Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
and customize dbt's functionality. However, this also means that a malicious package could potentially override these components with harmful code. This issue has been fixed in versions 1.8.0, 1.6.14 and 1.7.14. Users are advised to upgrade. There are no kn own workarounds for this vulnerability. Users updating to either 1.6.14 or 1.7.14 will need to set `flags.require_explicit_package_overrides_for_builtin_materializations: False` in their configuration in `dbt_project.yml`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/dbt-labs/dbt-core/security/advisories/GHSA-p3f3-5ccg-83xq - https://github.com/dbt-labs/dbt-core/commit/3c82a
github.com/dbt-labs/dbt-core/security/advisories/GHSA-p3f3-5ccg-83xq - https://github.com/dbt-labs/dbt-core/commit/3c82a0296d227cb1be295356df314c11716f4ff6 - https://github.com/dbt-labs/dbt-core/commit/87ac4deb00cc9fe334706e42a365903a1d581624 - https://docs.getdbt.com/docs/build/packages - https://docs.getdbt.com/reference/global-configs/legacy-behaviors#behavior-change-flags - https://tempered.works/posts/2024/07/06/preventing-data-theft-with-gcp-service-controls - https://www.elementary-data.com/post/are-dbt-packages-secure-the-answer-lies-in-your-dwh-policies - https://www.equalexperts.com/blog/tech-focus/are-you-at-risk-from-this-critical-dbt-vulnerability
CVE ID: CVE-2024-40638 State: PUBLISHED Published: 2024-11-15T18:06:36.649Z Last Updated: 2024-11-19T14:11:25.885Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-89 Description: GLPI is a free asset and IT management software package. An authenticated user can exploit multiple SQL injection vulnerabilities. One of them can be used to alter another user account data and take control of it. Upgrade to 10.0.17. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-8843-r3m7-gfqx
CVE ID: CVE-2024-40639 State: REJECTED Published: 2024-07-17T17:42:47.782Z Last Updated: 2024-07-17T19:13:46.766Z Description: No description available.
CVE ID: CVE-2024-40640 State: PUBLISHED Published: 2024-07-17T17:27:15.586Z Last Updated: 2024-08-02T04:33:11.880Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: matrix-org Products: vodozemac Problem Types: CWE-208 Description: vodozemac is an open source implementation of Olm and Megolm in pure Rust. Versions before 0.7.0 of vodozemac use a non-constant time base64 implementation for importing key material for Megolm group sessions and `PkDecryption` Ed25519 secret keys. This flaw might allow an attacker to infer some information about the secret key material through a side-channel attack. The use of a non-constant time base64 implementation might allow an a
secret key material through a side-channel attack. The use of a non-constant time base64 implementation might allow an attacker to observe timing variations in the encoding and decoding operations of the secret key material. This could potentially provide insights into the underlying secret key material. The impact of this vulnerability is considered low because exploiting the attacker is required to have access to high precision timing measurements, as well as repeated access to the base64 encoding or decoding processes. Additionally, the estimated leakage amount is bounded and low according to the referenced paper. This has been patched in commit 734b6c6948d4b2bdee3dd8b4efa591d93a61d272 wh
d and low according to the referenced paper. This has been patched in commit 734b6c6948d4b2bdee3dd8b4efa591d93a61d272 which has been included in release version 0.7.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/matrix-org/vodozemac/security/advisories/GHSA-j8cm-g7r6-hfpq - https://github.com/matrix-org/vodozemac/commit/734b6c6948d4b2bdee3dd8b4efa591d93a61d272 - https://arxiv.org/abs/2108.04600
CVE ID: CVE-2024-40641 State: PUBLISHED Published: 2024-07-17T17:34:10.792Z Last Updated: 2024-08-13T20:55:48.064Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: projectdiscovery Products: nuclei Problem Types: CWE-78 Description: Nuclei is a fast and customizable vulnerability scanner based on simple YAML based DSL. In affected versions it a way to execute code template without -code option and signature has been discovered. Some web applications inherit from Nuclei and allow users to edit and execute workflow files. In this case, users can execute arbitrary commands. (Although, as far as I know, most web applications use -t to execute). This issue has been
execute arbitrary commands. (Although, as far as I know, most web applications use -t to execute). This issue has been addressed in version 3.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-c3q9-c27p-cw9h
