Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
commended by the maintainers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/akkadotnet/akka.net/security/advisories/GHSA-jhpv-4q4f-43g5 - https://github.com/akkadotnet/akka.net/pull/7847 - https://github.com/akkadotnet/akka.net/pull/7851 - https://getakka.net/articles/remoting/security.html - https://github.com/akkadotnet/akka.net/releases/tag/1.5.52
CVE ID: CVE-2025-61779 State: PUBLISHED Published: 2025-10-09T20:53:33.855Z Last Updated: 2025-10-10T14:32:49.097Z Vendors: confidential-containers Products: trustee Problem Types: CWE-639 Description: Confidential Containers's Trustee project contains tools and components for attesting confidential guests and providing secrets to them. In versions prior to 0.15.0, the attestation-policy endpoint didn't check if the kbs-client submitting the request was actually authenticated (had the right key). This allowed any kbs-client to actually change the attestation policy. Version 0.15.0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/confidentia
0.15.0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/confidential-containers/trustee/security/advisories/GHSA-49mc-2q77-m99x - https://github.com/confidential-containers/trustee/pull/957 - https://github.com/confidential-containers/trustee/commit/3a7d04a70918fa503a00974dcae653cf9f0640e0
CVE ID: CVE-2025-61780 State: PUBLISHED Published: 2025-10-10T16:53:57.606Z Last Updated: 2025-10-10T20:35:26.618Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: rack Products: rack Problem Types: CWE-200, CWE-441, CWE-913 Description: Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, a possible information disclosure vulnerability existed in `Rack::Sendfile` when running behind a proxy that supports `x-sendfile` headers (such as Nginx). Specially crafted headers could cause `Rack::Sendfile` to miscommunicate with the proxy and trigger unintended internal requests, potentially bypassing proxy-level access restrictions
mmunicate with the proxy and trigger unintended internal requests, potentially bypassing proxy-level access restrictions. When `Rack::Sendfile` received untrusted `x-sendfile-type` or `x-accel-mapping` headers from a client, it would interpret them as proxy configuration directives. This could cause the middleware to send a "redirect" response to the proxy, prompting it to reissue a new internal request that was not subject to the proxy's access controls. An attacker could exploit this by setting a crafted `x-sendfile-type: x-accel-redirect` header, setting a crafted `x-accel-mapping` header, and requesting a path that qualifies for proxy-based acceleration. Attackers could bypass proxy-enfo
el-mapping` header, and requesting a path that qualifies for proxy-based acceleration. Attackers could bypass proxy-enforced restrictions and access internal endpoints intended to be protected (such as administrative pages). The vulnerability did not allow arbitrary file reads but could expose sensitive application routes. This issue only affected systems meeting all of the following conditions: The application used `Rack::Sendfile` with a proxy that supports `x-accel-redirect` (e.g., Nginx); the proxy did **not** always set or remove the `x-sendfile-type` and `x-accel-mapping` headers; and the application exposed an endpoint that returned a body responding to `.to_path`. Users should upgrad
ing` headers; and the application exposed an endpoint that returned a body responding to `.to_path`. Users should upgrade to Rack versions 2.2.20, 3.1.18, or 3.2.3, which require explicit configuration to enable `x-accel-redirect`. Alternatively, configure the proxy to always set or strip the header, or in Rails applications, disable sendfile completely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rack/rack/security/advisories/GHSA-r657-rxjc-j557 - https://github.com/rack/rack/commit/57277b7741581fa827472c5c666f6e6a33abd784 - https://github.com/rack/rack/commit/7e69f65eefe9cd2868df9f9f3b0977b86f93523a - https://github.com/rack/rack/commit/fba2c8bc63eb7
github.com/rack/rack/commit/7e69f65eefe9cd2868df9f9f3b0977b86f93523a - https://github.com/rack/rack/commit/fba2c8bc63eb787ff4b19bc612d315fda6126d85
CVE ID: CVE-2025-61783 State: PUBLISHED Published: 2025-10-09T20:57:20.734Z Last Updated: 2025-10-15T19:49:22.392Z Vendors: python-social-auth Products: social-app-django Problem Types: CWE-303 Description: Python Social Auth is a social authentication/registration mechanism. In versions prior to 5.6.0, upon authentication, the user could be associated by e-mail even if the `associate_by_email` pipeline was not included. This could lead to account compromise when a third-party authentication service does not validate provided e-mail addresses or doesn't require unique e-mail addresses. Version 5.6.0 contains a patch. As a workaround, review the authentication service policy on e-mail address
