Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-4040 State: PUBLISHED Published: 2025-07-21T12:19:28.656Z Last Updated: 2025-07-21T15:17:05.417Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: Turpak Products: Automatic Station Monitoring System Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in Turpak Automatic Station Monitoring System allows Privilege Escalation.This issue affects Automatic Station Monitoring System: before 5.0.6.51. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0165
CVE ID: CVE-2025-4041 State: PUBLISHED Published: 2025-05-06T16:35:18.133Z Last Updated: 2025-05-06T17:29:11.988Z Vendors: Optigo Networks Products: ONS NC600 Problem Types: CWE-798 Description: In Optigo Networks ONS NC600 versions 4.2.1-084 through 4.7.2-330, an attacker could connect with the device's ssh server and utilize the system's components to perform OS command executions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-126-01
CVE ID: CVE-2025-4042 State: REJECTED Published: N/A Last Updated: 2025-11-19T22:19:03.143Z Description: No description available.
CVE ID: CVE-2025-4043 State: PUBLISHED Published: 2025-05-07T20:25:06.468Z Last Updated: 2025-05-08T15:12:07.048Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N) Vendors: Milesight Products: UG65-868M-EA Problem Types: CWE-1274 Description: An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is executed on a system boot. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-126-02 - https://www.milesight.com/iot/resources/download-center/#firmware-ug65
CVE ID: CVE-2025-4044 State: PUBLISHED Published: 2025-08-19T13:12:09.782Z Last Updated: 2025-08-20T03:56:03.978Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Lexmark Products: Universal Print Driver, Printer Software G2 Problem Types: CWE-611 Description: Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
CVE ID: CVE-2025-4046 State: PUBLISHED Published: 2025-08-19T13:12:28.574Z Last Updated: 2025-08-20T03:56:05.184Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Lexmark Products: Lexmark Cloud Services Problem Types: CWE-862 Description: A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
CVE ID: CVE-2025-4047 State: PUBLISHED Published: 2025-06-03T02:27:34.395Z Last Updated: 2025-06-03T14:52:04.159Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: wpmudev Products: Broken Link Checker Problem Types: CWE-862 Description: The Broken Link Checker plugin for WordPress is vulnerable to unauthorized data access due to a missing capability check on the ajax_full_status and ajax_dashboard_status functions in all versions up to, and including, 2.4.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view the plugin's status. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfe
above, to view the plugin's status. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/33ac910c-9531-45ea-84cf-1d379233f7d3?source=cve - https://plugins.trac.wordpress.org/browser/broken-link-checker/tags/2.4.2/legacy/core/core.php#L3272 - https://plugins.trac.wordpress.org/changeset/3294992/
CVE ID: CVE-2025-4049 State: PUBLISHED Published: 2025-07-21T07:40:33.031Z Last Updated: 2025-07-21T17:41:14.461Z Vendors: SIGNUM-NET Products: FARA Problem Types: CWE-798 Description: Use of hard-coded, the same among all vulnerable installations SQLite credentials vulnerability in SIGNUM-NET FARA allows to read and manipulate local-stored database.This issue affects FARA: through 5.0.80.34. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/07/CVE-2025-4049/ - https://fara.pl/
CVE ID: CVE-2025-4050 State: PUBLISHED Published: 2025-05-05T18:10:37.038Z Last Updated: 2025-05-06T02:56:20.285Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop_29.html - https://issues.chromium.org/issues/409342999
CVE ID: CVE-2025-4051 State: PUBLISHED Published: 2025-05-05T18:10:37.288Z Last Updated: 2025-05-06T18:56:27.284Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop_29.html - https://issues.chromium.org/issues/404000989
CVE ID: CVE-2025-4052 State: PUBLISHED Published: 2025-05-05T18:10:37.534Z Last Updated: 2025-05-06T13:49:06.501Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop_29.html - https://issues.chromium.org/issues/401927528
CVE ID: CVE-2025-4053 State: PUBLISHED Published: 2025-05-26T10:03:35.047Z Last Updated: 2025-05-27T14:23:50.767Z Vendors: Be-Tech Products: Mifare Classic cards Problem Types: CWE-312 Description: The data stored in Be-Tech Mifare Classic card is stored in cleartext. An attacker having access to a Be-Tech hotel guest Mifare Classic card can create a master key card that unlocks all the locks in the building. This issue affects all Be-Tech Mifare Classic card systems. To fix the vulnerability, it is necessary to replace the software, encoder, cards, and PCBs in the locks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/05/CVE-2025-4053/
CVE ID: CVE-2025-4054 State: PUBLISHED Published: 2025-05-07T02:23:35.152Z Last Updated: 2025-05-07T13:21:23.620Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: msaari Products: Relevanssi – A Better Search Problem Types: CWE-79 Description: The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the highlights functionality in all versions up to, and including, 4.24.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page via the search results. Addition