CVE ID: CVE-2024-40642 State: PUBLISHED Published: 2024-07-18T22:21:58.017Z Last Updated: 2024-08-02T04:33:11.893Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: netty Products: netty-incubator-codec-ohttp Problem Types: CWE-20 Description: The netty incubator codec.bhttp is a java language binary http parser. In affected versions the `BinaryHttpParser` class does not properly validate input values thus giving attackers almost complete control over the HTTP requests constructed from the parsed output. Attackers can abuse several issues individually to perform various injection attacks including HTTP request smuggling, desync attacks, HTTP header injections, r
idually to perform various injection attacks including HTTP request smuggling, desync attacks, HTTP header injections, request queue poisoning, caching attacks and Server Side Request Forgery (SSRF). Attacker could also combine several issues to create well-formed messages for other text-based protocols which may result in attacks beyond the HTTP protocol. The BinaryHttpParser class implements the readRequestHead method which performs most of the relevant parsing of the received request. The data structure prefixes values with a variable length integer value. The parsing code below first gets the lengths of the values from the prefixed variable length integer. After it has all of the lengths
de below first gets the lengths of the values from the prefixed variable length integer. After it has all of the lengths and calculates all of the indices, the parser casts the applicable slices of the ByteBuf to String. Finally, it passes these values into a new `DefaultBinaryHttpRequest` object where no further parsing or validation occurs. Method is partially validated while other values are not validated at all. Software that relies on netty to apply input validation for binary HTTP data may be vulnerable to various injection and protocol based attacks. This issue has been addressed in version 0.0.13.Final. Users are advised to upgrade. There are no known workarounds for this vulnerabili
een addressed in version 0.0.13.Final. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/netty/netty-incubator-codec-ohttp/security/advisories/GHSA-q8f2-hxq5-cp4h - https://github.com/netty/netty-incubator-codec-ohttp/commit/b687a0cf6ea1030232ea204d73bce82f2698e571
CVE ID: CVE-2024-40643 State: PUBLISHED Published: 2024-09-09T14:28:20.920Z Last Updated: 2024-09-09T14:52:47.111Z Severity: CRITICAL (CVSS 9.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: laurent22 Products: joplin Problem Types: CWE-79 Description: Joplin is a free, open source note taking and to-do application. Joplin fails to take into account that "<" followed by a non letter character will not be considered html. As such it is possible to do an XSS by putting an "illegal" tag within a tag. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/laurent22/joplin/security/advisories/GHSA-g796-3g6g-jmmc - https://github.com/laurent22/joplin/commit/b22
s://github.com/laurent22/joplin/security/advisories/GHSA-g796-3g6g-jmmc - https://github.com/laurent22/joplin/commit/b220413a9b5ed55fb1f565ac786a5c231da8bc87
CVE ID: CVE-2024-40644 State: PUBLISHED Published: 2024-07-18T16:56:35.915Z Last Updated: 2024-08-02T04:33:11.977Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L) Vendors: Byron Products: gitoxide Problem Types: CWE-345 Description: gitoxide An idiomatic, lean, fast & safe pure Rust implementation of Git. `gix-path` can be tricked into running another `git.exe` placed in an untrusted location by a limited user account on Windows systems. Windows permits limited user accounts without administrative privileges to create new directories in the root of the system drive. While `gix-path` first looks for `git` using a `PATH` search, in version 0.10.8 it also has a fallback
the system drive. While `gix-path` first looks for `git` using a `PATH` search, in version 0.10.8 it also has a fallback strategy on Windows of checking two hard-coded paths intended to be the 64-bit and 32-bit Program Files directories. Existing functions, as well as the newly introduced `exe_invocation` function, were updated to make use of these alternative locations. This causes facilities in `gix_path::env` to directly execute `git.exe` in those locations, as well as to return its path or whatever configuration it reports to callers who rely on it. Although unusual setups where the system drive is not `C:`, or even where Program Files directories have non-default names, are technically
ups where the system drive is not `C:`, or even where Program Files directories have non-default names, are technically possible, the main problem arises on a 32-bit Windows system. Such a system has no `C:\Program Files (x86)` directory. A limited user on a 32-bit Windows system can therefore create the `C:\Program Files (x86)` directory and populate it with arbitrary contents. Once a payload has been placed at the second of the two hard-coded paths in this way, other user accounts including administrators will execute it if they run an application that uses `gix-path` and do not have `git` in a `PATH` directory. (While having `git` found in a `PATH` search prevents exploitation, merely hav
