Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-21677 State: PUBLISHED Published: 2022-01-14T16:45:17.000Z Last Updated: 2025-04-23T19:12:05.254Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: discourse Products: discourse Problem Types: CWE-200 Description: Discourse is an open source discussion platform. Discourse groups can be configured with varying visibility levels for the group as well as the group members. By default, a newly created group has its visibility set to public and the group's members visibility set to public as well. However, a group's visibility and the group's members visibility can be configured such that it is restricted to logged on users, members of the group or
the group's members visibility can be configured such that it is restricted to logged on users, members of the group or staff users. A vulnerability has been discovered in versions prior to 2.7.13 and 2.8.0.beta11 where the group advanced search option does not respect the group's visibility and members visibility level. As such, a group with restricted visibility or members visibility can be revealed through search with the right search option. This issue is patched in `stable` version 2.7.13, `beta` version 2.8.0.beta11, and `tests-passed` version 2.8.0.beta11 versions of Discourse. There are no workarounds aside from upgrading. Additional Analyst Notes: - CVE Program Container: - CISA AD
f Discourse. There are no workarounds aside from upgrading. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-768r-ppv4-5r27 - https://github.com/discourse/discourse/commit/fff8b98485561b12d070c0a8c39f4e503813ab44
CVE ID: CVE-2022-21678 State: PUBLISHED Published: 2022-01-13T17:30:12.000Z Last Updated: 2025-04-23T19:13:09.575Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: discourse Products: discourse Problem Types: CWE-200 Description: Discourse is an open source discussion platform. Prior to version 2.8.0.beta11 in the `tests-passed` branch, version 2.8.0.beta11 in the `beta` branch, and version 2.7.13 in the `stable` branch, the bios of users who made their profiles private were still visible in the `<meta>` tags on their users' pages. The problem is patched in `tests-passed` version 2.8.0.beta11, `beta` version 2.8.0.beta11, and `stable` version 2.7.13 of Discou
em is patched in `tests-passed` version 2.8.0.beta11, `beta` version 2.8.0.beta11, and `stable` version 2.7.13 of Discourse. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-jwww-46gv-564m - https://github.com/discourse/discourse/commit/5e2e178fcfb490c37b9f8bb9f737185441b1d6de - https://github.com/discourse/discourse/commit/c0bb775f3f35b1b0d04a5b2a984f57c3e39f9e6c
CVE ID: CVE-2022-21679 State: PUBLISHED Published: 2022-01-19T21:35:10.000Z Last Updated: 2025-04-23T19:10:05.311Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: istio Products: istio Problem Types: CWE-670 Description: Istio is an open platform to connect, manage, and secure microservices. In Istio 1.12.0 and 1.12.1 The authorization policy with hosts and notHosts might be accidentally bypassed for ALLOW action or rejected unexpectedly for DENY action during the upgrade from 1.11 to 1.12.0/1.12.1. Istio 1.12 supports the hosts and notHosts fields in authorization policy with a new Envoy API shipped with the 1.12 data plane. A bug in the 1.12.0 and 1.12.1 i
s fields in authorization policy with a new Envoy API shipped with the 1.12 data plane. A bug in the 1.12.0 and 1.12.1 incorrectly uses the new Envoy API with the 1.11 data plane. This will cause the hosts and notHosts fields to be always matched regardless of the actual value of the host header when mixing 1.12.0/1.12.1 control plane and 1.11 data plane. Users are advised to upgrade or to not mix the 1.12.0/1.12.1 control plane with 1.11 data plane if using hosts or notHosts field in authorization policy. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/istio/istio/security/advisories/GHSA-rwfr-xrvw-2rvv - https://istio.io/latest/n
chment: References: - https://github.com/istio/istio/security/advisories/GHSA-rwfr-xrvw-2rvv - https://istio.io/latest/news/releases/1.12.x/announcing-1.12.2/
CVE ID: CVE-2022-21680 State: PUBLISHED Published: 2022-01-14T00:00:00.000Z Last Updated: 2025-04-22T18:33:37.402Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: markedjs Products: marked Problem Types: CWE-400, CWE-1333 Description: Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `block.def` may cause catastrophic backtracking against some strings and lead to a regular expression denial of service (ReDoS). Anyone who runs untrusted markdown through a vulnerable version of marked and does not use a worker with a time limit may be affected. This issue is patched in version 4.0.10. As a workaround, avoid running untrust
orker with a time limit may be affected. This issue is patched in version 4.0.10. As a workaround, avoid running untrusted markdown through marked or run marked on a worker thread and set a reasonable time limit to prevent draining resources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/markedjs/marked/security/advisories/GHSA-rrrm-qjm4-v8hf - https://github.com/markedjs/marked/commit/c4a3ccd344b6929afa8a1d50ac54a721e57012c0 - https://github.com/markedjs/marked/releases/tag/v4.0.10 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AIXDMC3CSHYW3YWVSQOXAWLUYQHAO5UX/
