Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-29478 State: PUBLISHED Published: 2021-05-04T16:00:23 Last Updated: 2024-08-03T22:11:05.417Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: redis Products: redis Problem Types: CWE-190 Description: Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis 6.2 before 6.2.3 could be exploited to corrupt the heap and potentially result with remote code execution. Redis 6.0 and earlier are not directly affected by this issue. The problem is fixed in version 6.2.3. An additional workaround to mitigate the problem without patching the `redis-server` execut
m is fixed in version 6.2.3. An additional workaround to mitigate the problem without patching the `redis-server` executable is to prevent users from modifying the `set-max-intset-entries` configuration parameter. This can be done using ACL to restrict unprivileged users from using the `CONFIG SET` command. Additional Analyst Notes: - CVE Program Container: References: - https://redis.io/ - https://github.com/redis/redis/security/advisories/GHSA-qh52-crrg-44g3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZJ6JGQ2ETZB2DWTQSGCOGG7EF3ILV4V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPW
QSGCOGG7EF3ILV4V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPWBIZXA67JFIB63W2CNVVILCGIC2ME5/ - https://security.gentoo.org/glsa/202107-20
CVE ID: CVE-2021-29479 State: PUBLISHED Published: 2021-06-29T14:35:12 Last Updated: 2024-08-03T22:11:05.264Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: ratpack Products: ratpack Problem Types: CWE-807 Description: Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, a user supplied `X-Forwarded-Host` header can be used to perform cache poisoning of a cache fronting a Ratpack server if the cache key does not include the `X-Forwarded-Host` header as a cache key. Users are only vulnerable if they do not configure a custom `PublicAddress` instance. For versions prior to 1.9.0, by default, Ratpack utilizes an inferring version of `Pub
custom `PublicAddress` instance. For versions prior to 1.9.0, by default, Ratpack utilizes an inferring version of `PublicAddress` which is vulnerable. This can be used to perform redirect cache poisoning where an attacker can force a cached redirect to redirect to their site instead of the intended redirect location. The vulnerability was patched in Ratpack 1.9.0. As a workaround, ensure that `ServerConfigBuilder::publicAddress` correctly configures the server in production. Additional Analyst Notes: - CVE Program Container: References: - https://portswigger.net/web-security/web-cache-poisoning - https://github.com/ratpack/ratpack/security/advisories/GHSA-w6rq-6h34-vh7q
CVE ID: CVE-2021-29480 State: PUBLISHED Published: 2021-06-29T18:15:12 Last Updated: 2024-08-03T22:11:05.265Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: ratpack Products: ratpack Problem Types: CWE-340 Description: Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, the client side session module uses the application startup time as the signing key by default. This means that if an attacker can determine this time, and if encryption is not also used (which is recommended, but is not on by default), the session data could be tampered with by someone with the ability to write cookies. The default configuration is unsuitable for
on data could be tampered with by someone with the ability to write cookies. The default configuration is unsuitable for production use as an application restart renders all sessions invalid and is not multi-host compatible, but its use is not actively prevented. As of Ratpack 1.9.0, the default value is a securely randomly generated value, generated at application startup time. As a workaround, supply an alternative signing key, as per the documentation's recommendation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ratpack/ratpack/security/advisories/GHSA-2cc5-23r7-vc4v - https://github.com/ratpack/ratpack/blob/29434f7ac6fd4b36a4495429b70f4c8163100332/
urity/advisories/GHSA-2cc5-23r7-vc4v - https://github.com/ratpack/ratpack/blob/29434f7ac6fd4b36a4495429b70f4c8163100332/ratpack-session/src/main/java/ratpack/session/clientside/ClientSideSessionConfig.java#L29