do not have `git` in a `PATH` directory. (While having `git` found in a `PATH` search prevents exploitation, merely having it installed in the default location under the real `C:\Program Files` directory does not. This is because the first hard-coded path's `mingw64` component assumes a 64-bit installation.). Only Windows is affected. Exploitation is unlikely except on a 32-bit system. In particular, running a 32-bit build on a 64-bit system is not a risk factor. Furthermore, the attacker must have a user account on the system, though it may be a relatively unprivileged account. Such a user can perform privilege escalation and execute code as another user, though it may be difficult to do s
count. Such a user can perform privilege escalation and execute code as another user, though it may be difficult to do so reliably because the targeted user account must run an application or service that uses `gix-path` and must not have `git` in its `PATH`. The main exploitable configuration is one where Git for Windows has been installed but not added to `PATH`. This is one of the options in its installer, though not the default option. Alternatively, an affected program that sanitizes its `PATH` to remove seemingly nonessential directories could allow exploitation. But for the most part, if the target user has configured a `PATH` in which the real `git.exe` can be found, then this cannot
for the most part, if the target user has configured a `PATH` in which the real `git.exe` can be found, then this cannot be exploited. This issue has been addressed in release version 0.10.9 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Byron/gitoxide/security/advisories/GHSA-mgvv-9p9g-3jv4 - https://github.com/Byron/gitoxide/commit/15235bf7968042da0493d431bbc955d6f9f54188 - https://github.com/Byron/gitoxide/blob/6cd8b4665bb7582f744c3244abaef812be39ec35/gix-path/src/env/git.rs#L9-L14
CVE ID: CVE-2024-40645 State: PUBLISHED Published: 2024-07-31T18:57:50.347Z Last Updated: 2024-07-31T20:13:14.492Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: FOGProject Products: fogproject Problem Types: CWE-434 Description: FOG is a cloning/imaging/rescue suite/inventory management system. An improperly restricted file upload feature allows authenticated users to execute arbitrary code on the fogproject server. The Rebranding feature has a check on the client banner image requiring it to be 650 pixels wide and 120 pixels high. Apart from that, there are no checks on things like file extensions. This can be abused by appending a PHP webshell to the end o
om that, there are no checks on things like file extensions. This can be abused by appending a PHP webshell to the end of the image and changing the extension to anything the PHP web server will parse. This vulnerability is fixed in 1.5.10.41. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FOGProject/fogproject/security/advisories/GHSA-59mq-q8g5-2f4f - https://github.com/FOGProject/fogproject/commit/9469606a18bf8887740cceed6593a2e0380b5e0c - https://github.com/FOGProject/fogproject/blob/a4bb1bf39ac53c3cbe623576915fbc3b5c80a00f/packages/web/lib/pages/fogconfigurationpage.class.php#L2860-L2896
CVE ID: CVE-2024-40647 State: PUBLISHED Published: 2024-07-18T16:51:23.539Z Last Updated: 2024-08-02T04:33:11.814Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: getsentry Products: sentry-python Problem Types: CWE-200 Description: sentry-sdk is the official Python SDK for Sentry.io. A bug in Sentry's Python SDK < 2.8.0 allows the environment variables to be passed to subprocesses despite the `env={}` setting. In Python's `subprocess` calls, all environment variables are passed to subprocesses by default. However, if you specifically do not want them to be passed to subprocesses, you may use `env` argument in `subprocess` calls. Due to the bug in Sentry SDK
t want them to be passed to subprocesses, you may use `env` argument in `subprocess` calls. Due to the bug in Sentry SDK, with the Stdlib integration enabled (which is enabled by default), this expectation is not fulfilled, and all environment variables are being passed to subprocesses instead. The issue has been patched in pull request #3251 and is included in sentry-sdk==2.8.0. We strongly recommend upgrading to the latest SDK version. However, if it's not possible, and if passing environment variables to child processes poses a security risk for you, you can disable all default integrations. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://
