Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
dis (on a 32-bit system, or as a 32-bit executable running on a 64-bit system).** The problem is fixed in version 6.2, and the fix is back ported to 6.0.11 and 5.0.11. Make sure you use one of these versions if you are running 32-bit Redis. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent clients from directly executing `CONFIG SET`: Using Redis 6.0 or newer, ACL configuration can be used to block the command. Using older versions, the `rename-command` configuration directive can be used to rename the command to a random string unknown to users, rendering it inaccessible. Please note that this workaround may have an additional impact
andom string unknown to users, rendering it inaccessible. Please note that this workaround may have an additional impact on users or operational systems that expect `CONFIG SET` to behave in certain ways. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/redis/redis/security/advisories/GHSA-hgj8-vff2-7cjf - https://github.com/redis/redis/commit/c992857618db99776917f10bf4f2345a5fdc78b0 - https://github.com/redis/redis/pull/8522 - https://security.gentoo.org/glsa/202103-02
CVE ID: CVE-2021-21310 State: PUBLISHED Published: 2021-02-11T21:40:16 Last Updated: 2024-08-03T18:09:15.328Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: nextauthjs Products: next-auth Problem Types: CWE-290 Description: NextAuth.js (next-auth) is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a token verification vulnerability. Implementations using the Prisma database adapter in conjunction with the Email provider are impacted. Implementations using the Email provider with the default database adapter are not impacted. Implementations using the Prisma database adapter but not using the Email
he default database adapter are not impacted. Implementations using the Prisma database adapter but not using the Email provider are not impacted. The Prisma database adapter was checking the verification token, but was not verifying the email address associated with that token. This made it possible to use a valid token to sign in as another user when using the Prima adapter in conjunction with the Email provider. This issue is specific to the community supported Prisma adapter. This issue is fixed in version 3.3.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nextauthjs/next-auth/security/advisories/GHSA-pg53-56cg-4m8q - https://www.npmjs.com/package/
nces: - https://github.com/nextauthjs/next-auth/security/advisories/GHSA-pg53-56cg-4m8q - https://www.npmjs.com/package/next-auth - https://github.com/nextauthjs/next-auth/releases/tag/v3.3.0
CVE ID: CVE-2021-21311 State: PUBLISHED Published: 2021-02-11T20:55:15.000Z Last Updated: 2025-10-21T23:35:27.923Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: vrana Products: adminer Problem Types: CWE-918 Description: Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is fixed in version 4.7.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vrana/adminer/security/advisories/GHSA-x5r2-hj5c-8jx6
ntainer: - CISA ADP Vulnrichment: References: - https://github.com/vrana/adminer/security/advisories/GHSA-x5r2-hj5c-8jx6 - https://github.com/vrana/adminer/files/5957311/Adminer.SSRF.pdf - https://packagist.org/packages/vrana/adminer - https://github.com/vrana/adminer/commit/ccd2374b0b12bd547417bf0dacdf153826c83351 - https://lists.debian.org/debian-lts-announce/2021/03/msg00002.html
CVE ID: CVE-2021-21312 State: PUBLISHED Published: 2021-03-03T19:25:20 Last Updated: 2024-08-03T18:09:14.988Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-79 Description: GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability within the document upload function (Home > Management > Documents > Add, or /front/document.form.php endpoint), indeed one of the form field: "Web Link" is not properly sanitized and a malicious user (who has document upload rights) can use it
f the form field: "Web Link" is not properly sanitized and a malicious user (who has document upload rights) can use it to deliver JavaScript payload. For example if you use the following payload: " accesskey="x" onclick="alert(1)" x=", the content will be saved within the database without any control. And then once you return to the summary documents page, by clicking on the "Web Link" of the newly created file it will create a new empty tab, but on the initial tab the pop-up "1" will appear. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/releases/tag/9.5.4 - https://github.com/glpi-project/glpi/security/advisories/GHSA-c7f6-3mr7-3rq2
CVE ID: CVE-2021-21313 State: PUBLISHED Published: 2021-03-03T19:25:13 Last Updated: 2024-08-03T18:09:15.301Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-74 Description: GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability in the /ajax/common.tabs.php endpoint, indeed, at least two parameters _target and id are not properly sanitized. Here are two payloads (due to two different exploitations depending on which parameter you act) to exploit the vulnerability:/ajax/
o payloads (due to two different exploitations depending on which parameter you act) to exploit the vulnerability:/ajax/common.tabs.php?_target=javascript:alert(document.cookie)&_itemtype=DisplayPreference&_glpi_tab=DisplayPreference$2&id=258&displaytype=Ticket (Payload triggered if you click on the button). /ajax/common.tabs.php?_target=/front/ticket.form.php&_itemtype=Ticket&_glpi_tab=Ticket$1&id=(){};(function%20(){alert(document.cookie);})();function%20a&#. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-h4hj-mrpg-xfgx - https://github.com/glpi-project/glpi/releases/tag/9.5.4
CVE ID: CVE-2021-21314 State: PUBLISHED Published: 2021-03-03T19:30:15 Last Updated: 2024-08-03T18:09:15.013Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-79 Description: GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is an XSS vulnerability involving a logged in user while updating a ticket. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/releases/tag/9.5.4 - https://github.com/glpi-project/glpi/security/advisories/GHSA-2w7
ps://github.com/glpi-project/glpi/releases/tag/9.5.4 - https://github.com/glpi-project/glpi/security/advisories/GHSA-2w7j-xgj7-3xgg
CVE ID: CVE-2021-21315 State: PUBLISHED Published: 2021-02-16T17:00:18.000Z Last Updated: 2025-10-21T23:35:26.173Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: sebhildebrandt Products: systeminformation Problem Types: CWE-78 Description: The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerability. Problem was fixed in version 5.3.1. As a workaround instead of upgrading, be sure to check or sanitize service parameters that are passed to si.inetLatency(), si.in
karound instead of upgrading, be sure to check or sanitize service parameters that are passed to si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() ... do only allow strings, reject any arrays. String sanitation works as expected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.npmjs.com/package/systeminformation - https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-2m8v-572m-ff2v - https://github.com/sebhildebrandt/systeminformation/commit/07daa05fb06f24f96297abaa30c2ace8bfd8b525 - https://lists.apache.org/thread.html/r8afea9a83ed568f2647cccc6d8d06126f9815715ddf9a4d479b26b05%40%3Cissues.cordova
525 - https://lists.apache.org/thread.html/r8afea9a83ed568f2647cccc6d8d06126f9815715ddf9a4d479b26b05%40%3Cissues.cordova.apache.org%3E - https://security.netapp.com/advisory/ntap-20210312-0007/
CVE ID: CVE-2021-21316 State: PUBLISHED Published: 2021-02-16T17:35:16 Last Updated: 2024-08-03T18:09:15.881Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N) Vendors: SAP Products: less-openui5 Problem Types: CWE-74 Description: less-openui5 is an npm package which enables building OpenUI5 themes with Less.js. In less-openui5 before version 0.10., when processing theming resources (i.e. `*.less` files) with less-openui5 that originate from an untrusted source, those resources might contain JavaScript code which will be executed in the context of the build process. While this is a feature of the Less.js library it is an unexpected behavior in the context of OpenUI5 an
build process. While this is a feature of the Less.js library it is an unexpected behavior in the context of OpenUI5 and SAPUI5 development. Especially in the context of UI5 Tooling which relies on less-openui5. An attacker might create a library or theme-library containing a custom control or theme, hiding malicious JavaScript code in one of the .less files. Refer to the referenced GHSA-3crj-w4f5-gwh4 for examples. Starting with Less.js version 3.0.0, the Inline JavaScript feature is disabled by default. less-openui5 however currently uses a fork of Less.js v1.6.3. Note that disabling the Inline JavaScript feature in Less.js versions 1.x, still evaluates code has additional double codes ar
hat disabling the Inline JavaScript feature in Less.js versions 1.x, still evaluates code has additional double codes around it. We decided to remove the inline JavaScript evaluation feature completely from the code of our Less.js fork. This fix is available in less-openui5 version 0.10.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SAP/less-openui5/security/advisories/GHSA-3crj-w4f5-gwh4 - https://github.com/SAP/less-openui5/commit/c0d3a8572974a20ea6cee42da11c614a54f100e8 - https://github.com/SAP/less-openui5/releases/tag/v0.10.0 - https://www.npmjs.com/package/less-openui5 - http://lesscss.org/usage/#less-options-enable-inline-javascript-deprecated-
CVE ID: CVE-2021-21317 State: PUBLISHED Published: 2021-02-16T17:45:16 Last Updated: 2024-08-03T18:09:15.054Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: ua-parser Products: uap-core Problem Types: CWE-400 Description: uap-core in an open-source npm package which contains the core of BrowserScope's original user agent string parser. In uap-core before version 0.11.0, some regexes are vulnerable to regular expression denial of service (REDoS) due to overlapping capture groups. This allows remote attackers to overload a server by setting the User-Agent header in an HTTP(S) request to maliciously crafted long strings. This is fixed in version 0.11.0. Downst
the User-Agent header in an HTTP(S) request to maliciously crafted long strings. This is fixed in version 0.11.0. Downstream packages such as uap-python, uap-ruby etc which depend upon uap-core follow different version schemes. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ua-parser/uap-core/security/advisories/GHSA-p4pj-mg4r-x6v4 - https://github.com/ua-parser/uap-core/commit/dc9925d458214cfe87b93e35346980612f6ae96c - https://www.npmjs.com/package/uap-core
CVE ID: CVE-2021-21318 State: PUBLISHED Published: 2021-02-18T17:20:14 Last Updated: 2024-08-03T18:09:15.422Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: opencast Products: opencast Problem Types: CWE-863 Description: Opencast is a free, open-source platform to support the management of educational audio and video content. In Opencast before version 9.2 there is a vulnerability in which publishing an episode with strict access rules will overwrite the currently set series access. This allows for an easy denial of access for all users without superuser privileges, effectively hiding the series. Access to series and series metadata on the search service (s
thout superuser privileges, effectively hiding the series. Access to series and series metadata on the search service (shown in media module and player) depends on the events published which are part of the series. Publishing an event will automatically publish a series and update access to it. Removing an event or republishing the event should do the same. Affected versions of Opencast may not update the series access or remove a published series if an event is being removed. On removal of an episode, this may lead to an access control list for series metadata with broader access rules than the merged access rules of all remaining events, or the series metadata still being available althoug
access rules than the merged access rules of all remaining events, or the series metadata still being available although all episodes of that series have been removed. This problem is fixed in Opencast 9.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opencast/opencast/security/advisories/GHSA-vpc2-3wcv-qj4w - https://github.com/opencast/opencast/commit/b18c6a7f81f08ed14884592a6c14c9ab611ad450
CVE ID: CVE-2021-21319 State: PUBLISHED Published: 2021-10-25T16:00:19 Last Updated: 2024-08-03T18:09:15.156Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: galette Products: galette Problem Types: CWE-79 Description: Galette is a membership management web application geared towards non profit organizations. In versions prior to 0.9.5, malicious javascript code can be stored to be displayed later on self subscription page. The self subscription feature can be disabled as a workaround (this is the default state). Malicious javascript code can be executed (not stored) on login and retrieve password pages. This issue is patched in version 0.9.5. Additional Ana
an be executed (not stored) on login and retrieve password pages. This issue is patched in version 0.9.5. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/galette/galette/security/advisories/GHSA-vjc9-mj44-x59q - https://github.com/galette/galette/commit/514418da973ae5b84bf97f94bd288a41e8e3f0a6 - https://github.com/galette/galette/commit/8f3bdd9f7d0708466e011253064a867ca2b271a5 - https://github.com/galette/galette/commit/f54b2570615d38d0302e937079233e52c2d80995 - https://bugs.galette.eu/issues/1535
CVE ID: CVE-2021-21320 State: PUBLISHED Published: 2021-03-02T02:45:16 Last Updated: 2024-08-03T18:09:15.273Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: matrix-org Products: matrix-react-sdk Problem Types: CWE-345 Description: matrix-react-sdk is an npm package which is a Matrix SDK for React Javascript. In matrix-react-sdk before version 3.15.0, the user content sandbox can be abused to trick users into opening unexpected documents. The content is opened with a `blob` origin that cannot access Matrix user data, so messages and secrets are not at risk. This has been fixed in version 3.15.0. Additional Analyst Notes: - CVE Program Container: References: - h
e not at risk. This has been fixed in version 3.15.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-52mq-6jcv-j79x - https://github.com/matrix-org/matrix-react-sdk/pull/5657 - https://github.com/matrix-org/matrix-react-sdk/commit/b386f0c73b95ecbb6ea7f8f79c6ff5171a8dedd1 - https://www.npmjs.com/package/matrix-react-sdk
CVE ID: CVE-2021-21321 State: PUBLISHED Published: 2021-03-02T03:35:25 Last Updated: 2024-08-03T18:09:15.260Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: fastify Products: fastify-reply-from Problem Types: CWE-20 Description: fastify-reply-from is an npm package which is a fastify plugin to forward the current http request to another server. In fastify-reply-from before version 4.0.2, by crafting a specific URL, it is possible to escape the prefix of the proxied backend service. If the base url of the proxied server is "/pub/", a user expect that accessing "/priv" on the target service would not be possible. In affected versions, it is possible. This is
expect that accessing "/priv" on the target service would not be possible. In affected versions, it is possible. This is fixed in version 4.0.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fastify/fastify-reply-from/security/advisories/GHSA-qmw8-3v4g-gwj4 - https://www.npmjs.com/package/fastify-reply-from - https://github.com/fastify/fastify-reply-from/commit/dea227dda606900cc01870d08541b4dcc69d3889
