Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-37699 State: PUBLISHED Published: 2021-08-11T23:15:10 Last Updated: 2024-08-04T01:23:01.488Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N) Vendors: vercel Products: next.js Problem Types: CWE-601 Description: Next.js is an open source website development framework to be used with the React library. In affected versions specially encoded paths could be used when pages/_error.js was statically generated allowing an open redirect to occur to an external site. In general, this redirect does not directly harm users although can allow for phishing attacks by redirecting to an attacker's domain from a trusted domain. We recommend everyone to upgrade regar
or phishing attacks by redirecting to an attacker's domain from a trusted domain. We recommend everyone to upgrade regardless of whether you can reproduce the issue or not. The issue has been patched in release 11.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vercel/next.js/security/advisories/GHSA-vxf5-wxwp-m7g9 - https://github.com/vercel/next.js/releases/tag/v11.1.0
CVE ID: CVE-2021-37700 State: PUBLISHED Published: 2021-08-12T20:45:13 Last Updated: 2024-08-04T01:23:01.457Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: github Products: paste-markdown Problem Types: CWE-79 Description: @github/paste-markdown is an npm package for pasting markdown objects. A self Cross-Site Scripting vulnerability exists in the @github/paste-markdown before version 0.3.4. If the clipboard data contains the string `<table>`, a **div** is dynamically created, and the clipboard content is copied into its **innerHTML** property without any sanitization, resulting in improper execution of JavaScript in the browser of the victim (the user who
perty without any sanitization, resulting in improper execution of JavaScript in the browser of the victim (the user who pasted the code). Users directed to copy text from a malicious website and paste it into pages that utilize this library are affected. This is fixed in version 0.3.4. Refer the to the referenced GitHub Advisory for more details including an example exploit. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/paste-markdown/security/advisories/GHSA-gpfj-4j6g-c4w9 - https://github.com/github/paste-markdown/commit/32b7ea3f29ae8f256f9d19768387be42678ddf30 - https://github.com/github/paste-markdown/releases/tag/v0.3.4 - https://www.npmjs.c
a3f29ae8f256f9d19768387be42678ddf30 - https://github.com/github/paste-markdown/releases/tag/v0.3.4 - https://www.npmjs.com/package/%40github/paste-markdown
CVE ID: CVE-2021-37701 State: PUBLISHED Published: 2021-08-31T00:00:00 Last Updated: 2024-08-04T01:23:01.526Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: npm Products: node-tar Problem Types: CWE-22, CWE-59 Description: The npm package "tar" (aka node-tar) before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieved by ensuring that extracted directories are not symlinks. Additionally, in order to prevent unnecessary stat calls to determine whether a given
ted directories are not symlinks. Additionally, in order to prevent unnecessary stat calls to determine whether a given path is a directory, paths are cached when directories are created. This logic was insufficient when extracting tar files that contained both a directory and a symlink with the same name as the directory, where the symlink and directory names in the archive entry used backslashes as a path separator on posix systems. The cache checking logic used both `\` and `/` characters as path separators, however `\` is a valid filename character on posix systems. By first creating a directory, and then replacing that directory with a symlink, it was thus possible to bypass node-tar sy
first creating a directory, and then replacing that directory with a symlink, it was thus possible to bypass node-tar symlink checks on directories, essentially allowing an untrusted tar file to symlink into an arbitrary location and subsequently extracting arbitrary files into that location, thus allowing arbitrary file creation and overwrite. Additionally, a similar confusion could arise on case-insensitive filesystems. If a tar archive contained a directory at `FOO`, followed by a symbolic link named `foo`, then on case-insensitive file systems, the creation of the symbolic link would remove the directory from the filesystem, but _not_ from the internal directory cache, as it would not be
lic link would remove the directory from the filesystem, but _not_ from the internal directory cache, as it would not be treated as a cache hit. A subsequent file entry within the `FOO` directory would then be placed in the target of the symbolic link, thinking that the directory had already been created. These issues were addressed in releases 4.4.16, 5.0.8 and 6.1.7. The v3 branch of node-tar has been deprecated and did not receive patches for these issues. If you are still using a v3 release we recommend you update to a more recent version of node-tar. If this is not possible, a workaround is available in the referenced GHSA-9r2w-394v-53qc. Additional Analyst Notes: - CVE Program Containe
sible, a workaround is available in the referenced GHSA-9r2w-394v-53qc. Additional Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/package/tar - https://github.com/npm/node-tar/security/advisories/GHSA-9r2w-394v-53qc - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.debian.org/security/2021/dsa-5008 - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf - https://lists.debian.org/debian-lts-announce/2022/12/msg00023.html
CVE ID: CVE-2021-37702 State: PUBLISHED Published: 2021-08-18T14:45:10 Last Updated: 2024-08-04T01:23:01.527Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: pimcore Products: pimcore Problem Types: CWE-1236 Description: Pimcore is an open source data & experience management platform. Prior to version 10.1.1, Data Object CSV import allows formular injection. The problem is patched in 10.1.1. Aside from upgrading, one may apply the patch manually as a workaround. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pimcore/pimcore/security/advisories/GHSA-pp2h-95hm-hv9r - https://github.com/pimcore/pimcore/pull/9992
CVE ID: CVE-2021-37703 State: PUBLISHED Published: 2021-08-13T15:15:16 Last Updated: 2024-08-04T01:23:01.520Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: discourse Products: discourse Problem Types: CWE-200 Description: Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta5, a user's read state for a topic such as the last read post number and the notification level is exposed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/discourse/discourse/security/advisories/GHSA-gq2h-qhg2-phf9 - https://github.com/discourse/discourse/commit/aed65ec16d38886d7be7209d8c02df
e/security/advisories/GHSA-gq2h-qhg2-phf9 - https://github.com/discourse/discourse/commit/aed65ec16d38886d7be7209d8c02df4ffd4937a4
CVE ID: CVE-2021-37704 State: PUBLISHED Published: 2021-08-12T20:05:16 Last Updated: 2024-08-04T01:23:01.504Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: PHPSocialNetwork Products: phpfastcache Problem Types: CWE-200 Description: PhpFastCache is a high-performance backend cache system (packagist package phpfastcache/phpfastcache). In versions before 6.1.5, 7.1.2, and 8.0.7 the `phpinfo()` can be exposed if the `/vendor` is not protected from public access. This is a rare situation today since the vendor directory is often located outside the web directory or protected via server rule (.htaccess, etc). Only the v6, v7 and v8 will be patched respectively i
e the web directory or protected via server rule (.htaccess, etc). Only the v6, v7 and v8 will be patched respectively in 8.0.7, 7.1.2, 6.1.5. Older versions such as v5, v4 are not longer supported and will **NOT** be patched. As a workaround, protect the `/vendor` directory from public access. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PHPSocialNetwork/phpfastcache/security/advisories/GHSA-cvh5-p6r6-g2qc - https://github.com/flextype/flextype/issues/567 - https://github.com/PHPSocialNetwork/phpfastcache/pull/813 - https://github.com/PHPSocialNetwork/phpfastcache/pull/814 - https://github.com/PHPSocialNetwork/phpfastcache/pull/815 - https://github.com
/PHPSocialNetwork/phpfastcache/pull/814 - https://github.com/PHPSocialNetwork/phpfastcache/pull/815 - https://github.com/PHPSocialNetwork/phpfastcache/commit/41a77d0d8f126dbd6fbedcd9e6a82e86cdaafa51 - https://github.com/PHPSocialNetwork/phpfastcache/blob/master/CHANGELOG.md#807 - https://packagist.org/packages/phpfastcache/phpfastcache
CVE ID: CVE-2021-37705 State: PUBLISHED Published: 2021-08-13T20:15:11 Last Updated: 2024-08-04T01:23:01.448Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L) Vendors: microsoft Products: onefuzz Problem Types: CWE-285, CWE-346 Description: OneFuzz is an open source self-hosted Fuzzing-As-A-Service platform. Starting with OneFuzz 2.12.0 or greater, an incomplete authorization check allows an authenticated user from any Azure Active Directory tenant to make authorized API calls to a vulnerable OneFuzz instance. To be vulnerable, a OneFuzz deployment must be both version 2.12.0 or greater and deployed with the non-default --multi_tenant_domain option. This can result i
must be both version 2.12.0 or greater and deployed with the non-default --multi_tenant_domain option. This can result in read/write access to private data such as software vulnerability and crash information, security testing tools and proprietary code and symbols. Via authorized API calls, this also enables tampering with existing data and unauthorized code execution on Azure compute resources. This issue is resolved starting in release 2.31.0, via the addition of application-level check of the bearer token's `issuer` against an administrator-configured allowlist. As a workaround users can restrict access to the tenant of a deployed OneFuzz instance < 2.31.0 by redeploying in the default c
rkaround users can restrict access to the tenant of a deployed OneFuzz instance < 2.31.0 by redeploying in the default configuration, which omits the `--multi_tenant_domain` option. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/microsoft/onefuzz/security/advisories/GHSA-q5vh-6whw-x745 - https://github.com/microsoft/onefuzz/pull/1153 - https://github.com/microsoft/onefuzz/commit/2fcb4998887959b4fa11894a068d689189742cb1 - https://github.com/microsoft/onefuzz/releases/tag/2.31.0 - https://pypi.org/project/onefuzz/
CVE ID: CVE-2021-37706 State: PUBLISHED Published: 2021-12-22T00:00:00.000Z Last Updated: 2025-11-04T16:09:17.025Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: pjsip Products: pjproject Problem Types: CWE-191 Description: PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before performing a subtraction operation, potentially resulting in an integer underflow scenario. This issue affects all users that use STUN. A malicious ac
tion, potentially resulting in an integer underflow scenario. This issue affects all users that use STUN. A malicious actor located within the victim’s network may forge and send a specially crafted UDP (STUN) message that could remotely execute arbitrary code on the victim’s machine. Users are advised to upgrade as soon as possible. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjsip/pjproject/security/advisories/GHSA-2qpg-f6wf-w984 - https://github.com/pjsip/pjproject/commit/15663e3f37091069b8c98a7fce680dc04bc8e865 - http://seclists.org/fulldisclosure/2022/Mar/0 - http://packetstormsecurity.com/files/166225/Asterisk-Proj
0dc04bc8e865 - http://seclists.org/fulldisclosure/2022/Mar/0 - http://packetstormsecurity.com/files/166225/Asterisk-Project-Security-Advisory-AST-2022-004.html - https://lists.debian.org/debian-lts-announce/2022/03/msg00035.html - https://security.gentoo.org/glsa/202210-37 - https://lists.debian.org/debian-lts-announce/2022/11/msg00021.html - https://www.debian.org/security/2022/dsa-5285 - https://lists.debian.org/debian-lts-announce/2023/08/msg00038.html
CVE ID: CVE-2021-37707 State: PUBLISHED Published: 2021-08-16T18:55:10 Last Updated: 2024-08-04T01:23:01.507Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: shopware Products: platform Problem Types: CWE-20 Description: Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a vulnerability that allows manipulation of product reviews via API. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shopware/platform/security/advisories/GHSA-9f8f-574q-8jm
otes: - CVE Program Container: References: - https://github.com/shopware/platform/security/advisories/GHSA-9f8f-574q-8jmf - https://github.com/shopware/platform/commit/912b96de3b839c6c5525c98cbb58f537c2d838be
CVE ID: CVE-2021-37708 State: PUBLISHED Published: 2021-08-16T19:15:13 Last Updated: 2024-08-04T01:23:01.658Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: shopware Products: platform Problem Types: CWE-77 Description: Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a command injection vulnerability in mail agent settings. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shopware/platform/security/advisories/GHSA-xh55-2fqp-p775 - https://g
rogram Container: References: - https://github.com/shopware/platform/security/advisories/GHSA-xh55-2fqp-p775 - https://github.com/shopware/platform/commit/82d8d1995f6ce9054323b2c3522b1b3cf04853aa
CVE ID: CVE-2021-37709 State: PUBLISHED Published: 2021-08-16T22:05:12 Last Updated: 2024-08-04T01:23:01.522Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: shopware Products: platform Problem Types: CWE-532 Description: Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a vulnerability involving an insecure direct object reference of log files of the Import/Export feature. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shopware/platform/s
le via a plugin. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shopware/platform/security/advisories/GHSA-54gp-qff8-946c - https://github.com/shopware/platform/commit/a9f52abb6eb503654c492b6b2076f8d924831fec
CVE ID: CVE-2021-37710 State: PUBLISHED Published: 2021-08-16T22:20:10 Last Updated: 2024-08-04T01:23:01.529Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: shopware Products: platform Problem Types: CWE-79 Description: Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a Cross-Site Scripting vulnerability via SVG media files. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shopware/platform/security/advisories/GHSA-fc38-mxwr-pfhx - https://git
gram Container: References: - https://github.com/shopware/platform/security/advisories/GHSA-fc38-mxwr-pfhx - https://github.com/shopware/platform/commit/abe9f69e1f667800f974acccd3047b4930e4b423
CVE ID: CVE-2021-37711 State: PUBLISHED Published: 2021-08-16T22:25:10 Last Updated: 2024-08-04T01:23:01.658Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: shopware Products: platform Problem Types: CWE-918 Description: Versions prior to 6.4.3.1 contain an authenticated server-side request forgery vulnerability in file upload via URL. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shopware/platform/security/advisories/GHSA-gcvv-gq92-x94r - https://github.com/shopware/pl
erences: - https://github.com/shopware/platform/security/advisories/GHSA-gcvv-gq92-x94r - https://github.com/shopware/platform/commit/b9f330e652b743dd2374c02bbe68f28b59a3f502
CVE ID: CVE-2021-37712 State: PUBLISHED Published: 2021-08-31T00:00:00 Last Updated: 2024-08-04T01:23:01.507Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: npm Products: node-tar Problem Types: CWE-22, CWE-59 Description: The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieved by ensuring that extracted directories are not symlinks. Additionally, in order to prevent unnecessary stat calls to determine whether a given
