Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-47794 State: PUBLISHED Published: 2025-01-11T12:25:14.419Z Last Updated: 2025-09-03T12:59:15.669Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent tailcall infinite loop caused by freplace There is a potential infinite loop issue that can occur when using a combination of tail calls and freplace. In an upcoming selftest, the attach target for entry_freplace of tailcall_freplace.c is subprog_tc of tc_bpf2bpf.c, while the tail call in entry_freplace leads to entry_tc. This results in an infinite loop: entry_tc -> subprog_tc -> entry_freplace --tailcall-> entry_tc. The problem arises because the tail_ca
an infinite loop: entry_tc -> subprog_tc -> entry_freplace --tailcall-> entry_tc. The problem arises because the tail_call_cnt in entry_freplace resets to zero each time entry_freplace is executed, causing the tail call mechanism to never terminate, eventually leading to a kernel panic. To fix this issue, the solution is twofold: 1. Prevent updating a program extended by an freplace program to a prog_array map. 2. Prevent extending a program that is already part of a prog_array map with an freplace program. This ensures that: * If a program or its subprogram has been extended by an freplace program, it can no longer be updated to a prog_array map. * If a program has been added to a prog_arra
ed by an freplace program, it can no longer be updated to a prog_array map. * If a program has been added to a prog_array map, neither it nor its subprograms can be extended by an freplace program. Moreover, an extension program should not be tailcalled. As such, return -EINVAL if the program has a type of BPF_PROG_TYPE_EXT when adding it to a prog_array map. Additionally, fix a minor code style issue by replacing eight spaces with a tab for proper formatting. References: - https://git.kernel.org/stable/c/987aa730bad3e1ef66d9f30182294daa78f6387d - https://git.kernel.org/stable/c/d6083f040d5d8f8d748462c77e90547097df936e
CVE ID: CVE-2024-47795 State: PUBLISHED Published: 2025-05-13T21:03:19.879Z Last Updated: 2025-05-15T04:01:22.977Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) oneAPI DPC++/C++ Compiler software Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) oneAPI DPC++/C++ Compiler software before version 2025.0.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01243.html
CVE ID: CVE-2024-47796 State: PUBLISHED Published: 2025-01-13T14:10:57.213Z Last Updated: 2025-11-03T20:40:52.652Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: OFFIS Products: DCMTK Problem Types: CWE-119 Description: An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2122 - https://git.dcmtk.org/?p=dcmtk.git;a=com
rences: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2122 - https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=89a6e399f1e17d08a8bc8cdaa05b2ac9a50cd4f6
CVE ID: CVE-2024-47797 State: PUBLISHED Published: 2024-11-05T08:01:11.961Z Last Updated: 2024-11-05T14:31:41.527Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-787 Description: in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through out-of-bounds write. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-11.md
CVE ID: CVE-2024-47799 State: PUBLISHED Published: 2024-11-12T05:37:16.036Z Last Updated: 2024-11-12T14:32:05.961Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SoftBank Corp. Products: Mesh Wi-Fi router RP562B Problem Types: CWE-497 Description: Exposure of sensitive system information to an unauthorized control sphere issue exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-adjacent authenticated attacker may obtain information of the other devices connected through the Wi-Fi. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/vu/JVNVU90676195/
CVE ID: CVE-2024-47800 State: PUBLISHED Published: 2025-05-13T21:03:21.454Z Last Updated: 2025-05-15T04:01:20.099Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Graphics Driver software Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html
CVE ID: CVE-2024-47801 State: PUBLISHED Published: 2024-10-25T06:18:50.793Z Last Updated: 2024-10-25T14:16:46.537Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: Sharp Corporation, Toshiba Tec Corporation Products: Sharp Digital Full-color MFPs and Monochrome MFPs, e-STUDIO 908, e-STUDIO 1058, e-STUDIO 1208 Problem Types: CWE-79 Description: Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ay cause malicious script executed on the web browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/vu/JVNVU95063136/ - https://global.sharp/products/copier/info/info_security_2024-10.html - https://www.toshibatec.com/information/20241025_01.html
CVE ID: CVE-2024-47803 State: PUBLISHED Published: 2024-10-02T15:35:02.392Z Last Updated: 2025-03-19T17:47:32.684Z Vendors: Jenkins Project Products: Jenkins Description: Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451