itrary web scripts in pages that will execute whenever a user accesses an injected page via the search results. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6f77f10b-f142-4859-a941-0fbde6ef7fdb?source=cve - https://plugins.trac.wordpress.org/browser/relevanssi/tags/4.24.3/lib/excerpts-highlights.php#L683 - https://plugins.trac.wordpress.org/browser/relevanssi/tags/4.24.3/lib/excerpts-highlights.php#L508 - https://www.relevanssi.com/user-manual/installing-relevanssi-and-adjusting-the-settings/ - https://plugins.trac.wordpress.org/changeset/3283795/
CVE ID: CVE-2025-4055 State: PUBLISHED Published: 2025-05-07T01:43:09.233Z Last Updated: 2025-05-07T14:02:54.515Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: josj404 Products: Multiple Post Type Order Problem Types: CWE-79 Description: The Multiple Post Type Order plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mpto' shortcode in all versions up to, and including, 1.10.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a u
ackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b148926d-090d-4fab-991c-89105078a263?source=cve - https://wordpress.org/plugins/multiple-post-type-order/#developers
CVE ID: CVE-2025-4056 State: PUBLISHED Published: 2025-07-28T12:40:29.298Z Last Updated: 2025-11-21T07:25:00.883Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-94 Description: A flaw was found in GLib. A denial of service on Windows platforms may occur if an application attempts to spawn a program using long command lines. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-4056 - https://bugzilla.redhat.com/show_bug.cgi?id=2
ment: References: - https://access.redhat.com/security/cve/CVE-2025-4056 - https://bugzilla.redhat.com/show_bug.cgi?id=2362826 - https://gitlab.gnome.org/GNOME/glib/-/issues/3668
CVE ID: CVE-2025-4057 State: PUBLISHED Published: 2025-05-26T08:53:04.340Z Last Updated: 2025-11-20T20:48:35.847Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: AMQ Broker 7.13.0.OPR.1.GA, Red Hat AMQ Broker 7.12.5, RHEL-8 based Middleware Containers Problem Types: CWE-1391 Description: A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:12355 - https://access.redhat.com/errata/RHSA-2025:12473 - https://access.redhat.com/errata/RHSA-2025:8147
ata/RHSA-2025:12355 - https://access.redhat.com/errata/RHSA-2025:12473 - https://access.redhat.com/errata/RHSA-2025:8147 - https://access.redhat.com/security/cve/CVE-2025-4057 - https://bugzilla.redhat.com/show_bug.cgi?id=2362827 - https://github.com/arkmq-org/activemq-artemis-operator/commit/d3482fab6d0060794226c9e5a6fa67d209abc35a - https://github.com/arkmq-org/activemq-artemis-operator/issues/1130
CVE ID: CVE-2025-4058 State: PUBLISHED Published: 2025-04-29T11:31:03.566Z Last Updated: 2025-04-29T13:20:17.241Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Projectworlds Products: Online Examination System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0. This affects an unknown part of the file /Bloodgroop_process.php. The manipulation of the argument Pat_BloodGroup1 leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
sclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306495 - https://vuldb.com/?ctiid.306495 - https://vuldb.com/?submit.559354 - https://github.com/hhhanxx/attack/issues/2#issue-2998883562
CVE ID: CVE-2025-4059 State: PUBLISHED Published: 2025-04-29T12:00:05.762Z Last Updated: 2025-04-29T13:25:00.482Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Prison Management System Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical was found in code-projects Prison Management System 1.0. This vulnerability affects the function addrecord of the component Prison_Mgmt_Sys. The manipulation of the argument filename leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306496 - https://vuldb.com/?ctiid.306496 - https://vuldb.com/?submit.559359 - https://github.com/zzzxc643/cve/blob/main/Prison_Mgmt_Sys.md - https://code-projects.org/
CVE ID: CVE-2025-4060 State: PUBLISHED Published: 2025-04-29T12:31:05.760Z Last Updated: 2025-04-29T13:21:34.828Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Notice Board System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /category.php. The manipulation of the argument catname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306497 - https
c and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306497 - https://vuldb.com/?ctiid.306497 - https://vuldb.com/?submit.559361 - https://github.com/Q3qc1n/myCVE/issues/6 - https://phpgurukul.com/
CVE ID: CVE-2025-4061 State: PUBLISHED Published: 2025-04-29T13:00:06.354Z Last Updated: 2025-04-29T13:17:37.126Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Clothing Store Management System Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, was found in code-projects Clothing Store Management System up to 1.0. Affected is the function add_item. The manipulation of the argument st.productname leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306498 - https://vuldb.com/?ctiid.306498 - https://vuldb.com/?submit.559447 - https://github.com/zzzxc643/cve/blob/main/Clothing_store_mgmt.md - https://code-projects.org/
