Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-64695 State: PUBLISHED Published: 2025-11-21T06:18:05.007Z Last Updated: 2025-11-21T14:57:51.700Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: LogStare Inc. Products: Installer of LogStare Collector (for Windows) Problem Types: CWE-427 Description: Uncontrolled search path element issue exists in the installer of LogStare Collector (for Windows). If exploited, arbitrary code may be executed with the privilege of the user invoking the installer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.logstare.com/vulnerability/2025-001/ - https://jvn.jp/en/jp/JVN77560819/
CVE ID: CVE-2025-64703 State: PUBLISHED Published: 2025-11-13T15:52:44.465Z Last Updated: 2025-11-13T16:16:09.452Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: 1Panel-dev Products: MaxKB Problem Types: CWE-200 Description: MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can get sensitive informations by Python code in tool module, although the process run in sandbox. Version 2.3.1 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-qwvm-x4xh-g2qq
CVE ID: CVE-2025-64705 State: PUBLISHED Published: 2025-11-12T22:25:49.724Z Last Updated: 2025-11-13T14:35:25.946Z Vendors: frappe Products: lms Problem Types: CWE-200 Description: Frappe Learning is a learning system that helps users structure their content. Starting in version 2.0.0 and prior to version 2.41.0, users were able to access the submissions made by other students The issue has been fixed in version 2.41.0 by ensuring proper roles and redirecting if accessed via direct URL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/frappe/lms/security/advisories/GHSA-qrvv-6g7r-g3v8
CVE ID: CVE-2025-64706 State: PUBLISHED Published: 2025-11-13T17:49:29.802Z Last Updated: 2025-11-13T18:22:36.897Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: baptisteArno Products: typebot.io Problem Types: CWE-639, CWE-284 Description: Typebot is an open-source chatbot builder. In version 3.9.0 up to but excluding version 3.13.0, an Insecure Direct Object Reference (IDOR) vulnerability exists in the API token management endpoint. An authenticated attacker can delete any user's API token and retrieve its value by simply knowing the target user's ID and token ID, without requiring authorization checks. Version 3.13.0 fixes the issue. Additional Analyst Not
t user's ID and token ID, without requiring authorization checks. Version 3.13.0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-grx8-g27p-8hpp
CVE ID: CVE-2025-64707 State: PUBLISHED Published: 2025-11-12T22:27:54.937Z Last Updated: 2025-11-13T14:35:20.671Z Vendors: frappe Products: lms Problem Types: CWE-863 Description: Frappe Learning is a learning system that helps users structure their content. Starting in version 2.0.0 and prior to version 2.41.0, when admins revoked a role from the user, the effect was not immediate because of caching. The issue has been fixed in version 2.41.0 by ensuring the cache is cleared after roles are updated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/frappe/lms/security/advisories/GHSA-w2gf-rchw-x6vm
CVE ID: CVE-2025-64708 State: PUBLISHED Published: 2025-11-19T17:03:22.858Z Last Updated: 2025-11-20T15:48:29.627Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: goauthentik Products: authentik Problem Types: CWE-613 Description: authentik is an open-source Identity Provider. Prior to versions 2025.8.5 and 2025.10.2, in previous authentik versions, invitations were considered valid regardless if they are expired or not, thus relying on background tasks to clean up expired ones. In a normal scenario this can take up to 5 minutes because the cleanup of expired objects is scheduled to run every 5 minutes. However, with a large amount of tasks in the backlog, t
cleanup of expired objects is scheduled to run every 5 minutes. However, with a large amount of tasks in the backlog, this might take longer. authentik versions 2025.8.5 and 2025.10.2 fix this issue. A workaround involves creating a policy that explicitly checks whether the invitation is still valid, and then bind it to the invitation stage on the invitation flow, and denying access if the invitation is not valid. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/goauthentik/authentik/security/advisories/GHSA-ch7q-53v8-73pc - https://github.com/goauthentik/authentik/commit/6672e6aaa41e0f2c9bfb1e4d8b51cf114969e830
CVE ID: CVE-2025-64709 State: PUBLISHED Published: 2025-11-13T19:42:42.603Z Last Updated: 2025-11-13T19:53:56.903Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: baptisteArno Products: typebot.io Problem Types: CWE-918 Description: Typebot is an open-source chatbot builder. In versions prior to 3.13.1, a Server-Side Request Forgery (SSRF) vulnerability in the Typebot webhook block (HTTP Request component) functionality allows authenticated users to make arbitrary HTTP requests from the server, including access to AWS Instance Metadata Service (IMDS). By bypassing IMDSv2 protection through custom header injection, attackers can extract temporary AWS IAM cr
rvice (IMDS). By bypassing IMDSv2 protection through custom header injection, attackers can extract temporary AWS IAM credentials for the EKS node role, leading to complete compromise of the Kubernetes cluster and associated AWS infrastructure. Version 3.13.1 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-8gq9-rw7v-3jpr
CVE ID: CVE-2025-64710 State: PUBLISHED Published: 2025-11-13T01:40:55.653Z Last Updated: 2025-11-13T14:35:03.575Z Vendors: bitfoundation Products: bitplatform Problem Types: CWE-79 Description: Bitplatform Boilerplate is a Visual studio and .NET project template. Versions prior to 9.11.3 are affected by a cross-site scripting (XSS) vulnerability in the WebInteropApp/WebAppInterop, potentially allowing attackers to inject malicious scripts that compromise the security and integrity of web applications. Applications based on this Bitplatform Boilerplate might also be vulnerable. Version 9.11.3 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com
ble. Version 9.11.3 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bitfoundation/bitplatform/security/advisories/GHSA-rv95-xj37-7c3w
CVE ID: CVE-2025-64711 State: PUBLISHED Published: 2025-11-13T01:50:31.780Z Last Updated: 2025-11-13T14:34:51.745Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: PrivateBin Products: PrivateBin Problem Types: CWE-79 Description: PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Starting in version 1.7.7 and prior to version 2.0.3, dragging a file whose filename contains HTML is reflected verbatim into the page via the drag-and-drop helper, so any user who drops a crafted file on PrivateBin will execute arbitrary JavaScript within their own session (self-XSS). This allows an attacker who can entice a victim to drag or otherwis
rary JavaScript within their own session (self-XSS). This allows an attacker who can entice a victim to drag or otherwise attach such a file to exfiltrate plaintext, encryption keys, or stored pastes before they are encrypted or sent. Certain conditions must exist for the vulnerability to be exploitable. Only macOS or Linux users are affected, due to the way the `>` character is treated in a file name on Windows. The PrivateBin instance needs to have file upload enabled. An attacker needs to have access to the local file system or somehow convince the user to create (or download) a malicious file (name). An attacker needs to convince the user to attach that malicious file to PrivateBin. Any
nload) a malicious file (name). An attacker needs to convince the user to attach that malicious file to PrivateBin. Any Mac / Linux user who can be tricked into dragging a maliciously named file into the editor is impacted; code runs in the origin of the PrivateBin instance they are using. Attackers can steal plaintext, passphrases, or manipulate the UI before data is encrypted, defeating the zero-knowledge guarantees for that victim session, assuming counter-measures like Content-Security-Policy (CSP) have been disabled. If CSP is not disabled, HTML injection attacks may be possible - like redirecting to a foreign website, phishing etc. As the whole exploit needs to be included in the file
e possible - like redirecting to a foreign website, phishing etc. As the whole exploit needs to be included in the file name of the attached file and only affects the local session of the user (aka it is neither persistent nor remotely executable) and that user needs to interact and actively attach that file to the paste, the impact is considered to be practically low. Version 2.0.3 patches the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PrivateBin/PrivateBin/security/advisories/GHSA-r9x7-7ggj-fx9f - https://github.com/PrivateBin/PrivateBin/commit/f9550e513381208b36595ee2404e968144bba78b
CVE ID: CVE-2025-64714 State: PUBLISHED Published: 2025-11-13T15:16:55.347Z Last Updated: 2025-11-13T15:34:19.782Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: PrivateBin Products: PrivateBin Problem Types: CWE-23, CWE-73, CWE-98 Description: PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Starting in version 1.7.7 and prior to version 2.0.3, an unauthenticated Local File Inclusion exists in the template-switching feature. If `templateselection` is enabled in the configuration, the server trusts the `template` cookie and includes the referenced PHP file. An attacker can read sensitive data or, if they manage to drop a
template` cookie and includes the referenced PHP file. An attacker can read sensitive data or, if they manage to drop a PHP file elsewhere, gain remote code execution. The constructed path of the template file is checked for existence, then included. For PrivateBin project files this does not leak any secrets due to data files being created with PHP code that prevents execution, but if a configuration file without that line got created or the visitor figures out the relative path to a PHP script that directly performs an action without appropriate privilege checking, those might execute or leak information. The issue has been patched in version 2.0.3. As a workaround, set `templateselection