CVE ID: CVE-2024-47804 State: PUBLISHED Published: 2024-10-02T15:35:03.020Z Last Updated: 2025-03-14T15:38:41.296Z Vendors: Jenkins Project Products: Jenkins Description: If an attempt is made to create an item of a type prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API and either of these checks fail, Jenkins 2.478 and earlier, LTS 2.462.2 and earlier creates the item in memory, only deleting it from disk, allowing attackers with Item/Configure permission to save the item to persist it, effectively bypassing the item creation restriction. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
fectively bypassing the item creation restriction. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448
CVE ID: CVE-2024-47805 State: PUBLISHED Published: 2024-10-02T15:35:03.653Z Last Updated: 2025-03-14T15:02:44.176Z Vendors: Jenkins Project Products: Jenkins Credentials Plugin Description: Jenkins Credentials Plugin 1380.va_435002fa_924 and earlier, except 1371.1373.v4eb_fa_b_7161e9, does not redact encrypted values of credentials using the `SecretBytes` type when accessing item `config.xml` via REST API or CLI. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3373
CVE ID: CVE-2024-47806 State: PUBLISHED Published: 2024-10-02T15:35:04.269Z Last Updated: 2024-10-02T16:37:13.218Z Vendors: Jenkins Project Products: Jenkins OpenId Connect Authentication Plugin Description: Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `aud` (Audience) claim of an ID Token, allowing attackers to subvert the authentication flow, potentially gaining administrator access to Jenkins. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3441%20(1)
CVE ID: CVE-2024-47807 State: PUBLISHED Published: 2024-10-02T15:35:04.941Z Last Updated: 2024-10-02T16:38:55.789Z Vendors: Jenkins Project Products: Jenkins OpenId Connect Authentication Plugin Description: Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `iss` (Issuer) claim of an ID Token, allowing attackers to subvert the authentication flow, potentially gaining administrator access to Jenkins. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3441%20(2)
CVE ID: CVE-2024-47808 State: PUBLISHED Published: 2024-11-12T12:49:48.462Z Last Updated: 2024-11-12T16:25:18.148Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEC NMS Problem Types: CWE-732 Description: A vulnerability has been identified in SINEC NMS (All versions < V3.0 SP1). The affected application contains a database function, that does not properly restrict the permissions of users to write to the filesystem of the host system. This could allow an authenticated medium-privileged attacker to write arbitrary content to any location in the filesystem of the host system. Additional Analyst Notes: - CISA ADP Vulnrichment:
bitrary content to any location in the filesystem of the host system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-331112.html
CVE ID: CVE-2024-47809 State: PUBLISHED Published: 2025-01-11T12:25:15.356Z Last Updated: 2025-10-01T19:57:22.428Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: dlm: fix possible lkb_resource null dereference This patch fixes a possible null pointer dereference when this function is called from request_lock() as lkb->lkb_resource is not assigned yet, only after validate_lock_args() by calling attach_lkb(). Another issue is that a resource name could be a non printable bytearray and we cannot assume to be ASCII coded. The log functionality is probably never being hit when DLM is used in normal way and no debug logging is enable
I coded. The log functionality is probably never being hit when DLM is used in normal way and no debug logging is enabled. The null pointer dereference can only occur on a new created lkb that does not have the resource assigned yet, it probably never hits the null pointer dereference but we should be sure that other changes might not change this behaviour and we actually can hit the mentioned null pointer dereference. In this patch we just drop the printout of the resource name, the lkb id is enough to make a possible connection to a resource name if this exists. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/6fbdc3980b70e9c1c86eccea7d5ee681
l Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/6fbdc3980b70e9c1c86eccea7d5ee68108008fa7 - https://git.kernel.org/stable/c/2db11504ef82a60c1a2063ba7431a5cd013ecfcb - https://git.kernel.org/stable/c/b98333c67daf887c724cd692e88e2db9418c0861
CVE ID: CVE-2024-47810 State: PUBLISHED Published: 2024-12-18T15:57:33.217Z Last Updated: 2024-12-18T18:03:40.626Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially cra
opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2094
CVE ID: CVE-2024-47812 State: PUBLISHED Published: 2024-10-09T18:12:31.929Z Last Updated: 2024-10-09T19:42:51.058Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L) Vendors: miraheze Products: ImportDump Problem Types: CWE-79, CWE-80 Description: ImportDump is an extension for mediawiki designed to automate user import requests. Anyone who can edit the interface strings of a wiki (typically administrators and interface admins) can embed XSS payloads in the messages for dates, and thus XSS anyone who views Special:RequestImportQueue. This issue has been patched in commit `d054b95` and all users are advised to apply this commit to their branch. Users unable to upgrade may