l addresses. Version 5.6.0 contains a patch. As a workaround, review the authentication service policy on e-mail addresses; many will not allow exploiting this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/python-social-auth/social-app-django/security/advisories/GHSA-wv4w-6qv2-qqfg - https://github.com/python-social-auth/social-app-django/issues/220 - https://github.com/python-social-auth/social-app-django/issues/231 - https://github.com/python-social-auth/social-app-django/issues/634 - https://github.com/python-social-auth/social-app-django/pull/803 - https://github.com/python-social-auth/social-app-django/commit/10c80e2ebabeccd4e9c84ad0e
th/social-app-django/pull/803 - https://github.com/python-social-auth/social-app-django/commit/10c80e2ebabeccd4e9c84ad0e16e1db74148ed4c
CVE ID: CVE-2025-61784 State: PUBLISHED Published: 2025-10-07T19:01:40.400Z Last Updated: 2025-10-07T19:24:20.791Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: hiyouga Products: LLaMA-Factory Problem Types: CWE-22, CWE-918 Description: LLaMA-Factory is a tuning library for large language models. Prior to version 0.9.4, a Server-Side Request Forgery (SSRF) vulnerability in the chat API allows any authenticated user to force the server to make arbitrary HTTP requests to internal and external networks. This can lead to the exposure of sensitive internal services, reconnaissance of the internal network, or interaction with third-party services. The same mechani
ve internal services, reconnaissance of the internal network, or interaction with third-party services. The same mechanism also allows for a Local File Inclusion (LFI) vulnerability, enabling users to read arbitrary files from the server's filesystem. The vulnerability exists in the `_process_request` function within `src/llamafactory/api/chat.py.` This function is responsible for processing incoming multimodal content, including images, videos, and audio provided via URLs. The function checks if the provided URL is a base64 data URI or a local file path (`os.path.isfile`). If neither is true, it falls back to treating the URL as a web URI and makes a direct HTTP GET request using `requests.
If neither is true, it falls back to treating the URL as a web URI and makes a direct HTTP GET request using `requests.get(url, stream=True).raw` without any validation or sanitization of the URL. Version 0.9.4 fixes the underlying issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/hiyouga/LLaMA-Factory/security/advisories/GHSA-527m-2xhr-j27g - https://github.com/hiyouga/LLaMA-Factory/commit/95b7188090a1018935c9dc072bfc97f24f1c96e9
CVE ID: CVE-2025-61785 State: PUBLISHED Published: 2025-10-08T00:37:01.869Z Last Updated: 2025-10-08T18:59:12.863Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: denoland Products: deno Problem Types: CWE-266 Description: Deno is a JavaScript, TypeScript, and WebAssembly runtime. In versions prior to 2.5.3 and 2.2.15, `Deno.FsFile.prototype.utime` and `Deno.FsFile.prototype.utimeSync` are not limited by the permission model check `--deny-write=./`. It's possible to change to change the access (`atime`) and modification (`mtime`) times on the file stream resource even when the file is opened with `read` only permission (and `write`: `false`) and file write oper
file stream resource even when the file is opened with `read` only permission (and `write`: `false`) and file write operations are not allowed (the script is executed with `--deny-write=./`). Similar APIs like `Deno.utime` and `Deno.utimeSync` require `allow-write` permission, however, when a file is opened, even with read only flags and deny-write permission, it's still possible to change the access (`atime`) and modification (`mtime`) times, and thus bypass the permission model. Versions 2.5.3 and 2.2.15 fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/denoland/deno/security/advisories/GHSA-vg2r-rmgp-cgqj - https://github.com/denoland/deno/
ferences: - https://github.com/denoland/deno/security/advisories/GHSA-vg2r-rmgp-cgqj - https://github.com/denoland/deno/pull/30872 - https://github.com/denoland/deno/commit/992e998dfe436cdc9325232759af8be92f11739b - https://github.com/denoland/deno/releases/tag/v2.2.15 - https://github.com/denoland/deno/releases/tag/v2.5.3
CVE ID: CVE-2025-61786 State: PUBLISHED Published: 2025-10-08T00:49:42.824Z Last Updated: 2025-10-08T18:54:33.415Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: denoland Products: deno Problem Types: CWE-269 Description: Deno is a JavaScript, TypeScript, and WebAssembly runtime. In versions prior to 2.5.3 and 2.2.15, `Deno.FsFile.prototype.stat` and `Deno.FsFile.prototype.statSync` are not limited by the permission model check `--deny-read=./`. It's possible to retrieve stats from files that the user do not have explicit read access to (the script is executed with `--deny-read=./`). Similar APIs like `Deno.stat` and `Deno.statSync` require `allow-read` permis
script is executed with `--deny-read=./`). Similar APIs like `Deno.stat` and `Deno.statSync` require `allow-read` permission, however, when a file is opened, even with file-write only flags and deny-read permission, it's still possible to retrieve file stats, and thus bypass the permission model. Versions 2.5.3 and 2.2.15 fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/denoland/deno/security/advisories/GHSA-qq26-84mh-26j9 - https://github.com/denoland/deno/pull/30876 - https://github.com/denoland/deno/commit/1ab2268c0bcbf9b0468e0e36963f77f8c31c73ec - https://github.com/denoland/deno/releases/tag/v2.2.15 - https://github.com/denoland/deno/rel
0468e0e36963f77f8c31c73ec - https://github.com/denoland/deno/releases/tag/v2.2.15 - https://github.com/denoland/deno/releases/tag/v2.5.3
CVE ID: CVE-2025-61787 State: PUBLISHED Published: 2025-10-08T00:59:17.322Z Last Updated: 2025-10-08T18:51:09.772Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: denoland Products: deno Problem Types: CWE-77 Description: Deno is a JavaScript, TypeScript, and WebAssembly runtime. Versions prior to 2.5.3 and 2.2.15 are vulnerable to Command Line Injection attacks on Windows when batch files are executed. In Windows, ``CreateProcess()`` always implicitly spawns ``cmd.exe`` if a batch file (.bat, .cmd, etc.) is being executed even if the application does not specify it via the command line. This makes Deno vulnerable to a command injection attack on Windows. Vers
tion does not specify it via the command line. This makes Deno vulnerable to a command injection attack on Windows. Versions 2.5.3 and 2.2.15 fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/denoland/deno/security/advisories/GHSA-m2gf-x3f6-8hq3 - https://github.com/denoland/deno/pull/30818 - https://github.com/denoland/deno/commit/8a0990ccd37bafd8768176ca64b906ba2da2d822 - https://github.com/denoland/deno/releases/tag/v2.2.15 - https://github.com/denoland/deno/releases/tag/v2.5.3
CVE ID: CVE-2025-61788 State: PUBLISHED Published: 2025-10-08T18:03:22.518Z Last Updated: 2025-10-08T18:26:13.505Z Vendors: opencast Products: opencast Problem Types: CWE-79 Description: Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 17.8 and 18.2, the paella would include and render some user inputs (metadata like title, description, etc.) unfiltered and unmodified. The vulnerability allows attackers to inject and malicious HTML and JavaScript in the player, which would then be executed in the browsers of users watching the prepared media. This can then be used to modify the site or to execute actions in the name
owsers of users watching the prepared media. This can then be used to modify the site or to execute actions in the name of logged-in users. To inject malicious metadata, an attacker needs write access to the system. For example, the ability to upload media and modify metadata. This cannot be exploited by unauthenticated users. This issue is fixed in Opencast 17.8 and 18.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/opencast/opencast/security/advisories/GHSA-m2vg-rmq6-p62r - https://github.com/opencast/opencast/commit/2809520fa88d108d8104c760f00c10bad42c14f9
CVE ID: CVE-2025-61789 State: PUBLISHED Published: 2025-10-16T17:00:32.247Z Last Updated: 2025-10-16T18:03:11.988Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Icinga Products: icingadb-web Problem Types: CWE-204 Description: Icinga DB Web provides a graphical interface for Icinga monitoring. Before 1.1.4 and 1.2.3, an authorized user with access to Icinga DB Web, can use a custom variable in a filter that is either protected by icingadb/protect/variables or hidden by icingadb/denylist/variables, to guess values assigned to it. Versions 1.1.4 and 1.2.3 respond with an error if such a custom variable is used. Additional Analyst Notes: - CISA ADP Vulnrichme
1.1.4 and 1.2.3 respond with an error if such a custom variable is used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Icinga/icingadb-web/security/advisories/GHSA-w57j-28jc-8429 - https://github.com/Icinga/icingadb-web/commit/5e982dad40ec379075307ab1693580138e675b18
CVE ID: CVE-2025-61792 State: PUBLISHED Published: 2025-09-30T00:00:00.000Z Last Updated: 2025-10-06T18:31:40.108Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Quadient Products: DS-700 iQ Problem Types: CWE-362 Description: Quadient DS-700 iQ devices through 2025-09-30 might have a race condition during the quick clicking of (in order) the Question Mark button, the Help Button, the About button, and the Help Button, leading to a transition out of kiosk mode into local administrative access. NOTE: the reporter indicates that the "behavior was observed sporadically" during "limited time on the client site," making it not "possible to gain more information
r was observed sporadically" during "limited time on the client site," making it not "possible to gain more information about the specific kiosk mode crashing issue," and the only conclusion was "there appears to be some form of race condition." Accordingly, there can be doubt that a reproducible cybersecurity vulnerability was identified; sporadic software crashes can also be caused by a hardware fault on a single device (for example, transient RAM errors). The reporter also describes a variety of other issues, including initial access via USB because of the absence of a "lock-pick resistant locking solution for the External Controller PC cabinet," which is not a cybersecurity vulnerability
lock-pick resistant locking solution for the External Controller PC cabinet," which is not a cybersecurity vulnerability (section 4.1.5 of the CNA Operational Rules). Finally, it is unclear whether the device or OS configuration was inappropriate, given that the risks are typically limited to insider threats within the mail operations room of a large company. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/from-folding-to-folded-hacking-high-volume-mailer-machines/
CVE ID: CVE-2025-61795 State: PUBLISHED Published: 2025-10-27T17:30:28.334Z Last Updated: 2025-11-04T21:14:10.512Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: CWE-404 Description: Improper Resource Shutdown or Release vulnerability in Apache Tomcat. If an error occurred (including exceeding limits) during the processing of a multipart upload, temporary copies of the uploaded parts written to disc were not cleaned up immediately but left for the garbage collection process to delete. Depending on JVM settings, application memory usage and application load, it was possible that space for the temporary copies of uploaded parts would be filled faster than GC cleared
ation load, it was possible that space for the temporary copies of uploaded parts would be filled faster than GC cleared it, leading to a DoS. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.11, from 10.1.0-M1 through 10.1.46, from 9.0.0.M1 through 9.0.109. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.12 or later, 10.1.47 or later or 9.0.110 or later which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/wm9mx8brmx9g4zpywm0
tes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/wm9mx8brmx9g4zpywm06ryrtvd3160pp
CVE ID: CVE-2025-61796 State: PUBLISHED Published: 2025-10-14T21:18:11.839Z Last Updated: 2025-10-15T20:33:12.029Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Exploitation of this issue requires user interaction in that a victim must open a
CVE ID: CVE-2025-61797 State: PUBLISHED Published: 2025-10-14T21:18:13.536Z Last Updated: 2025-10-15T20:27:06.229Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Exploitation of this issue requires user interaction in that a victim must open a
CVE ID: CVE-2025-61798 State: PUBLISHED Published: 2025-10-14T19:34:15.634Z Last Updated: 2025-10-16T03:56:09.010Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
ires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb25-103.html
CVE ID: CVE-2025-61799 State: PUBLISHED Published: 2025-10-14T19:34:16.394Z Last Updated: 2025-10-16T03:56:09.741Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
CVE ID: CVE-2025-61800 State: PUBLISHED Published: 2025-10-14T19:34:14.782Z Last Updated: 2025-10-16T03:56:10.642Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-190 Description: Dimension versions 4.1.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb25-103.html
CVE ID: CVE-2025-61801 State: PUBLISHED Published: 2025-10-14T19:34:14.023Z Last Updated: 2025-10-16T03:56:11.386Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-416 Description: Dimension versions 4.1.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb25-103.html
CVE ID: CVE-2025-61802 State: PUBLISHED Published: 2025-10-14T19:42:39.266Z Last Updated: 2025-10-16T03:56:04.966Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Substance3D - Stager Problem Types: CWE-416 Description: Substance3D - Stager versions 3.1.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_stager/apsb25-104.html
CVE ID: CVE-2025-61803 State: PUBLISHED Published: 2025-10-14T19:42:40.054Z Last Updated: 2025-10-16T03:56:06.036Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Substance3D - Stager Problem Types: CWE-190 Description: Substance3D - Stager versions 3.1.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_stager/apsb25-104.htm
otes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_stager/apsb25-104.html