CVE ID: CVE-2021-29481 State: PUBLISHED Published: 2021-06-29T18:20:12 Last Updated: 2024-08-03T22:11:05.773Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: ratpack Products: ratpack Problem Types: CWE-312 Description: Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, the default configuration of client side sessions results in unencrypted, but signed, data being set as cookie values. This means that if something sensitive goes into the session, it could be read by something with access to the cookies. For this to be a vulnerability, some kind of sensitive data would need to be stored in the session and the session cookie would
s to be a vulnerability, some kind of sensitive data would need to be stored in the session and the session cookie would have to leak. For example, the cookies are not configured with httpOnly and an adjacent XSS vulnerability within the site allowed capture of the cookies. As of version 1.9.0, a securely randomly generated signing key is used. As a workaround, one may supply an encryption key, as per the documentation recommendation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ratpack/ratpack/security/advisories/GHSA-phj8-4cq3-794g - https://github.com/ratpack/ratpack/pull/1590
CVE ID: CVE-2021-29482 State: PUBLISHED Published: 2021-04-28T18:15:15 Last Updated: 2024-08-03T22:11:05.477Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ulikunitz Products: xz Problem Types: CWE-835 Description: xz is a compression and decompression library focusing on the xz format completely written in Go. The function readUvarint used to read the xz container format may not terminate a loop provide malicous input. The problem has been fixed in release v0.5.8. As a workaround users can limit the size of the compressed file input to a reasonable size for their use case. The standard library had recently the same issue and got the CVE-2020-16845 allocated
easonable size for their use case. The standard library had recently the same issue and got the CVE-2020-16845 allocated. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ulikunitz/xz/security/advisories/GHSA-25xm-hr59-7c27 - https://github.com/ulikunitz/xz/commit/69c6093c7b2397b923acf82cb378f55ab2652b9b
CVE ID: CVE-2021-29483 State: PUBLISHED Published: 2021-04-28T21:25:13 Last Updated: 2024-08-03T22:11:05.326Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H) Vendors: miraheze Products: ManageWiki Problem Types: CWE-200 Description: ManageWiki is an extension to the MediaWiki project. The 'wikiconfig' API leaked the value of private configuration variables set through the ManageWiki variable to all users. This has been patched by https://github.com/miraheze/ManageWiki/compare/99f3b2c8af18...befb83c66f5b.patch. If you are unable to patch set `$wgAPIListModules['wikiconfig'] = 'ApiQueryDisabled';` or remove private config as a workaround. Additional Analyst Notes: -
IListModules['wikiconfig'] = 'ApiQueryDisabled';` or remove private config as a workaround. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/miraheze/ManageWiki/security/advisories/GHSA-jmc9-rv2f-g8vv - https://github.com/miraheze/ManageWiki/commit/befb83c66f5b643e174897ea41a8a46679b26304 - https://phabricator.miraheze.org/T7213
CVE ID: CVE-2021-29484 State: PUBLISHED Published: 2021-04-29T20:35:15 Last Updated: 2024-08-03T22:11:05.475Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: TryGhost Products: Ghost Problem Types: CWE-79 Description: Ghost is a Node.js CMS. An unused endpoint added during the development of 4.0.0 has left sites vulnerable to untrusted users gaining access to Ghost Admin. Attackers can gain access by getting logged in users to click a link containing malicious code. Users do not need to enter credentials and may not know they've visited a malicious site. Ghost(Pro) has already been patched. We can find no evidence that the issue was exploited on Ghost(Pro) p
alicious site. Ghost(Pro) has already been patched. We can find no evidence that the issue was exploited on Ghost(Pro) prior to the patch being added. Self-hosters are impacted if running Ghost a version between 4.0.0 and 4.3.2. Immediate action should be taken to secure your site. The issue has been fixed in 4.3.3, all 4.x sites should upgrade as soon as possible. As the endpoint is unused, the patch simply removes it. As a workaround blocking access to /ghost/preview can also mitigate the issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TryGhost/Ghost/security/advisories/GHSA-9fgx-q25h-jxrg - https://forum.ghost.org/t/critical-security-update-avail
ub.com/TryGhost/Ghost/security/advisories/GHSA-9fgx-q25h-jxrg - https://forum.ghost.org/t/critical-security-update-available-for-ghost-4-x/22290 - https://www.npmjs.com/package/ghost - https://blog.sonarsource.com/ghost-admin-takeover
