2024-43411 State: PUBLISHED Published: 2024-08-21T15:17:24.176Z Last Updated: 2024-08-22T13:51:02.904Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N) Vendors: ckeditor Products: ckeditor4 Problem Types: CWE-79 Description: CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A theoretical vulnerability has been identified in CKEditor 4.22 (and above). In a highly unlikely scenario where an attacker gains control over the https://cke4.ckeditor.com domain, they could potentially execute an attack on CKEditor 4 instances. The issue impacts only editor instances with enabled version notifications. Please note that this feature is disabled by de
issue impacts only editor instances with enabled version notifications. Please note that this feature is disabled by default in all CKEditor 4 LTS versions. Therefore, if you use CKEditor 4 LTS, it is highly unlikely that you are affected by this vulnerability. If you are unsure, please contact us. The fix is available in version 4.25.0-lts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-6v96-m24v-f58j - https://github.com/ckeditor/ckeditor4/commit/b5069c9cb769ea22eae1cbd7200f22b1cf2e3a7f
CVE ID: CVE-2024-43412 State: PUBLISHED Published: 2024-09-03T16:52:23.643Z Last Updated: 2024-09-03T17:43:03.820Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: xibosignage Products: xibo-cms Problem Types: CWE-79 Description: Xibo is an open source digital signage platform with a web content management system (CMS). Prior to version 4.1.0, a cross-site scripting vulnerability in Xibo CMS allows authorized users to execute arbitrary JavaScript via the file preview function. Users can upload HTML/CSS/JS files into the Xibo Library via the Generic File module to be referenced on Displays and in Layouts. This is intended functionality. When previewing these r
Generic File module to be referenced on Displays and in Layouts. This is intended functionality. When previewing these resources from the Library and Layout editor they are executed in the users browser. This will be disabled in future releases, and users are encouraged to use the new developer tools in 4.1 to design their widgets which require this type of functionality. This behavior has been changed in 4.1.0 to preview previewing of generic files. There are no workarounds for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-336f-wrgx-57gg - https://github.com/xibosignage/xibo-cms/commit/d8f1333946
xibosignage/xibo-cms/security/advisories/GHSA-336f-wrgx-57gg - https://github.com/xibosignage/xibo-cms/commit/d8f13339469d9f19ce591fb2bd7c9e0e0d2da118
CVE ID: CVE-2024-43413 State: PUBLISHED Published: 2024-09-03T18:52:27.153Z Last Updated: 2024-09-03T19:28:40.467Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N) Vendors: xibosignage Products: xibo-cms Problem Types: CWE-79 Description: Xibo is an open source digital signage platform with a web content management system (CMS). Prior to version 4.1.0, a cross-site scripting vulnerability in Xibo CMS allows authorized users to execute JavaScript via the DataSet functionality. Users can design a DataSet with a HTML column which contains JavaScript, which is intended functionality. The JavaScript gets executed on the Data Entry page and in any Layouts which reference it. T
is intended functionality. The JavaScript gets executed on the Data Entry page and in any Layouts which reference it. This behavior has been changed in 4.1.0 to show HTML/CSS/JS as code on the Data Entry page. There are no workarounds for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-pfxp-vxh7-2h9f - https://github.com/xibosignage/xibo-cms/commit/009527855d8bfd0ffb95f5c88ed72b7b5bdebfa1
CVE ID: CVE-2024-43414 State: PUBLISHED Published: 2024-08-27T17:20:05.375Z Last Updated: 2024-08-27T17:58:38.192Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: apollographql Products: federation Problem Types: CWE-674 Description: Apollo Federation is an architecture for declaratively composing APIs into a unified graph. Each team can own their slice of the graph independently, empowering them to deliver autonomously and incrementally. Instances of @apollo/query-planner >=2.0.0 and <2.8.5 are impacted by a denial-of-service vulnerability. @apollo/gateway versions >=2.0.0 and < 2.8.5 and Apollo Router <1.52.1 are also impacted through their use of @apollo/qu
@apollo/gateway versions >=2.0.0 and < 2.8.5 and Apollo Router <1.52.1 are also impacted through their use of @apollo/query-panner. If @apollo/query-planner is asked to plan a sufficiently complex query, it may loop infinitely and never complete. This results in unbounded memory consumption and either a crash or out-of-memory (OOM) termination. This issue can be triggered if you have at least one non-@key field that can be resolved by multiple subgraphs. To identify these shared fields, the schema for each subgraph must be reviewed. The mechanism to identify shared fields varies based on the version of Federation your subgraphs are using. You can check if your subgraphs are using Federation