might execute or leak information. The issue has been patched in version 2.0.3. As a workaround, set `templateselection = false` (which is the default) in `cfg/conf.php` or remove it entirely Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PrivateBin/PrivateBin/security/advisories/GHSA-g2j9-g8r5-rg82 - https://github.com/PrivateBin/PrivateBin/commit/4434dbf73ac53217fda0f90d8cf9b6110f8acc4f
CVE ID: CVE-2025-64716 State: PUBLISHED Published: 2025-11-13T01:46:19.982Z Last Updated: 2025-11-13T14:34:57.055Z Vendors: TecharoHQ Products: anubis Problem Types: CWE-79, CWE-601 Description: Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scraper bots. Prior to version 1.23.0, when using subrequest authentication, Anubis did not perform validation of the redirect URL and redirects user to any URL scheme. While most modern browsers do not allow a redirect to `javascript:` URLs, it could still trigger dangerous behavior in some cases. Anybody with a subrequest authentication may be affected. Version 1.23.0 contains a fix fo
erous behavior in some cases. Anybody with a subrequest authentication may be affected. Version 1.23.0 contains a fix for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/TecharoHQ/anubis/security/advisories/GHSA-cf57-c578-7jvv - https://github.com/TecharoHQ/anubis/commit/7ed1753fcced351c81961bf520a7bfb2caac6e88 - https://pkg.go.dev/vuln/GO-2025-4086
CVE ID: CVE-2025-64717 State: PUBLISHED Published: 2025-11-13T15:30:51.233Z Last Updated: 2025-11-13T17:09:03.838Z Vendors: zitadel Products: zitadel Problem Types: CWE-287 Description: ZITADEL is an open source identity management platform. Starting in version 2.50.0 and prior to versions 2.71.19, 3.4.4, and 4.6.6, a vulnerability in ZITADEL's federation process allowed auto-linking users from external identity providers to existing users in ZITADEL even if the corresponding IdP was not active or if the organization did not allow federated authentication. This vulnerability stems from the platform's failure to correctly check or enforce an organization's specific security settings during th
y stems from the platform's failure to correctly check or enforce an organization's specific security settings during the authentication flow. An Organization Administrator can explicitly disable an IdP or disallow federation, but this setting was not being honored during the auto-linking process. This allowed an unauthenticated attacker to initiate a login using an IdP that should have been disabled for that organization. The platform would incorrectly validate the login and, based on a matching criteria, link the attacker's external identity to an existing internal user account. This may result in a full Account Takeover, bypassing the organization's mandated security controls. Note that a
ccount. This may result in a full Account Takeover, bypassing the organization's mandated security controls. Note that accounts with MFA enabled can not be taken over by this attack. Also note that only IdPs create on an instance level would allow this to work. IdPs registered on another organization would always be denied in the (auto-)linking process. Versions 4.6.6, 3.4.4, and 2.71.19 resolve the issue by correctly validating the organization's login policy before auto-linking an external user. No known workarounds are available aside from upgrading. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zitadel/zitadel/security/advisories/GHSA-j4g7-v4m4-77px
otes: - CISA ADP Vulnrichment: References: - https://github.com/zitadel/zitadel/security/advisories/GHSA-j4g7-v4m4-77px - https://github.com/zitadel/zitadel/releases/tag/v2.71.19 - https://github.com/zitadel/zitadel/releases/tag/v3.4.4 - https://github.com/zitadel/zitadel/releases/tag/v4.6.6
CVE ID: CVE-2025-64718 State: PUBLISHED Published: 2025-11-13T15:32:44.634Z Last Updated: 2025-11-13T16:18:39.270Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: nodeca Products: js-yaml Problem Types: CWE-1321 Description: js-yaml is a JavaScript YAML parser and dumper. In js-yaml 4.1.0 and below, it's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution (`__proto__`). All users who parse untrusted yaml documents may be impacted. The problem is patched in js-yaml 4.1.1. Users can protect against this kind of attack on the server by using `node --disable-proto=delete` or `deno` (in Deno, pollution
protect against this kind of attack on the server by using `node --disable-proto=delete` or `deno` (in Deno, pollution protection is on by default). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nodeca/js-yaml/security/advisories/GHSA-mh29-5h37-fv8m - https://github.com/nodeca/js-yaml/commit/383665ff4248ec2192d1274e934462bb30426879
CVE ID: CVE-2025-64720 State: PUBLISHED Published: 2025-11-24T23:45:38.315Z Last Updated: 2025-11-24T23:45:38.315Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H) Vendors: pnggroup Products: libpng Problem Types: CWE-125 Description: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly applies background compositing during premultiplicat
lette compositing code in png_init_read_transformations incorrectly applies background compositing during premultiplication, violating the invariant component ≤ alpha × 257 required by the simplified PNG API. This issue has been patched in version 1.6.51. References: - https://github.com/pnggroup/libpng/security/advisories/GHSA-hfc7-ph9c-wcww - https://github.com/pnggroup/libpng/issues/686 - https://github.com/pnggroup/libpng/pull/751 - https://github.com/pnggroup/libpng/commit/08da33b4c88cfcd36e5a706558a8d7e0e4773643
CVE ID: CVE-2025-64726 State: PUBLISHED Published: 2025-11-13T19:55:57.970Z Last Updated: 2025-11-13T20:18:33.987Z Vendors: SocketDev Products: firewall-release Problem Types: CWE-15, CWE-427 Description: Socket Firewall is an HTTP/HTTPS proxy server that intercepts package manager requests and enforces security policies by blocking dangerous packages. Socket Firewall binary versions (separate from installers) prior to 0.15.5 are vulnerable to arbitrary code execution when run in untrusted project directories. The vulnerability allows an attacker to execute arbitrary code by placing a malicious `.sfw.config` file in a project directory. When a developer runs Socket Firewall commands (e.g., `
y placing a malicious `.sfw.config` file in a project directory. When a developer runs Socket Firewall commands (e.g., `sfw npm install`) in that directory, the tool loads the `.sfw.config` file and populates environment variables directly into the Node.js process. An attacker can exploit this by setting `NODE_OPTIONS` with a `--require` directive to execute malicious JavaScript code before Socket Firewall's security controls are initialized, effectively bypassing the tool's malicious package detection. The attack vector is indirect and requires a developer to install dependencies for an untrusted project and execute a command within the context of the untrusted project. The vulnerability ha
dencies for an untrusted project and execute a command within the context of the untrusted project. The vulnerability has been patched in Socket Firewall version 0.15.5. Users should upgrade to version 0.15.5 or later. The fix isolates configuration file values from subprocess environments. Look at `sfw --version` for version information. If users rely on the recommended installation mechanism (e.g. global installation via `npm install -g sfw`) then no workaround is necessary. This wrapper package automatically ensures that users are running the latest version of Socket Firewall. Users who have manually installed the binary and cannot immediately upgrade should avoid running Socket Firewall
ewall. Users who have manually installed the binary and cannot immediately upgrade should avoid running Socket Firewall in untrusted project directories. Before running Socket Firewall in any new project, inspect `.sfw.config` and `.env.local` files for suspicious `NODE_OPTIONS` or other environment variable definitions that reference local files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/SocketDev/firewall-release/security/advisories/GHSA-6c5p-vqrh-h6fp - https://bsky.app/profile/evilpacket.net/post/3m4iylwxtns2t
CVE ID: CVE-2025-64730 State: PUBLISHED Published: 2025-11-25T04:37:26.723Z Last Updated: 2025-11-25T04:37:26.723Z Severity: MEDIUM (CVSS 5.2 CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Sony Corporation Products: SNC-CX600W Problem Types: CWE-79 Description: Cross-site scripting vulnerability exists in SNC-CX600W all versions. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the product. References: - https://www.sony.com/electronics/support/ip-cameras-fixed/snc-cx600w - https://jvn.jp/en/jp/JVN75140384/
CVE ID: CVE-2025-64734 State: PUBLISHED Published: 2025-11-18T03:26:44.442Z Last Updated: 2025-11-19T16:49:27.607Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Gallagher Products: T21 Reader Problem Types: CWE-772 Description: Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.
8a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-64734
CVE ID: CVE-2025-64738 State: PUBLISHED Published: 2025-11-13T14:23:00.704Z Last Updated: 2025-11-14T16:52:02.952Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Zoom Communications Inc. Products: Zoom Workplace for macOS Problem Types: CWE-73 Description: External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-25040
CVE ID: CVE-2025-64739 State: PUBLISHED Published: 2025-11-13T14:28:58.527Z Last Updated: 2025-11-14T16:51:41.747Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Zoom Communications Inc. Products: Zoom Clients Problem Types: CWE-73 Description: External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-25041
CVE ID: CVE-2025-64740 State: PUBLISHED Published: 2025-11-13T14:35:39.025Z Last Updated: 2025-11-14T16:51:22.757Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Zoom Communications Inc. Products: Zoom Workplace VDI Client Problem Types: CWE-347 Description: Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zoom.com/en/trust/security-bulletin/ZSB-25042
CVE ID: CVE-2025-64741 State: PUBLISHED Published: 2025-11-13T14:46:59.205Z Last Updated: 2025-11-14T04:55:32.679Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Zoom Communications Inc. Products: Zoom Workplace for Android Problem Types: CWE-74 Description: Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-25043