CVE ID: CVE-2021-29485 State: PUBLISHED Published: 2021-06-29T18:35:11 Last Updated: 2024-08-03T22:11:05.208Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: ratpack Products: ratpack Problem Types: CWE-502 Description: Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, a malicious attacker can achieve Remote Code Execution (RCE) via a maliciously crafted Java deserialization gadget chain leveraged against the Ratpack session store. If one's application does not use Ratpack's session mechanism, it is not vulnerable. Ratpack 1.9.0 introduces a strict allow-list mechanism that mitigates this vulnerability when used. Two possible
rable. Ratpack 1.9.0 introduces a strict allow-list mechanism that mitigates this vulnerability when used. Two possible workarounds exist. The simplest mitigation for users of earlier versions is to reduce the likelihood of attackers being able to write to the session data store. Alternatively or additionally, the allow-list mechanism could be manually back ported by providing an alternative implementation of `SessionSerializer` that uses an allow-list. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ratpack/ratpack/security/advisories/GHSA-hc33-32vw-rpp9 - https://mvnrepository.com/artifact/io.ratpack/ratpack-core
CVE ID: CVE-2021-29486 State: PUBLISHED Published: 2021-04-30T17:20:14 Last Updated: 2024-08-03T22:11:05.564Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: DrPaulBrewer Products: cumulative-distribution-function Problem Types: CWE-20, CWE-835 Description: cumulative-distribution-function is an open source npm library used which calculates statistical cumulative distribution function from data array of x values. In versions prior to 2.0.0 apps using this library on improper data may crash or go into an infinite-loop. In the case of a nodejs server-app using this library to act on invalid non-numeric data, the nodejs server may crash. This may affect other use
server-app using this library to act on invalid non-numeric data, the nodejs server may crash. This may affect other users of this server and/or require the server to be rebooted for proper operation. In the case of a browser app using this library to act on invalid non-numeric data, that browser may crash or lock up. A flaw enabling an infinite-loop was discovered in the code for evaluating the cumulative-distribution-function of input data. Although the documentation explains that numeric data is required, some users may confuse an array of strings like ["1","2","3","4","5"] for numeric data [1,2,3,4,5] when it is in fact string data. An infinite loop is possible when the cumulative-distri
5"] for numeric data [1,2,3,4,5] when it is in fact string data. An infinite loop is possible when the cumulative-distribution-function is evaluated for a given point when the input data is string data rather than type `number`. This vulnerability enables an infinite-cpu-loop denial-of-service-attack on any app using npm:cumulative-distribution-function v1.0.3 or earlier if the attacker can supply malformed data to the library. The vulnerability could also manifest if a data source to be analyzed changes data type from Arrays of number (proper) to Arrays of string (invalid, but undetected by earlier version of the library). Users should upgrade to at least v2.0.0, or the latest version. Test
but undetected by earlier version of the library). Users should upgrade to at least v2.0.0, or the latest version. Tests for several types of invalid data have been created, and version 2.0.0 has been tested to reject this invalid data by throwing a `TypeError()` instead of processing it. Developers using this library may wish to adjust their app's code slightly to better tolerate or handle this TypeError. Apps performing proper numeric data validation before sending data to this library should be mostly unaffected by this patch. The vulnerability can be mitigated in older versions by ensuring that only finite numeric data of type `Array[number]` or `number` is passed to `cumulative-distrib
versions by ensuring that only finite numeric data of type `Array[number]` or `number` is passed to `cumulative-distribution-function` and its `f(x)` function, respectively. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DrPaulBrewer/cumulative-distribution-function/security/advisories/GHSA-58qp-5328-v7mh - https://github.com/DrPaulBrewer/cumulative-distribution-function/issues/7 - https://github.com/DrPaulBrewer/cumulative-distribution-function/pull/8 - https://www.npmjs.com/package/cumulative-distribution-function
CVE ID: CVE-2021-29487 State: PUBLISHED Published: 2021-08-26T19:00:18 Last Updated: 2024-08-03T22:11:05.562Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: octobercms Products: october Problem Types: CWE-287 Description: octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can exploit this vulnerability to bypass authentication and takeover of and user account on an October CMS server. The vulnerability is exploitable by unauthenticated users via a specially crafted request. This only affects frontend users and the attacker must obtain a Laravel secret key for cookie encryption and si
request. This only affects frontend users and the attacker must obtain a Laravel secret key for cookie encryption and signing in order to exploit this vulnerability. The issue has been patched in Build 472 and v1.1.5. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/octobercms/library/commit/016a297b1bec55d2e53bc889458ed2cb5c3e9374 - https://github.com/octobercms/library/commit/5bd1a28140b825baebe6becd4f7562299d3de3b9 - https://github.com/octobercms/october/security/advisories/GHSA-h76r-vgf3-j6w5
CVE ID: CVE-2021-29488 State: PUBLISHED Published: 2021-05-07T15:00:11 Last Updated: 2024-08-03T22:11:05.402Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: sabnzbd Products: sabnzbd Problem Types: CWE-23 Description: SABnzbd is an open source binary newsreader. A vulnerability was discovered in SABnzbd that could trick the `filesystem.renamer()` function into writing downloaded files outside the configured Download Folder via malicious PAR2 files. A patch was released as part of SABnzbd 3.2.1RC1. As a workaround, limit downloads to NZBs without PAR2 files, deny write permissions to the SABnzbd process outside areas it must access to perform its job, or upd
ithout PAR2 files, deny write permissions to the SABnzbd process outside areas it must access to perform its job, or update to a fixed version. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sabnzbd/sabnzbd/security/advisories/GHSA-jwj3-wrvf-v3rp
CVE ID: CVE-2021-29489 State: PUBLISHED Published: 2021-05-05T15:30:18 Last Updated: 2024-08-03T22:11:05.477Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: highcharts Products: highcharts Problem Types: CWE-79 Description: Highcharts JS is a JavaScript charting library based on SVG. In Highcharts versions 8 and earlier, the chart options structure was not systematically filtered for XSS vectors. The potential impact was that content from untrusted sources could execute code in the end user's browser. The vulnerability is patched in version 9. As a workaround, implementers who are not able to upgrade may apply DOMPurify recursively to the options structure to
9. As a workaround, implementers who are not able to upgrade may apply DOMPurify recursively to the options structure to filter out malicious markup. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/highcharts/highcharts/security/advisories/GHSA-8j65-4pcq-xq95 - https://security.netapp.com/advisory/ntap-20210622-0005/
CVE ID: CVE-2021-29490 State: PUBLISHED Published: 2021-05-05T18:25:13 Last Updated: 2024-08-03T22:11:05.554Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: jellyfin Products: jellyfin Problem Types: CWE-918 Description: Jellyfin is a free software media system that provides media from a dedicated server to end-user devices via multiple apps. Verions prior to 10.7.3 vulnerable to unauthenticated Server-Side Request Forgery (SSRF) attacks via the imageUrl parameter. This issue potentially exposes both internal and external HTTP servers or other resources available via HTTP `GET` that are visible from the Jellyfin server. The vulnerability is patched in versi
ther resources available via HTTP `GET` that are visible from the Jellyfin server. The vulnerability is patched in version 10.7.3. As a workaround, disable external access to the API endpoints `/Items/*/RemoteImages/Download`, `/Items/RemoteSearch/Image` and `/Images/Remote` via reverse proxy, or limit to known-friendly IPs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jellyfin/jellyfin/security/advisories/GHSA-rgjw-4fwc-9v96
CVE ID: CVE-2021-29491 State: REJECTED Published: 2021-05-06T12:51:37 Last Updated: 2022-03-14T20:10:08 Description: No description available.