patched in commit `d054b95` and all users are advised to apply this commit to their branch. Users unable to upgrade may either Prevent access to Special:RequestImportQueue on all wikis, except for the global wiki; and If an interface administrator (or equivalent) level protection is available (which is not provided by default) on the global wiki, protect the affected messages up to that level. This causes the XSS to be virtually useless as users with those rights can already edit Javascript pages. Or Prevent access to Special:RequestImportQueue altogether. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/miraheze/ImportDump/security/advisories/GHSA-465h-45v
t Notes: - CISA ADP Vulnrichment: References: - https://github.com/miraheze/ImportDump/security/advisories/GHSA-465h-45v4-6fx9 - https://github.com/miraheze/ImportDump/commit/d054b9529129af79d4426df24faa80014cb16602 - https://issue-tracker.miraheze.org/T12698
CVE ID: CVE-2024-47813 State: PUBLISHED Published: 2024-10-09T18:07:49.686Z Last Updated: 2024-10-09T19:43:53.508Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L) Vendors: bytecodealliance Products: wasmtime Problem Types: CWE-367 Description: Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a `wasmtime::Engine`'s internal type registry was susceptible to double-unregistration bugs due to a race condition, leading to panics and potentially type registry corruption. That registry corruption could, following an additional and particular sequence of concurrent events, lead to violations of WebAssembly's control-flow integrity (C
n additional and particular sequence of concurrent events, lead to violations of WebAssembly's control-flow integrity (CFI) and type safety. Users that do not use `wasmtime::Engine` across multiple threads are not affected. Users that only create new modules across threads over time are additionally not affected. Reproducing this bug requires creating and dropping multiple type instances (such as `wasmtime::FuncType` or `wasmtime::ArrayType`) concurrently on multiple threads, where all types are associated with the same `wasmtime::Engine`. **Wasm guests cannot trigger this bug.** See the "References" section below for a list of Wasmtime types-related APIs that are affected. Wasmtime maintain
bug.** See the "References" section below for a list of Wasmtime types-related APIs that are affected. Wasmtime maintains an internal registry of types within a `wasmtime::Engine` and an engine is shareable across threads. Types can be created and referenced through creation of a `wasmtime::Module`, creation of `wasmtime::FuncType`, or a number of other APIs where the host creates a function (see "References" below). Each of these cases interacts with an engine to deduplicate type information and manage type indices that are used to implement type checks in WebAssembly's `call_indirect` function, for example. This bug is a race condition in this management where the internal type registry co
all_indirect` function, for example. This bug is a race condition in this management where the internal type registry could be corrupted to trigger an assert or contain invalid state. Wasmtime's internal representation of a type has individual types (e.g. one-per-host-function) maintain a registration count of how many time it's been used. Types additionally have state within an engine behind a read-write lock such as lookup/deduplication information. The race here is a time-of-check versus time-of-use (TOCTOU) bug where one thread atomically decrements a type entry's registration count, observes zero registrations, and then acquires a lock in order to unregister that entry. However, between
tration count, observes zero registrations, and then acquires a lock in order to unregister that entry. However, between when this first thread observed the zero-registration count and when it acquires that lock, another thread could perform the following sequence of events: re-register another copy of the type, which deduplicates to that same entry, resurrecting it and incrementing its registration count; then drop the type and decrement its registration count; observe that the registration count is now zero; acquire the type registry lock; and finally unregister the type. Now, when the original thread finally acquires the lock and unregisters the entry, it is the second time this entry has
Now, when the original thread finally acquires the lock and unregisters the entry, it is the second time this entry has been unregistered. This bug was originally introduced in Wasmtime 19's development of the WebAssembly GC proposal. This bug affects users who are not using the GC proposal, however, and affects Wasmtime in its default configuration even when the GC proposal is disabled. Wasmtime users using 19.0.0 and after are all affected by this issue. We have released the following Wasmtime versions, all of which have a fix for this bug: * 21.0.2 * 22.0.1 * 23.0.3 * 24.0.1 * 25.0.2. If your application creates and drops Wasmtime types on multiple threads concurrently, there are no know
4.0.1 * 25.0.2. If your application creates and drops Wasmtime types on multiple threads concurrently, there are no known workarounds. Users are encouraged to upgrade to a patched release. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-7qmx-3fpx-r45m - https://github.com/bytecodealliance/wasmtime/pull/7969
CVE ID: CVE-2024-47814 State: PUBLISHED Published: 2024-10-07T21:16:01.796Z Last Updated: 2025-11-03T20:40:54.041Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L) Vendors: vim Products: vim Problem Types: CWE-416 Description: Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (visible in a window) a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the same buffer in a new split window. Impact is low since the user must have intentionally set up such a strange auto command and run some buffer unload commands. However this may lead to a crash. This issue has been
such a strange auto command and run some buffer unload commands. However this may lead to a crash. This issue has been addressed in version 9.1.0764 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/vim/vim/security/advisories/GHSA-rj48-v4mq-j4vg - https://github.com/vim/vim/commit/51b62387be93c65fa56bbabe1c3
CVE ID: CVE-2024-47815 State: PUBLISHED Published: 2024-10-09T18:21:58.981Z Last Updated: 2024-10-09T19:48:04.389Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L) Vendors: miraheze Products: IncidentReporting Problem Types: CWE-79, CWE-80 Description: IncidentReporting is a MediaWiki extension for moving incident reports from wikitext to database tables. There are a variety of Cross-site Scripting issues, though all of them require elevated permissions. Some are available to anyone who has the `editincidents` right, some are available to those who can edit interface messages (typically administrators and interface admins), and one is available to those who can edit Loc
edit interface messages (typically administrators and interface admins), and one is available to those who can edit LocalSettings.php. These issues have been addressed in commit `43896a4` and all users are advised to upgrade. Users unable to upgrade should prevent access to the Special:IncidentReports page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/miraheze/IncidentReporting/security/advisories/GHSA-9p36-hrmr-98r9 - https://github.com/miraheze/IncidentReporting/commit/43896a47de4e05ac94ec0472c220da944da16c5c - https://issue-tracker.miraheze.org/T12702
CVE ID: CVE-2024-47816 State: PUBLISHED Published: 2024-10-09T18:19:17.108Z Last Updated: 2024-10-09T19:44:51.132Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: miraheze Products: ImportDump Problem Types: CWE-282 Description: ImportDump is a mediawiki extension designed to automate user import requests. A user's local actor ID is stored in the database to tell who made what requests. Therefore, if a user on another wiki happens to have the same actor ID as someone on the central wiki, the user on the other wiki can act as if they're the original wiki requester. This can be abused to create new comments, edit the request, and view the request if it's marke
original wiki requester. This can be abused to create new comments, edit the request, and view the request if it's marked private. This issue has been addressed in commit `5c91dfc` and all users are advised to update. Users unable to update may disable the special page outside of their global wiki. See `miraheze/mw-config@e566499` for details on that. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/miraheze/ImportDump/security/advisories/GHSA-jjmq-mg36-6387 - https://github.com/miraheze/ImportDump/commit/5c91dfce78320e717516ee65ef5a05f01979ee6c - https://github.com/miraheze/mw-config/commit/e5664995fbb8644f9a80b450b4326194f20f9ddc - https://issue-tracker.m
79ee6c - https://github.com/miraheze/mw-config/commit/e5664995fbb8644f9a80b450b4326194f20f9ddc - https://issue-tracker.miraheze.org/T12701
CVE ID: CVE-2024-47817 State: PUBLISHED Published: 2024-10-07T21:22:18.473Z Last Updated: 2024-10-08T14:19:30.748Z Vendors: lara-zeus Products: dynamic-dashboard Problem Types: CWE-79 Description: Lara-zeus Dynamic Dashboard simple way to manage widgets for your website landing page, and filament dashboard and Lara-zeus artemis is a collection of themes for the lara-zeus ecosystem. If values passed to a paragraph widget are not valid and contain a specific set of characters, applications are vulnerable to XSS attack against a user who opens a page on which a paragraph widget is rendered. Users are advised to upgrade to the appropriate fix versions detailed in the advisory metadata. There are