CVE ID: CVE-2021-21322 State: PUBLISHED Published: 2021-03-02T03:35:17 Last Updated: 2024-08-03T18:09:15.229Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: fastify Products: fastify-http-proxy Problem Types: CWE-20 Description: fastify-http-proxy is an npm package which is a fastify plugin for proxying your http requests to another server, with hooks. By crafting a specific URL, it is possible to escape the prefix of the proxied backend service. If the base url of the proxied server is `/pub/`, a user expect that accessing `/priv` on the target service would not be possible. In affected versions, it is possible. This is fixed in version 4.3.1. Additional
target service would not be possible. In affected versions, it is possible. This is fixed in version 4.3.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fastify/fastify-http-proxy/security/advisories/GHSA-c4qr-gmr9-v23w - https://www.npmjs.com/package/fastify-http-proxy - https://github.com/fastify/fastify-http-proxy/commit/02d9b43c770aa16bc44470edecfaeb7c17985016
CVE ID: CVE-2021-21323 State: PUBLISHED Published: 2021-02-23T22:45:19 Last Updated: 2024-08-03T18:09:15.370Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: brave Products: brave-browser Problem Types: CWE-200 Description: Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17.73 accidentally initiated DNS requests that bypassed the Brave Tor proxy. Users with adblocking enabled would leak DNS requests from Tor windows to their DNS provider. (DNS requests that were not initiated by CNAME adblocking would go through Tor as expected.) This is fixed in Brave
der. (DNS requests that were not initiated by CNAME adblocking would go through Tor as expected.) This is fixed in Brave version 1.20.108 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/brave/brave-browser/security/advisories/GHSA-mqjf-9x5g-2rv6 - https://github.com/brave/brave-browser/issues/13527 - https://github.com/brave/brave-core/pull/7769 - https://github.com/brave/brave-core/commit/12fe321eaad8acc1cbd1d70b4128f687777bcf15 - https://hackerone.com/reports/1077022
CVE ID: CVE-2021-21324 State: PUBLISHED Published: 2021-03-08T17:00:33 Last Updated: 2024-08-03T18:09:15.447Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-639 Description: GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 there is an Insecure Direct Object Reference (IDOR) on "Solutions". This vulnerability gives an unauthorized user the ability to enumerate GLPI items names (including users logins) using the knowbase search form (requires authentication). To Reproduce: Perform a valid
s names (including users logins) using the knowbase search form (requires authentication). To Reproduce: Perform a valid authentication at your GLPI instance, Browse the ticket list and select any open ticket, click on Solution form, then Search a solution form that will redirect you to the endpoint /"glpi/front/knowbaseitem.php?item_itemtype=Ticket&item_items_id=18&forcetab=Knowbase$1", and the item_itemtype=Ticket parameter present in the previous URL will point to the PHP alias of glpi_tickets table, so just replace it with "Users" to point to glpi_users table instead; in the same way, item_items_id=18 will point to the related column id, so changing it too you should be able to enumerate
n the same way, item_items_id=18 will point to the related column id, so changing it too you should be able to enumerate all the content which has an alias. Since such id(s) are obviously incremental, a malicious party could exploit the vulnerability simply by guessing-based attempts. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/commit/aade65b7f67d46f23d276a8acb0df70651c3b1dc - https://github.com/glpi-project/glpi/releases/tag/9.5.4 - https://github.com/glpi-project/glpi/security/advisories/GHSA-jvwm-gq36-3v7v
CVE ID: CVE-2021-21325 State: PUBLISHED Published: 2021-03-08T17:00:27 Last Updated: 2024-08-03T18:09:15.160Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-79 Description: GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 a new budget type can be defined by user. This input is not correctly filtered. This results in a cross-site scripting attack. To exploit this endpoint attacker need to be authenticated. This is fixed in version 9.5.4. Additional Analyst Notes: - CVE Program Container:
nt attacker need to be authenticated. This is fixed in version 9.5.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/releases/tag/9.5.4 - https://github.com/glpi-project/glpi/security/advisories/GHSA-m574-f3jw-pwrf
CVE ID: CVE-2021-21326 State: PUBLISHED Published: 2021-03-08T17:00:22 Last Updated: 2024-08-03T18:09:15.583Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-862 Description: GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 it is possible to create tickets for another user with self-service interface without delegatee systems enabled. This is fixed in version 9.5.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/releases/tag/9.5.4 - ht
ional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/releases/tag/9.5.4 - https://github.com/glpi-project/glpi/security/advisories/GHSA-vmj9-cg56-p7wh