CVE ID: CVE-2021-29492 State: PUBLISHED Published: 2021-05-28T21:00:24 Last Updated: 2024-08-03T22:11:05.253Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: envoyproxy Products: envoy Problem Types: CWE-22 Description: Envoy is a cloud-native edge/middle/service proxy. Envoy does not decode escaped slash sequences `%2F` and `%5C` in HTTP URL paths in versions 1.18.2 and before. A remote attacker may craft a path with escaped slashes, e.g. `/something%2F..%2Fadmin`, to bypass access control, e.g. a block on `/admin`. A backend server could then decode slash sequences and normalize path and provide an attacker access beyond the scope provided for by the access
en decode slash sequences and normalize path and provide an attacker access beyond the scope provided for by the access control policy. ### Impact Escalation of Privileges when using RBAC or JWT filters with enforcement based on URL path. Users with back end servers that interpret `%2F` and `/` and `%5C` and `\` interchangeably are impacted. ### Attack Vector URL paths containing escaped slash characters delivered by untrusted client. Patches in versions 1.18.3, 1.17.3, 1.16.4, 1.15.5 contain new path normalization option to decode escaped slash characters. As a workaround, if back end servers treat `%2F` and `/` and `%5C` and `\` interchangeably and a URL path based access control is config
if back end servers treat `%2F` and `/` and `%5C` and `\` interchangeably and a URL path based access control is configured, one may reconfigure the back end server to not treat `%2F` and `/` and `%5C` and `\` interchangeably. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/envoyproxy/envoy/security/advisories/GHSA-4987-27fx-x6cf
CVE ID: CVE-2021-29493 State: PUBLISHED Published: 2021-05-06T19:35:11 Last Updated: 2024-08-03T22:11:06.020Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: kennnyshiwa Products: kennnyshiwa-cogs Problem Types: CWE-94 Description: Kennnyshiwa-cogs contains cogs for Red Discordbot. An RCE exploit has been found in the Tickets module of kennnyshiwa-cogs. This exploit allows discord users to craft a message that can reveal sensitive and harmful information. Users can upgrade to version 5a84d60018468e5c0346f7ee74b2b4650a6dade7 to receive a patch or, as a workaround, unload tickets to render the exploit unusable. Additional Analyst Notes: - CVE Program Container
ch or, as a workaround, unload tickets to render the exploit unusable. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kennnyshiwa/kennnyshiwa-cogs/security/advisories/GHSA-f4j2-2cwr-h473 - https://github.com/kennnyshiwa/kennnyshiwa-cogs/commit/5a84d60018468e5c0346f7ee74b2b4650a6dade7
CVE ID: CVE-2021-29495 State: PUBLISHED Published: 2021-05-07T15:15:10 Last Updated: 2024-08-03T22:11:05.438Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: nim-lang Products: security Problem Types: CWE-295 Description: Nim is a statically typed compiled systems programming language. In Nim standard library before 1.4.2, httpClient SSL/TLS certificate verification was disabled by default. Users can upgrade to version 1.4.2 to receive a patch or, as a workaround, set "verifyMode = CVerifyPeer" as documented. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nim-lang/security/security/advisories/GHSA-9vqv-2jj9-7mqr
CVE ID: CVE-2021-29499 State: PUBLISHED Published: 2021-05-07T20:50:09 Last Updated: 2024-08-03T22:11:05.383Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: sylabs Products: sif Problem Types: CWE-330 Description: SIF is an open source implementation of the Singularity Container Image Format. The `siftool new` command and func siftool.New() produce predictable UUID identifiers due to insecure randomness in the version of the `github.com/satori/go.uuid` module used as a dependency. A patch is available in version >= v1.2.3 of the module. Users are encouraged to upgrade. As a workaround, users passing CreateInfo struct should ensure the `ID` field is generated
s are encouraged to upgrade. As a workaround, users passing CreateInfo struct should ensure the `ID` field is generated using a version of `github.com/satori/go.uuid` that is not vulnerable to this issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sylabs/sif/security/advisories/GHSA-4gh8-x3vv-phhg
CVE ID: CVE-2021-29500 State: PUBLISHED Published: 2021-06-04T20:05:12 Last Updated: 2024-08-03T22:11:05.453Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: fxbin Products: bubble-fireworks Problem Types: CWE-347 Description: bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly verify the signature of JSON Web Tokens. This allows to forgery of valid JWTs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fxbin/bubble-fireworks/security/advisories/GHSA-hj36-84cp-29pr