cted directories are not symlinks. Additionally, in order to prevent unnecessary stat calls to determine whether a given path is a directory, paths are cached when directories are created. This logic was insufficient when extracting tar files that contained both a directory and a symlink with names containing unicode values that normalized to the same value. Additionally, on Windows systems, long path portions would resolve to the same file system entities as their 8.3 "short path" counterparts. A specially crafted tar archive could thus include a directory with one form of the path, followed by a symbolic link with a different string that resolves to the same file system entity, followed by
the path, followed by a symbolic link with a different string that resolves to the same file system entity, followed by a file using the first form. By first creating a directory, and then replacing that directory with a symlink that had a different apparent name that resolved to the same entry in the filesystem, it was thus possible to bypass node-tar symlink checks on directories, essentially allowing an untrusted tar file to symlink into an arbitrary location and subsequently extracting arbitrary files into that location, thus allowing arbitrary file creation and overwrite. These issues were addressed in releases 4.4.18, 5.0.10 and 6.1.9. The v3 branch of node-tar has been deprecated and
ite. These issues were addressed in releases 4.4.18, 5.0.10 and 6.1.9. The v3 branch of node-tar has been deprecated and did not receive patches for these issues. If you are still using a v3 release we recommend you update to a more recent version of node-tar. If this is not possible, a workaround is available in the referenced GHSA-qq89-hq3f-393p. Additional Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/package/tar - https://github.com/npm/node-tar/security/advisories/GHSA-qq89-hq3f-393p - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.debian.org/security/2021/dsa-5008 - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf - http
- https://www.debian.org/security/2021/dsa-5008 - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf - https://lists.debian.org/debian-lts-announce/2022/12/msg00023.html
CVE ID: CVE-2021-37713 State: PUBLISHED Published: 2021-08-31T16:50:09 Last Updated: 2024-08-04T01:23:01.533Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: npm Products: node-tar Problem Types: CWE-22 Description: The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be outside of the extraction target directory is not extracted. This is, in part, accomplished by sanitizing absolute paths of entries within the archive, skipping archive entries that contain `..` path portions, and resolving
ng absolute paths of entries within the archive, skipping archive entries that contain `..` path portions, and resolving the sanitized paths against the extraction target directory. This logic was insufficient on Windows systems when extracting tar files that contained a path that was not an absolute path, but specified a drive letter different from the extraction target, such as `C:some\path`. If the drive letter does not match the extraction target, for example `D:\extraction\dir`, then the result of `path.resolve(extractionDirectory, entryPath)` would resolve against the current working directory on the `C:` drive, rather than the extraction target directory. Additionally, a `..` portion
current working directory on the `C:` drive, rather than the extraction target directory. Additionally, a `..` portion of the path could occur immediately after the drive letter, such as `C:../foo`, and was not properly sanitized by the logic that checked for `..` within the normalized and split portions of the path. This only affects users of `node-tar` on Windows systems. These issues were addressed in releases 4.4.18, 5.0.10 and 6.1.9. The v3 branch of node-tar has been deprecated and did not receive patches for these issues. If you are still using a v3 release we recommend you update to a more recent version of node-tar. There is no reasonable way to work around this issue without perfo
mend you update to a more recent version of node-tar. There is no reasonable way to work around this issue without performing the same path normalization procedures that node-tar now does. Users are encouraged to upgrade to the latest patched versions of node-tar, rather than attempt to sanitize paths themselves. Additional Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/package/tar - https://github.com/npm/node-tar/security/advisories/GHSA-5955-9wpr-37jh - https://www.oracle.com/security-alerts/cpuoct2021.html - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
CVE ID: CVE-2021-37714 State: PUBLISHED Published: 2021-08-18T15:10:11 Last Updated: 2024-08-04T01:23:01.524Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: jhy Products: jsoup Problem Types: CWE-835, CWE-248 Description: jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack. The issue is pat