hitoshura25/cvefixes huggingface dataset:
CVE-2019-1010317 (C, published 2019-07-11T20:15Z)
Description: value: WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseCaffHeaderConfig (caff.c:486). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b.
Severity: MEDIUM (CVSS v3 base score: 5.5)
Weakness: CWE-908 \u2014 Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
Repository: https://github.com/dbry/WavPack
Files changed:
cli/caff.c
Commit message: issue #66: make sure CAF files have a "desc" chunk


Vulnerable code:
    uint32_t chan_chunk = 0, channel_layout = 0, bcount;
            if (!DoReadFile (infile, &mEditCount, sizeof (mEditCount), &bcount) ||

Fixed code:
    uint32_t chan_chunk = 0, desc_chunk = 0, channel_layout = 0, bcount;
            desc_chunk = 1;
            if (!desc_chunk || !DoReadFile (infile, &mEditCount, sizeof (mEditCount), &bcount) ||
CVE-2019-1010319 (C, published 2019-07-11T20:15Z)
Description: value: WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseWave64HeaderConfig (wave64.c:211). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/33a0025d1d63ccd05d9dbaa6923d52b1446a62fe.
Severity: MEDIUM (CVSS v3 base score: 5.5)
Weakness: CWE-908 \u2014 Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
Repository: https://github.com/dbry/WavPack
Files changed:
cli/wave64.c
Commit message: issue #68: clear WaveHeader at start to prevent uninitialized read


Vulnerable code:

Fixed code:
    CLEAR (WaveHeader);
CVE-2019-11498 (C, published 2019-04-24T05:29Z)
Description: value: WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised value" condition, which might allow attackers to cause a denial of service (application crash) via a DFF file that lacks valid sample-rate data.
Severity: MEDIUM (CVSS v3 base score: 6.5)
Weakness: CWE-824 \u2014 Access of Uninitialized Pointer
The product accesses or uses a pointer that has not been initialized.
Repository: https://github.com/dbry/WavPack
Files changed:
cli/dsdiff.c
Commit message: issue #67: make sure sample rate is specified and non-zero in DFF files


Vulnerable code:
                uint32_t sampleRate;
            if (!config->num_channels) {

Fixed code:
                uint32_t sampleRate = 0;
            if (!config->num_channels || !config->sample_rate) {
CVE-2022-25171 (JSON, published 2022-12-20T05:15Z)
Description: value: The package p4 before 0.0.7 are vulnerable to Command Injection via the run() function due to improper input sanitization
Severity: nan (CVSS v3 base score: 9.8)
Weakness: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
Repository: https://github.com/natelong/p4
Files changed:
p4.js
package.json
Commit message: address security vulnerability


Vulnerable code:
var exec = require("child_process").exec;
    exec("p4 " + command + " " + (args || ""), function(err, stdOut, stdErr) {
        if(err) return done(err);
        if(stdErr) return done(new Error(stdErr));
        done(null, stdOut);
    "version": "0.0.6",

Fixed code:
var exec = require("child_process").spawn;
    if(!Array.isArray(args)) {
        args = [args];
    }
    args.unshift(command);

    var child = spawn("p4", args);
    var stdOutBuf = "";
    var stdErrBuf = "";

    child.stdout.on("data", (data) => stdOutBuf += data);
    child.stderr.on("data", (data) => stdErrBuf += data)
    child.on("exit", (code) => {
        if (code !== 0) {
            return done(new Error(`p4 subcommand exited with return code ${}`));
        }

        if (stdErrBuf.length > 0) {
            return done(new Error(stdErrBuf));
        }
        done(null, stdOutBuf);
    "version": "0.0.7",
CVE-2024-27297 (Unknown, published 2024-03-11T22:15Z)
Description: value: Nix is a package manager for Linux and other Unix systems. A fixed-output derivations on Linux can send file descriptors to files in the Nix store to another program running on the host (or another fixed-output derivation) via Unix domain sockets in the abstract namespace. This allows to modify the output of the derivation, after Nix has registered the path as "valid" and immutable in the Nix database. In particular, this allows the output of fixed-output derivations to be modified from their expected content. This issue has been addressed in versions 2.3.18 2.18.2 2.19.4 and 2.20.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Severity: nan (CVSS v3 base score: )
Weakness: NVD-CWE-noinfo \u2014 Insufficient Information
There is insufficient information about the issue to classify it; details are unkown or unspecified.
Repository: https://github.com/NixOS/nix
Files changed:
Commit message: Merge pull request from GHSA-2ffj-w4mj-pg37