aries based on the version of Federation your subgraphs are using. You can check if your subgraphs are using Federation 1 or Federation 2 by reviewing their schemas. Federation 2 subgraph schemas will contain a @link directive referencing the version of Federation being used while Federation 1 subgraphs will not. For example, in a Federation 2 subgraph, you will find a line like @link(url: "https://specs.apollo.dev/federation/v2.0"). If a similar @link directive is not present in your subgraph schema, it is using Federation 1. Note that a supergraph can contain a mix of Federation 1 and Federation 2 subgraphs. This issue results from the Apollo query planner attempting to use a Number exceed
eration 1 and Federation 2 subgraphs. This issue results from the Apollo query planner attempting to use a Number exceeding Javascript’s Number.MAX_VALUE in some cases. In Javascript, Number.MAX_VALUE is (2^1024 - 2^971). When the query planner receives an inbound graphql request, it breaks the query into pieces and for each piece, generates a list of potential execution steps to solve the piece. These candidates represent the steps that the query planner will take to satisfy the pieces of the larger query. As part of normal operations, the query planner requires and calculates the number of possible query plans for the total query. That is, it needs the product of the number of query plan c
ates the number of possible query plans for the total query. That is, it needs the product of the number of query plan candidates for each piece of the query. Under normal circumstances, after generating all query plan candidates and calculating the number of all permutations, the query planner moves on to stack rank candidates and prune less-than-optimal options. In particularly complex queries, especially those where fields can be solved through multiple subgraphs, this can cause the number of all query plan permutations to balloon. In worst-case scenarios, this can end up being a number larger than Number.MAX_VALUE. In Javascript, if Number.MAX_VALUE is exceeded, Javascript represents the
p being a number larger than Number.MAX_VALUE. In Javascript, if Number.MAX_VALUE is exceeded, Javascript represents the value as “infinity”. If the count of candidates is evaluated as infinity, the component of the query planner responsible for pruning less-than-optimal query plans does not actually prune candidates, causing the query planner to evaluate many orders of magnitude more query plan candidates than necessary. This issue has been addressed in @apollo/query-planner v2.8.5, @apollo/gateway v2.8.5, and Apollo Router v1.52.1. Users are advised to upgrade. This issue can be avoided by ensuring there are no fields resolvable from multiple subgraphs. If all subgraphs are using Federatio
can be avoided by ensuring there are no fields resolvable from multiple subgraphs. If all subgraphs are using Federation 2, you can confirm that you are not impacted by ensuring that none of your subgraph schemas use the @shareable directive. If you are using Federation 1 subgraphs, you will need to validate that there are no fields resolvable by multiple subgraphs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/apollographql/federation/security/advisories/GHSA-fmj9-77q8-g6c4 - https://www.apollographql.com/docs/federation/query-plans - https://www.apollographql.com/docs/router/configuration/persisted-queries
CVE ID: CVE-2024-43415 State: PUBLISHED Published: 2024-11-12T15:45:51.312Z Last Updated: 2024-11-14T16:31:36.386Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L) Vendors: decidim-ice Products: decidim-module-decidim_awesome Problem Types: CWE-89 Description: An improper neutralization of special elements used in an SQL command in the papertrail/version- model of the decidim_awesome-module <= v0.11.1 (> 0.9.0) allows an authenticated admin user to manipulate sql queries to disclose information, read and write files or execute commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/decidim-ice/decidim-module-decidim_awesome/securi
alyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/decidim-ice/decidim-module-decidim_awesome/security/advisories/GHSA-cxwf-qc32-375f - https://github.com/decidim-ice/decidim-module-decidim_awesome/commit/84374037d34a3ac80dc18406834169c65869f11b - https://pentest.ait.ac.at/security-advisory/decidim-awesome-sql-injection-in-adminaccountability