default integrations. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/getsentry/sentry-python/security/advisories/GHSA-g92j-qhmh-64v2 - https://github.com/getsentry/sentry-python/pull/3251 - https://github.com/getsentry/sentry-python/commit/763e40aa4cb57ecced467f48f78f335c87e9bdff - https://docs.python.org/3/library/subprocess.html - https://docs.sentry.io/platforms/python/integrations/default-integrations - https://docs.sentry.io/platforms/python/integrations/default-integrations/#stdlib - https://github.com/getsentry/sentry-python/releases/tag/2.8.0
CVE ID: CVE-2024-40648 State: PUBLISHED Published: 2024-07-18T16:45:56.321Z Last Updated: 2024-08-02T04:33:11.826Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: matrix-org Products: matrix-rust-sdk Problem Types: CWE-287 Description: matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The `UserIdentity::is_verified()` method in the matrix-sdk-crypto crate before version 0.7.2 doesn't take into account the verification status of the user's own identity while performing the check and may as a result return a value contrary to what is implied by its name and documentation. If the method is used to decide whether to perform sensitiv
e contrary to what is implied by its name and documentation. If the method is used to decide whether to perform sensitive operations towards a user identity, a malicious homeserver could manipulate the outcome in order to make the identity appear trusted. This is not a typical usage of the method, which lowers the impact. The method itself is not used inside the `matrix-sdk-crypto` crate. The 0.7.2 release of the `matrix-sdk-crypto` crate includes a fix. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/matrix-org/matrix-rust-sdk/security/advisor
ADP Vulnrichment: - CVE Program Container: References: - https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-4qg4-cvh2-crgg - https://github.com/matrix-org/matrix-rust-sdk/commit/76a7052149bb8f722df12da915b3a06d19a6695a
CVE ID: CVE-2024-40649 State: PUBLISHED Published: 2025-01-28T19:13:40.428Z Last Updated: 2025-01-28T21:07:05.464Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2024-10-01
CVE ID: CVE-2024-40650 State: PUBLISHED Published: 2024-09-11T00:09:17.227Z Last Updated: 2024-09-12T13:14:14.304Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for FRP state. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/2968ccc911956fa5813a9a6a5e5c8970e383a60f - https://source.android.com/security/bulletin/2024-09-01
CVE ID: CVE-2024-40651 State: PUBLISHED Published: 2025-01-28T19:13:40.514Z Last Updated: 2025-01-28T21:06:17.321Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2024-10-01
CVE ID: CVE-2024-40652 State: PUBLISHED Published: 2024-09-11T00:09:17.551Z Last Updated: 2024-09-11T20:32:26.648Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app while the device is provisioning due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/2909433f7d59dcdd0c74044b1c8e9f48927193dc - https://source.and
android.googlesource.com/platform/packages/apps/Settings/+/2909433f7d59dcdd0c74044b1c8e9f48927193dc - https://source.android.com/security/bulletin/2024-09-01
CVE ID: CVE-2024-40653 State: PUBLISHED Published: 2025-09-02T22:11:03.498Z Last Updated: 2025-09-04T03:55:23.034Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of ConnectionServiceWrapper.java, there is a possible way to retain a permission forever in the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/services/Telecomm/+/9211d16c49de08a87e2e09380f6076ffd5196987 - https://android.
droid.googlesource.com/platform/packages/services/Telecomm/+/9211d16c49de08a87e2e09380f6076ffd5196987 - https://android.googlesource.com/platform/packages/services/Telecomm/+/12016109c473d8d880333556726b1dcbce041e41 - https://android.googlesource.com/platform/packages/services/Telecomm/+/c6e005381b8f0b80f2a1e0ea6e8093e990e1790e - https://source.android.com/security/bulletin/2025-04-01
CVE ID: CVE-2024-40654 State: PUBLISHED Published: 2024-09-11T00:09:17.859Z Last Updated: 2024-10-16T15:18:57.353Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/f1d0079c91734168c150f839168544f407b17b06 - https://source.android.com/security/bulletin/2024-09-01
CVE ID: CVE-2024-40655 State: PUBLISHED Published: 2024-09-11T00:09:18.166Z Last Updated: 2025-03-18T20:42:47.617Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use permission in the background due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/services/Telecomm/+/eeef54b37a362f506ea3aa155baddc545b6a909a - ht
: - https://android.googlesource.com/platform/packages/services/Telecomm/+/eeef54b37a362f506ea3aa155baddc545b6a909a - https://source.android.com/security/bulletin/2024-09-01
CVE ID: CVE-2024-40656 State: PUBLISHED Published: 2024-09-11T00:09:18.479Z Last Updated: 2024-11-04T16:48:40.062Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/services/Telecomm/+/f3e6a6c02439401eb7aeb3749ee5ec0b51a625b9 - https://source.android.com/secur
ce.com/platform/packages/services/Telecomm/+/f3e6a6c02439401eb7aeb3749ee5ec0b51a625b9 - https://source.android.com/security/bulletin/2024-09-01