Sandbox escape 2.20

Vulnerable code:

Fixed code:
CVE-2020-15155 (Unknown, published 2020-08-28T22:15Z)
Description: value: baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components is toolbar.php. The issue is fixed in version 4.3.7.
Severity: LOW (CVSS v3 base score: 7.3)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/baserproject/basercms
Files changed:
Commit message: Merge pull request from GHSA-4r3m-j6x5-48m3

fix security/advisories/GHSA-4r3m-j6x5-48m3

Vulnerable code:

Fixed code:
CVE-2020-15159 (Unknown, published 2020-08-28T22:15Z)
Description: value: baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) and Remote Code Execution (RCE). This may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file.The affected components are ThemeFilesController.php and UploaderFilesController.php. This is fixed in version 4.3.7.
Severity: MEDIUM (CVSS v3 base score: 7.6)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/baserproject/basercms
Files changed:
Commit message: Merge pull request from GHSA-673x-f5wx-fxpw

fix security/advisories/GHSA-4r3m-j6x5-48m3

Vulnerable code:

Fixed code:
CVE-2020-15273 (Unknown, published 2020-10-30T19:15Z)
Description: value: baserCMS before version 4.4.1 is vulnerable to Cross-Site Scripting. The issue affects the following components: Edit feed settings, Edit widget area, Sub site new registration, New category registration. Arbitrary JavaScript may be executed by entering specific characters in the account that can access the file upload function category list, subsite setting list, widget area edit, and feed list on the management screen. The issue was introduced in version 4.0.0. It is fixed in version 4.4.1.
Severity: LOW (CVSS v3 base score: 8.1)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/baserproject/basercms
Files changed:
Commit message: Merge pull request from GHSA-wpww-4jf4-4hx8

テーマ編集の許可設定値を追加、デフォルトでは編集不可

Vulnerable code:

Fixed code:
CVE-2020-15276 (Unknown, published 2020-10-30T19:15Z)
Description: value: baserCMS before version 4.4.1 is vulnerable to Cross-Site Scripting. Arbitrary JavaScript may be executed by entering a crafted nickname in blog comments. The issue affects the blog comment component. It is fixed in version 4.4.1.
Severity: LOW (CVSS v3 base score: 8.7)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/baserproject/basercms
Files changed:
Commit message: Merge pull request from GHSA-fw5q-j9p4-3vxg

ブログコメントの名前表示を改善

Vulnerable code:

Fixed code:
CVE-2020-15277 (Unknown, published 2020-10-30T18:15Z)
Description: value: baserCMS before version 4.4.1 is affected by Remote Code Execution (RCE). Code may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file. The Edit template component is vulnerable. The issue is fixed in version 4.4.1.
Severity: MEDIUM (CVSS v3 base score: 7.2)
Weakness: CWE-434 \u2014 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Repository: https://github.com/baserproject/basercms
Files changed:
Commit message: Merge pull request from GHSA-6fmv-q269-55cw

fix #1531 1532 1533 #1534 管理画面の文字列出力を改善

Vulnerable code:

Fixed code:
CVE-2021-39136 (PHP, published 2021-08-25T18:15Z)
Description: value: baserCMS is an open source content management system with a focus on Japanese language support. In affected versions there is a cross-site scripting vulnerability in the file upload function of the management system of baserCMS. Users are advised to update as soon as possible. No workaround are available to mitigate this issue.
Severity: LOW (CVSS v3 base score: 5.4)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/baserproject/basercms
Files changed:
app/webroot/theme/admin-third/UploaderFiles/admin/ajax_image.php
lib/Baser/Plugin/Uploader/View/UploaderFiles/admin/ajax_image.php
Commit message: Merge pull request from GHSA-hgjr-632x-qpp3