CVE ID: CVE-2025-4062 State: PUBLISHED Published: 2025-04-29T13:31:03.930Z Last Updated: 2025-04-29T15:08:48.716Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Theater Seat Booking System Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in code-projects Theater Seat Booking System 1.0 and classified as critical. Affected by this vulnerability is the function cancel. The manipulation of the argument cancelcustomername leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP
k on the local host. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306499 - https://vuldb.com/?ctiid.306499 - https://vuldb.com/?submit.559452 - https://github.com/zzzxc643/cve/blob/main/Theatre_booking_System.md - https://code-projects.org/
CVE ID: CVE-2025-4063 State: PUBLISHED Published: 2025-04-29T13:31:05.581Z Last Updated: 2025-05-12T14:09:11.969Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Student Information Management System Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in code-projects Student Information Management System 1.0 and classified as critical. Affected by this issue is the function cancel. The manipulation of the argument first_name/last_name leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vul
proached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306500 - https://vuldb.com/?ctiid.306500 - https://vuldb.com/?submit.559466 - https://github.com/zzzxc643/cve/blob/main/Student_Info_System.md - https://code-projects.org/
CVE ID: CVE-2025-4064 State: PUBLISHED Published: 2025-04-29T14:00:07.570Z Last Updated: 2025-04-29T14:14:14.470Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: ScriptAndTools Products: Online-Travling-System Problem Types: CWE-284, CWE-266 Description: A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/viewenquiry.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306501 - https://vuldb.com/?ctiid.306501 - https://vuldb.com/?submit.559467 - https://www.websecurityinsights.my.id/2025/04/script-and-tools-online-travling-system.html
CVE ID: CVE-2025-4065 State: PUBLISHED Published: 2025-04-29T14:31:04.679Z Last Updated: 2025-04-29T14:52:17.498Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: ScriptAndTools Products: Online-Travling-System Problem Types: CWE-284, CWE-266 Description: A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/addadvertisement.php. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306502
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306502 - https://vuldb.com/?ctiid.306502 - https://vuldb.com/?submit.559478 - https://www.websecurityinsights.my.id/2025/04/script-and-tools-online-travling-system_16.html
CVE ID: CVE-2025-4066 State: PUBLISHED Published: 2025-04-29T14:31:06.683Z Last Updated: 2025-04-29T14:54:58.961Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: ScriptAndTools Products: Online-Travling-System Problem Types: CWE-284, CWE-266 Description: A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/addpackage.php. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306503 - htt
lic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306503 - https://vuldb.com/?ctiid.306503 - https://vuldb.com/?submit.559480 - https://www.websecurityinsights.my.id/2025/04/script-and-tools-online-travling-system_82.html
CVE ID: CVE-2025-4067 State: PUBLISHED Published: 2025-04-29T15:00:06.890Z Last Updated: 2025-04-29T15:36:29.663Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: ScriptAndTools Products: Online-Travling-System Problem Types: CWE-284, CWE-266 Description: A vulnerability classified as critical has been found in ScriptAndTools Online-Travling-System 1.0. Affected is an unknown function of the file /admin/viewpackage.php. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
losed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306504 - https://vuldb.com/?ctiid.306504 - https://vuldb.com/?submit.559514 - https://www.websecurityinsights.my.id/2025/04/script-and-tools-online-travling-system_71.html
CVE ID: CVE-2025-4068 State: PUBLISHED Published: 2025-04-29T15:31:04.352Z Last Updated: 2025-04-29T15:57:26.952Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Simple Movie Ticket Booking System Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical was found in code-projects Simple Movie Ticket Booking System 1.0. Affected by this vulnerability is the function changeprize. The manipulation of the argument prize leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: R
ally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306505 - https://vuldb.com/?ctiid.306505 - https://vuldb.com/?submit.559479 - https://github.com/zzzxc643/cve/blob/main/MOVIE_TICKET_BOOKING_SYSTEM.md - https://code-projects.org/
CVE ID: CVE-2025-4069 State: PUBLISHED Published: 2025-04-29T15:31:06.405Z Last Updated: 2025-04-29T17:48:56.628Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Product Management System Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, has been found in code-projects Product Management System 1.0. Affected by this issue is the function add_item. The manipulation of the argument st.productname leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306506 - https://vuldb.com/?ctiid.306506 - https://vuldb.com/?submit.559516 - https://github.com/zzzxc643/cve/blob/main/PRODUCT_MANAGEMENT_SYSTEM.md - https://code-projects.org/