CVE ID: CVE-2022-21681 State: PUBLISHED Published: 2022-01-14T00:00:00.000Z Last Updated: 2025-04-22T18:33:29.916Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: markedjs Products: marked Problem Types: CWE-400, CWE-1333 Description: Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `inline.reflinkSearch` may cause catastrophic backtracking against some strings and lead to a denial of service (DoS). Anyone who runs untrusted markdown through a vulnerable version of marked and does not use a worker with a time limit may be affected. This issue is patched in version 4.0.10. As a workaround, avoid running untrusted markdow
a time limit may be affected. This issue is patched in version 4.0.10. As a workaround, avoid running untrusted markdown through marked or run marked on a worker thread and set a reasonable time limit to prevent draining resources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/markedjs/marked/security/advisories/GHSA-5v2h-r2cx-5xgj - https://github.com/markedjs/marked/commit/8f806573a3f6c6b7a39b8cdb66ab5ebb8d55a5f5 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AIXDMC3CSHYW3YWVSQOXAWLUYQHAO5UX/
CVE ID: CVE-2022-21682 State: PUBLISHED Published: 2022-01-13T00:00:00 Last Updated: 2024-08-03T02:46:39.409Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: flatpak Products: flatpak Problem Types: CWE-22 Description: Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies `finish-args` last in the build. At this point the build directory will have the full access that is specified in the manifest, so running `flatpak build` against it will gain those permissions. Normally this will not be done, so this is not problem. However, if `--mi
build` against it will gain those permissions. Normally this will not be done, so this is not problem. However, if `--mirror-screenshots-url` is specified, then flatpak-builder will launch `flatpak build --nofilesystem=host appstream-utils mirror-screenshots` after finalization, which can lead to issues even with the `--nofilesystem=host` protection. In normal use, the only issue is that these empty directories can be created wherever the user has write permissions. However, a malicious application could replace the `appstream-util` binary and potentially do something more hostile. This has been resolved in Flatpak 1.12.3 and 1.10.6 by changing the behaviour of `--nofilesystem=home` and `--n
hostile. This has been resolved in Flatpak 1.12.3 and 1.10.6 by changing the behaviour of `--nofilesystem=home` and `--nofilesystem=host`. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatpak/flatpak/security/advisories/GHSA-8ch7-5j3h-g4fx - https://github.com/flatpak/flatpak/commit/445bddeee657fdc8d2a0a1f0de12975400d4fc1a - https://github.com/flatpak/flatpak/commit/4d11f77aa7fd3e64cfa80af89d92567ab9e8e6fa - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APFTBYGJJVJPFVHRXUW5PII5XOAFI4KH/ - https://www.debian.org/security/2022/dsa-5049 - https://lists.fedoraproject.org/archives/list/package-announce%40lis
/ - https://www.debian.org/security/2022/dsa-5049 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IXKBERLJRYV7KXKGXOLI6IOXVBQNN4DP/ - https://security.gentoo.org/glsa/202312-12
CVE ID: CVE-2022-21683 State: PUBLISHED Published: 2022-01-18T17:30:13.000Z Last Updated: 2025-04-23T19:11:16.912Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: wagtail Products: wagtail Problem Types: CWE-200 Description: Wagtail is a Django based content management system focused on flexibility and user experience. When notifications for new replies in comment threads are sent, they are sent to all users who have replied or commented anywhere on the site, rather than only in the relevant threads. This means that a user could listen in to new comment replies on pages they have not have editing access to, as long as they have left a comment or reply somewhere
ew comment replies on pages they have not have editing access to, as long as they have left a comment or reply somewhere on the site. A patched version has been released as Wagtail 2.15.2, which restores the intended behaviour - to send notifications for new replies to the participants in the active thread only (editing permissions are not considered). New comments can be disabled by setting `WAGTAILADMIN_COMMENTS_ENABLED = False` in the Django settings file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wagtail/wagtail/security/advisories/GHSA-xqxm-2rpm-3889 - https://github.com/wagtail/wagtail/commit/5fe901e5d86ed02dbbb63039a89
/wagtail/security/advisories/GHSA-xqxm-2rpm-3889 - https://github.com/wagtail/wagtail/commit/5fe901e5d86ed02dbbb63039a897582951266afd - https://github.com/wagtail/wagtail/releases/tag/v2.15.2
CVE ID: CVE-2022-21684 State: PUBLISHED Published: 2022-01-13T21:05:11.000Z Last Updated: 2025-04-23T19:12:19.304Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: discourse Products: discourse Problem Types: CWE-287 Description: Discourse is an open source discussion platform. Versions prior to 2.7.13 in `stable`, 2.8.0.beta11 in `beta`, and 2.8.0.beta11 in `tests-passed` allow some users to log in to a community before they should be able to do so. A user invited via email to a forum with `must_approve_users` enabled is going to be automatically logged in, bypassing the check that does not allow unapproved users to sign in. They will be able to do everythin
ically logged in, bypassing the check that does not allow unapproved users to sign in. They will be able to do everything an approved user can do. If they logout, they cannot log back in. This issue is patched in the `stable` version 2.7.13, `beta` version 2.8.0.beta11, and `tests-passed` version 2.8.0.beta11. One may disable invites as a workaround. Administrators can increase `min_trust_level_to_allow_invite` to reduce the attack surface to more trusted users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-p63q-jp48-h8xh - https://github.com/discourse/discourse/commit/584c6a2e8bc70507
ourse/discourse/security/advisories/GHSA-p63q-jp48-h8xh - https://github.com/discourse/discourse/commit/584c6a2e8bc705072b09a9c4b55126d6f8ed4ad2 - https://meta.discourse.org/t/invite-redemption-allowed-user-to-access-forum-before-approval/214328
CVE ID: CVE-2022-21685 State: PUBLISHED Published: 2022-01-14T17:05:11.000Z Last Updated: 2025-04-23T19:11:58.958Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: paritytech Products: frontier Problem Types: CWE-191 Description: Frontier is Substrate's Ethereum compatibility layer. Prior to commit number `8a93fdc6c9f4eb1d2f2a11b7ff1d12d70bf5a664`, a bug in Frontier's MODEXP precompile implementation can cause an integer underflow in certain conditions. This will cause a node crash for debug builds. For release builds (and production WebAssembly binaries), the impact is limited as it can only cause a normal EVM out-of-gas. Users who do not use MODEXP precompi
mbly binaries), the impact is limited as it can only cause a normal EVM out-of-gas. Users who do not use MODEXP precompile in their runtime are not impacted. A patch is available in pull request #549. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/paritytech/frontier/security/advisories/GHSA-cjg2-2fjg-fph4 - https://github.com/paritytech/frontier/pull/549 - https://github.com/paritytech/frontier/commit/8a93fdc6c9f4eb1d2f2a11b7ff1d12d70bf5a664
CVE ID: CVE-2022-21686 State: PUBLISHED Published: 2022-01-26T20:10:10.000Z Last Updated: 2025-04-23T19:09:07.936Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: PrestaShop Products: PrestaShop Problem Types: CWE-94 Description: PrestaShop is an Open Source e-commerce platform. Starting with version 1.7.0.0 and ending with version 1.7.8.3, an attacker is able to inject twig code inside the back office when using the legacy layout. The problem is fixed in version 1.7.8.3. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-m
am Container: - CISA ADP Vulnrichment: References: - https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-mrq4-7ch7-2465 - https://github.com/PrestaShop/PrestaShop/commit/d02b469ec365822e6a9f017e57f588966248bf21 - https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.8.3
CVE ID: CVE-2022-21687 State: PUBLISHED Published: 2022-02-01T11:56:17.000Z Last Updated: 2025-05-05T16:34:00.348Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: n/a Problem Types: n/a Description: gh-ost is a triggerless online schema migration solution for MySQL. Versions prior to 1.1.3 are subject to an arbitrary file read vulnerability. The attacker must have access to the target host or trick an administrator into executing a malicious gh-ost command on a host running gh-ost, plus network access from host running gh-ost to the attack's malicious MySQL server. The `-database` parameter does not properly sanitize user input which can lead t
to the attack's malicious MySQL server. The `-database` parameter does not properly sanitize user input which can lead to arbitrary file reads. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/github/gh-ost/security/advisories/GHSA-rrp4-2xx3-mv29 - https://github.com/github/gh-ost/commit/a91ab042de013cfd8fbb633763438932d9080d8f
CVE ID: CVE-2022-21688 State: PUBLISHED Published: 2022-01-18T21:45:11.000Z Last Updated: 2025-04-23T19:10:53.388Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: onionshare Products: onionshare Problem Types: CWE-125 Description: OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Affected versions of the desktop application were found to be vulnerable to denial of service via an undisclosed vulnerability in the QT image parsing. Roughly 20 bytes lead to 2GB memory consumption and this can be triggered multiple times. To be abused, this vulnerability requires renderi
ad to 2GB memory consumption and this can be triggered multiple times. To be abused, this vulnerability requires rendering in the history tab, so some user interaction is required. An adversary with knowledge of the Onion service address in public mode or with authentication in private mode can perform a Denial of Service attack, which quickly results in out-of-memory for the server. This requires the desktop application with rendered history, therefore the impact is only elevated. This issue has been patched in version 2.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/onionshare/onionshare/releases/tag/v2.5 - https://github.com
: - CISA ADP Vulnrichment: References: - https://github.com/onionshare/onionshare/releases/tag/v2.5 - https://github.com/onionshare/onionshare/security/advisories/GHSA-x7wr-283h-5h2v
CVE ID: CVE-2022-21689 State: PUBLISHED Published: 2022-01-18T22:10:10.000Z Last Updated: 2025-04-23T19:10:29.213Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: onionshare Products: onionshare Problem Types: CWE-400 Description: OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions the receive mode limits concurrent uploads to 100 per second and blocks other uploads in the same second, which can be triggered by a simple script. An adversary with access to the receive mode can block file upload for others. There is no way to block this attack in pu
n adversary with access to the receive mode can block file upload for others. There is no way to block this attack in public mode due to the anonymity properties of the tor network. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/onionshare/onionshare/releases/tag/v2.5 - https://github.com/onionshare/onionshare/security/advisories/GHSA-jh82-c5jw-pxpc
CVE ID: CVE-2022-21690 State: PUBLISHED Published: 2022-01-18T22:15:18.000Z Last Updated: 2025-04-22T18:33:08.359Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: onionshare Products: onionshare Problem Types: CWE-79 Description: OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions The path parameter of the requested URL is not sanitized before being passed to the QT frontend. This path is used in all components for displaying the server access history. This leads to a rendered HTML4 Subset (QT RichText editor) in the Onionshare frontend. Additiona
server access history. This leads to a rendered HTML4 Subset (QT RichText editor) in the Onionshare frontend. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/onionshare/onionshare/releases/tag/v2.5 - https://github.com/onionshare/onionshare/security/advisories/GHSA-ch22-x2v3-v6vq
CVE ID: CVE-2022-21691 State: PUBLISHED Published: 2022-01-18T22:00:12.000Z Last Updated: 2025-04-23T19:10:41.310Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: onionshare Products: onionshare Problem Types: CWE-306 Description: OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions chat participants can spoof their channel leave message, tricking others into assuming they left the chatroom. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/onionshare/onionshare/releases/tag/v2.5 - https:
am Container: - CISA ADP Vulnrichment: References: - https://github.com/onionshare/onionshare/releases/tag/v2.5 - https://github.com/onionshare/onionshare/security/advisories/GHSA-w9m4-7w72-r766
CVE ID: CVE-2022-21692 State: PUBLISHED Published: 2022-01-18T22:10:15.000Z Last Updated: 2025-04-22T18:33:15.871Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: onionshare Products: onionshare Problem Types: CWE-287 Description: OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions anyone with access to the chat environment can write messages disguised as another chat participant. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/onionshare/onionshare/releases/tag/v2.5 - https://github.c
er: - CISA ADP Vulnrichment: References: - https://github.com/onionshare/onionshare/releases/tag/v2.5 - https://github.com/onionshare/onionshare/security/advisories/GHSA-gjj5-998g-v36v
CVE ID: CVE-2022-21693 State: PUBLISHED Published: 2022-01-18T22:03:54.000Z Last Updated: 2025-04-23T19:10:35.007Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: onionshare Products: onionshare Problem Types: CWE-22 Description: OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions an adversary with a primitive that allows for filesystem access from the context of the Onionshare process can access sensitive files in the entire user home folder. This could lead to the leaking of sensitive data. Due to the automatic exclusion of hidden folders, the
ser home folder. This could lead to the leaking of sensitive data. Due to the automatic exclusion of hidden folders, the impact is reduced. This can be mitigated by usage of the flatpak release. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/onionshare/onionshare/releases/tag/v2.5 - https://github.com/onionshare/onionshare/security/advisories/GHSA-jgm9-xpfj-4fq6
CVE ID: CVE-2022-21694 State: PUBLISHED Published: 2022-01-18T22:20:10.000Z Last Updated: 2025-04-23T19:10:18.217Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: onionshare Products: onionshare Problem Types: CWE-732 Description: OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. The website mode of the onionshare allows to use a hardened CSP, which will block any scripts and external resources. It is not possible to configure this CSP for individual pages and therefore the security enhancement cannot be used for websites using javascript or external resources like f
l pages and therefore the security enhancement cannot be used for websites using javascript or external resources like fonts or images. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/onionshare/onionshare/releases/tag/v2.5 - https://github.com/onionshare/onionshare/security/advisories/GHSA-h29c-wcm8-883h - https://github.com/onionshare/onionshare/issues/1389