Vulnerable code:
 * @package            Uploader.View
$url = $this->BcBaser->getUrl($this->Uploader->getFileUrl($file['UploaderFile']['name']));
	<a href="<?php echo $url ?>" target="_blank"><?php echo FULL_BASE_URL . $url ?></a>
$url = $this->BcBaser->getUrl($this->Uploader->getFileUrl($file['UploaderFile']['name']));
	<a href="<?php echo $url ?>" target="_blank"><?php echo FULL_BASE_URL . $url ?></a>

Fixed code:
 * @package         Uploader.View

/**
 * @var BcAppView $this
 * @var array $file
 * @var string $size
 */
$url = h($this->BcBaser->getUrl($this->Uploader->getFileUrl($file['UploaderFile']['name'])));
	<a href="<?php echo $url ?>" target="_blank"><?php echo Router::url($url, true) ?></a>

/**
 * @var BcAppView $this
 * @var array $file
 * @var string $size
 */
$url = h($this->BcBaser->getUrl($this->Uploader->getFileUrl($file['UploaderFile']['name'])));
	<a href="<?php echo $url ?>" target="_blank"><?php echo Router::url($url, true) ?></a>
CVE-2021-41279 (Unknown, published 2021-11-26T18:15Z)
Description: value: BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload crafted zip files capable of path traversal on the host operating system. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible.
Severity: HIGH (CVSS v3 base score: 8.8)
Weakness: CWE-22 \u2014 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Repository: https://github.com/baserproject/basercms
Files changed:
Commit message: Merge pull request from GHSA-4x2f-54wr-4hjg

* 固定ページプレビュー実行時に入力内容検証を追加

* SimpleZipの利用を停止しZipArchiveの利用に切り替え

* 不要コード除去

* BcZip利用時、ZipArchiveをopenしていない場合エラーログが出力される問題を改善

Vulnerable code:

Fixed code:
CVE-2022-39325 (Unknown, published 2022-11-25T20:15Z)
Description: value: BaserCMS is a content management system with a japanese language focus. In affected versions there is a cross-site scripting vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. Users of baserCMS are advised to upgrade as soon as possible. There are no known workarounds for this vulnerability.
Severity: nan (CVSS v3 base score: 6.1)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/baserproject/basercms
Files changed:
Commit message: Merge remote-tracking branch 'basercms-ghsa-395x-wv32-44v5/advisory-fix-1' into dev-4


Vulnerable code:

Fixed code:
CVE-2023-25654 (PHP, published 2023-03-23T20:15Z)
Description: value: baserCMS is a Content Management system. Prior to version 4.7.5, there is a Remote Code Execution (RCE) Vulnerability in the management system of baserCMS. Version 4.7.5 contains a patch.
Severity: nan (CVSS v3 base score: 9.8)
Weakness: CWE-434 \u2014 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Repository: https://github.com/baserproject/basercms
Files changed:
lib/Baser/Model/BcAppModel.php
Commit message: fix CVE-2023-25654

ファイル更新時のValidationを改善


Vulnerable code:
			if (!is_array($exts)) {
				$exts = explode(',', $exts);
			}
			if (in_array($ext, $exts)) {
				return true;
			} else {

Fixed code:
		if (!is_array($exts)) {
			$exts = explode(',', $exts);
		}

		// FILES形式のチェック
			if (!in_array($ext, $exts)) {
				return false;
			}
		}

		// 更新時の文字列チェック
		if (is_string($file)) {
			$ext = pathinfo($file, PATHINFO_EXTENSION);
			if (!in_array($ext, $exts)) {
CVE-2023-25654 (PHP, published 2023-03-23T20:15Z)
Description: value: baserCMS is a Content Management system. Prior to version 4.7.5, there is a Remote Code Execution (RCE) Vulnerability in the management system of baserCMS. Version 4.7.5 contains a patch.
Severity: nan (CVSS v3 base score: 9.8)
Weakness: CWE-434 \u2014 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Repository: https://github.com/baserproject/basercms
Files changed:
lib/Baser/Model/BcAppModel.php
Commit message: fix CVE-2023-25654

戻り値が変更されてしまう挙動を修正


Vulnerable code:
		if (is_string($file)) {

Fixed code:
		if (!empty($file) && is_string($file)) {
CVE-2023-25654 (Unknown, published 2023-03-23T20:15Z)
Description: value: baserCMS is a Content Management system. Prior to version 4.7.5, there is a Remote Code Execution (RCE) Vulnerability in the management system of baserCMS. Version 4.7.5 contains a patch.
Severity: nan (CVSS v3 base score: 9.8)
Weakness: CWE-434 \u2014 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Repository: https://github.com/baserproject/basercms
Files changed:
Commit message: Merge pull request from GHSA-h4cc-fxpp-pgw9

fix CVE-2023-25654

Vulnerable code:

Fixed code:
CVE-2023-25655 (PHP, published 2023-03-23T20:15Z)
Description: value: baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system of baserCMS. Version 4.7.5 contains a patch.
Severity: nan (CVSS v3 base score: 9.8)
Weakness: CWE-434 \u2014 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Repository: https://github.com/baserproject/basercms
Files changed:
lib/Baser/Model/Behavior/BcUploadBehavior.php
Commit message: fix CVE-2023-25655

validation errorが発生してもファイルを保存してしまう処理の改善


Vulnerable code:
	 * @return mixed
		if($this->validatingLock[$Model->alias]) return true;
        $Model->data[$Model->alias] = $this->BcFileUploader[$Model->alias]->setupRequestData(isset($Model->data[$Model->alias])? $Model->data[$Model->alias] : $Model->data);
        $Model->data[$Model->alias] = $this->BcFileUploader[$Model->alias]->setupTmpData(isset($Model->data[$Model->alias])? $Model->data[$Model->alias] : $Model->data);
        $this->oldEntity[$Model->alias] = (!empty($Model->data[$Model->alias]['id']))? $this->getOldEntity($Model, $Model->data[$Model->alias]['id']) : [];
        $this->validatingLock[$Model->alias] = true;

        return true;

Fixed code:
	 * @return void
		if ($Model->validationErrors) {
			return;
		}
		if ($this->validatingLock[$Model->alias]) {
			return;
		}
		$Model->data[$Model->alias] = $this->BcFileUploader[$Model->alias]->setupRequestData(isset($Model->data[$Model->alias])? $Model->data[$Model->alias] : $Model->data);
		$Model->data[$Model->alias] = $this->BcFileUploader[$Model->alias]->setupTmpData(isset($Model->data[$Model->alias])? $Model->data[$Model->alias] : $Model->data);
		$this->oldEntity[$Model->alias] = (!empty($Model->data[$Model->alias]['id']))? $this->getOldEntity($Model, $Model->data[$Model->alias]['id']) : [];
		$this->validatingLock[$Model->alias] = true;
CVE-2023-25655 (Unknown, published 2023-03-23T20:15Z)
Description: value: baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system of baserCMS. Version 4.7.5 contains a patch.
Severity: nan (CVSS v3 base score: 9.8)
Weakness: CWE-434 \u2014 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Repository: https://github.com/baserproject/basercms
Files changed:
Commit message: Merge pull request from GHSA-mfvg-qwcw-qvc8

fix CVE-2023-25655

Vulnerable code:

Fixed code:
CVE-2023-44379 (PHP, published 2024-02-22T15:15Z)
Description: value: baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the site search feature. Version 5.0.9 contains a fix for this vulnerability.
Severity: nan (CVSS v3 base score: )
Weakness: NVD-CWE-noinfo \u2014 Insufficient Information
There is insufficient information about the issue to classify it; details are unkown or unspecified.
Repository: https://github.com/baserproject/basercms
Files changed:
plugins/BcColumn/templates/element/site_search_form.php
plugins/bc-front/templates/plugin/BcSearchIndex/SearchIndexes/search.php
Commit message: Merge pull request from GHSA-66c2-p8rh-qx87



Vulnerable code:
	<?php echo $this->BcForm->control('q', ['escape' => false]) ?>
    <?php echo $this->BcBaser->formControl('q', ['placeholder' => __d('baser_core', 'キーワード'), 'escape' => false, 'div' => false]) ?>

Fixed code:
	<?php echo $this->BcForm->control('q') ?>
    <?php echo $this->BcBaser->formControl('q', ['placeholder' => __d('baser_core', 'キーワード'), 'div' => false]) ?>
CVE-2023-51450 (PHP, published 2024-02-22T15:15Z)
Description: value: baserCMS is a website development framework. Prior to version 5.0.9, there is an OS Command Injection vulnerability in the site search feature of baserCMS. Version 5.0.9 contains a fix for this vulnerability.
Severity: nan (CVSS v3 base score: )
Weakness: NVD-CWE-noinfo \u2014 Insufficient Information
There is insufficient information about the issue to classify it; details are unkown or unspecified.
Repository: https://github.com/baserproject/basercms
Files changed:
plugins/baser-core/src/View/Helper/BcAdminFormHelper.php
Commit message: Merge pull request from GHSA-jjxq-m8h3-4vw5



Vulnerable code:
                        'figcaption' => ['class' => 'bca-file__figcaption']

Fixed code:
                        'figcaption' => ['class' => 'bca-file__figcaption', 'escape' => true]
CVE-2024-26128 (PHP, published 2024-02-22T19:15Z)
Description: value: baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the content management feature. Version 5.0.9 contains a fix for this vulnerability.
Severity: nan (CVSS v3 base score: )
Weakness: NVD-CWE-noinfo \u2014 Insufficient Information
There is insufficient information about the issue to classify it; details are unkown or unspecified.
Repository: https://github.com/baserproject/basercms
Files changed:
plugins/baser-core/src/View/Helper/BcAdminFormHelper.php
Commit message: Merge pull request from GHSA-jjxq-m8h3-4vw5



Vulnerable code:
                        'figcaption' => ['class' => 'bca-file__figcaption']

Fixed code:
                        'figcaption' => ['class' => 'bca-file__figcaption', 'escape' => true]
CVE-2016-9121 (Unknown, published 2017-03-28T02:59Z)
Description: value: go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. When deriving a shared key using ECDH-ES for an encrypted message, go-jose neglected to check that the received public key on a message is on the same curve as the static private key of the receiver, thus making it vulnerable to an invalid curve attack.
Severity: MEDIUM (CVSS v3 base score: 9.1)
Weakness: CWE-326 \u2014 Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
Repository: https://github.com/square/go-jose
Files changed:
Commit message: Merge branch 'cs/164590'

* cs/164590:
  Check for invalid ECDH keys in headers, JWKs
  Do not accept invalid public keys in DeriveECDHES function


Vulnerable code:

Fixed code:
CVE-2016-9122 (Unknown, published 2017-03-28T02:59Z)
Description: value: go-jose before 1.0.4 suffers from multiple signatures exploitation. The go-jose library supports messages with multiple signatures. However, when validating a signed message the API did not indicate which signature was valid, which could potentially lead to confusion. For example, users of the library might mistakenly read protected header values from an attached signature that was different from the one originally validated.
Severity: MEDIUM (CVSS v3 base score: 7.5)
Weakness: CWE-284 \u2014 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Repository: https://github.com/square/go-jose
Files changed:
Commit message: Merge pull request #111 from square/cs/better-multi

Improve multi-recipient/multi-sig handling

Vulnerable code:

Fixed code: