Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rename request, an attacker can modify another user’s name, violating data integrity and potentially causing confusion or impersonation attacks. This issue has been patched in version 4.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lukevella/rallly/security/advisories/GHSA-q9m7-chfx-43xw - https://github.com/lukevella/rallly/releases/tag/v4.5.4
CVE ID: CVE-2025-65033 State: PUBLISHED Published: 2025-11-19T17:26:44.807Z Last Updated: 2025-11-19T20:03:45.344Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: lukevella Products: rallly Problem Types: CWE-285, CWE-639 Description: Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an authorization flaw in the poll management feature allows any authenticated user to pause or resume any poll, regardless of ownership. The system only uses the public pollId to identify polls, and it does not verify whether the user performing the action is the poll owner. As a result, any user can disrupt polls created by others, leading to a l
user performing the action is the poll owner. As a result, any user can disrupt polls created by others, leading to a loss of integrity and availability across the application. This issue has been patched in version 4.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lukevella/rallly/security/advisories/GHSA-4p93-v53r-vch3 - https://github.com/lukevella/rallly/releases/tag/v4.5.4
CVE ID: CVE-2025-65034 State: PUBLISHED Published: 2025-11-19T17:26:59.038Z Last Updated: 2025-11-19T20:20:04.793Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: lukevella Products: rallly Problem Types: CWE-639 Description: Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an improper authorization vulnerability allows any authenticated user to reopen finalized polls belonging to other users by manipulating the pollId parameter. This can disrupt events managed by other users and compromise both availability and integrity of poll data. This issue has been patched in version 4.5.4. Additional Analyst Notes: - CISA ADP Vulnrich
and integrity of poll data. This issue has been patched in version 4.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lukevella/rallly/security/advisories/GHSA-5fp2-pv2j-rqpc - https://github.com/lukevella/rallly/releases/tag/v4.5.4
CVE ID: CVE-2025-65064 State: REJECTED Published: N/A Last Updated: 2025-11-15T03:55:09.236Z Description: No description available.
CVE ID: CVE-2025-65065 State: REJECTED Published: N/A Last Updated: 2025-11-15T03:55:08.788Z Description: No description available.
CVE ID: CVE-2025-65066 State: REJECTED Published: N/A Last Updated: 2025-11-15T03:55:08.334Z Description: No description available.
CVE ID: CVE-2025-65067 State: REJECTED Published: N/A Last Updated: 2025-11-15T03:55:07.863Z Description: No description available.
CVE ID: CVE-2025-65068 State: REJECTED Published: N/A Last Updated: 2025-11-15T03:55:07.383Z Description: No description available.
CVE ID: CVE-2025-65069 State: REJECTED Published: N/A Last Updated: 2025-11-15T03:55:06.866Z Description: No description available.
CVE ID: CVE-2025-65070 State: REJECTED Published: N/A Last Updated: 2025-11-15T03:55:06.394Z Description: No description available.
CVE ID: CVE-2025-65071 State: REJECTED Published: N/A Last Updated: 2025-11-15T03:55:05.882Z Description: No description available.
CVE ID: CVE-2025-65072 State: REJECTED Published: N/A Last Updated: 2025-11-15T03:55:05.279Z Description: No description available.
CVE ID: CVE-2025-65073 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-17T23:04:04.827Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N) Vendors: OpenStack Products: Keystone Problem Types: CWE-863 Description: OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2025/11/04/2
CVE ID: CVE-2025-65083 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-17T16:11:44.983Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: Tinexta Infocert Products: GoSign Desktop Problem Types: CWE-295 Description: GoSign Desktop through 2.4.1 disables TLS certificate validation when configured to use a proxy server. This can be problematic if the GoSign Desktop user selects an arbitrary proxy server without consideration of whether outbound HTTPS connections from the proxy server to Internet servers succeed even for untrusted or invalid server certificates. In this scenario (which is outside of the product's design objectives), integr
untrusted or invalid server certificates. In this scenario (which is outside of the product's design objectives), integrity protection could be bypassed. In typical cases of a proxy server for outbound HTTPS traffic from an enterprise, those connections would not succeed. (Admittedly, the usual expectation is that a client application is configured to trust an enterprise CA and does not set SSL_VERIFY_NONE.) Also, it is of course unsafe to place ~/.gosign in the home directory of an untrusted user and then have other users execute downloaded files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.firma.infocert.it/prodotti/gosign - https://securityaffairs.com/1846
- CISA ADP Vulnrichment: References: - https://www.firma.infocert.it/prodotti/gosign - https://securityaffairs.com/184672/hacking/multiple-vulnerabilities-in-gosign-desktop-lead-to-remote-code-execution.html
CVE ID: CVE-2025-65089 State: PUBLISHED Published: 2025-11-19T17:41:31.805Z Last Updated: 2025-11-19T18:46:46.790Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: xwikisas Products: xwiki-pro-macros Problem Types: CWE-862 Description: XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to version 1.27.0, a user with no view rights on a page may see the content of an office attachment displayed with the view file macro. This issue has been patched in version 1.27.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA
lyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-8c52-x9w7-vc95
CVE ID: CVE-2025-65092 State: PUBLISHED Published: 2025-11-21T21:33:03.656Z Last Updated: 2025-11-21T21:56:26.041Z Vendors: espressif Products: esp-idf Problem Types: CWE-125, CWE-191 Description: ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.1, 5.4.3, and 5.3.4, when the ESP32-P4 uses its hardware JPEG decoder, the software parser lacks necessary validation checks. A specially crafted (malicious) JPEG image could exploit the parsing routine and trigger an out-of-bounds array access. This issue has been fixed in versions 5.5.2, 5.4.4, and 5.3.5. At time of publication versions 5.5.2, 5.4.4, and 5.3.5 have not been released but are fixed respectively
.4, and 5.3.5. At time of publication versions 5.5.2, 5.4.4, and 5.3.5 have not been released but are fixed respectively in commits 4b8f585, c79cb4d, and 34e2726. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/espressif/esp-idf/security/advisories/GHSA-vcw6-jc3p-4gj8 - https://github.com/espressif/esp-idf/commit/34e2726254201988e6e2752b2db4b70d73964d4c - https://github.com/espressif/esp-idf/commit/4b8f5859dbe05d15372558f8a950b49f6ee44e42 - https://github.com/espressif/esp-idf/commit/c38a6691b9845ac6ee0d0f6713783114770cdc17 - https://github.com/espressif/esp-idf/commit/c79cb4de468854937a0cbf82629fd65d04bffb27
CVE ID: CVE-2025-65093 State: PUBLISHED Published: 2025-11-18T23:02:04.572Z Last Updated: 2025-11-19T14:58:46.753Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N) Vendors: librenms Products: librenms Problem Types: CWE-89 Description: LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a boolean-based blind SQL injection vulnerability was identified in the LibreNMS application at the /ajax_output.php endpoint. The hostname parameter is interpolated directly into an SQL query without proper sanitization or parameter binding, allowing an attacker to manipulate the query logic and infer data from the database through c
tion or parameter binding, allowing an attacker to manipulate the query logic and infer data from the database through conditional responses. This issue has been patched in version 25.11.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/librenms/librenms/security/advisories/GHSA-6pmj-xjxp-p8g9
CVE ID: CVE-2025-65094 State: PUBLISHED Published: 2025-11-19T19:06:21.569Z Last Updated: 2025-11-19T20:22:07.619Z Vendors: WBCE Products: WBCE_CMS Problem Types: CWE-266, CWE-285 Description: WBCE CMS is a content management system. Prior to version 1.6.4, a low-privileged user in WBCE CMS can escalate their privileges to the Administrators group by manipulating the groups[] parameter in the /admin/users/save.php request. The UI restricts users to assigning only their existing group, but server-side validation is missing, allowing attackers to overwrite their group membership and obtain full administrative access. This results in a complete compromise of the CMS. This issue has been patched
hip and obtain full administrative access. This results in a complete compromise of the CMS. This issue has been patched in version 1.6.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/WBCE/WBCE_CMS/security/advisories/GHSA-hmmw-4ccm-fx44 - https://github.com/WBCE/WBCE_CMS/commit/96046178f4c80cf16f7c224054dec7fdadddda7e
CVE ID: CVE-2025-65095 State: PUBLISHED Published: 2025-11-19T17:38:55.916Z Last Updated: 2025-11-20T14:21:40.178Z Vendors: Lookyloo Products: lookyloo Problem Types: CWE-79 Description: Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.35.1, there is potential cross-site scripting on index and tree page. This issue has been patched in version 1.35.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Lookyloo/lookyloo/security/advisories/GHSA-m9g6-23c8-vrxf - https://github.com/Lookyloo/lookyloo/commit/ac2f73dbfcad88b815b18c42cca77a1c645f1726 - https://github.co
9g6-23c8-vrxf - https://github.com/Lookyloo/lookyloo/commit/ac2f73dbfcad88b815b18c42cca77a1c645f1726 - https://github.com/Lookyloo/lookyloo/blob/main/website/web/default_csp.py - https://vulnerability.circl.lu/vuln/gcve-1-2025-0018
CVE ID: CVE-2025-65099 State: PUBLISHED Published: 2025-11-19T17:35:17.349Z Last Updated: 2025-11-20T14:20:44.499Z Vendors: anthropics Products: claude-code Problem Types: CWE-94 Description: Claude Code is an agentic coding tool. Prior to version 1.0.39, when running on a machine with Yarn 3.0 or above, Claude Code could have been tricked to execute code contained in a project via yarn plugins before the user accepted the startup trust dialog. Exploiting this would have required a user to start Claude Code in an untrusted directory and to be using Yarn 3.0 or above. This issue has been patched in version 1.0.39. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github
ssue has been patched in version 1.0.39. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/anthropics/claude-code/security/advisories/GHSA-5hhx-v7f6-x7gv
CVE ID: CVE-2025-65100 State: PUBLISHED Published: 2025-11-19T18:52:42.496Z Last Updated: 2025-11-19T20:28:15.251Z Vendors: ilbers Products: isar Problem Types: CWE-693 Description: Isar is an integration system for automated root filesystem generation. In versions 0.11-rc1 and 0.11, defining ISAR_APT_SNAPSHOT_DATE alone does not set the correct timestamp value for security distribution, leading to missed security updates. This issue has been patched via commit 738bcbb. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ilbers/isar/security/advisories/GHSA-3r9w-6cp6-7hm4 - https://github.com/ilbers/isar/commit/3383fd808a4ced93e41e012660dfe364a3384434 - https:
advisories/GHSA-3r9w-6cp6-7hm4 - https://github.com/ilbers/isar/commit/3383fd808a4ced93e41e012660dfe364a3384434 - https://github.com/ilbers/isar/commit/738bcbb716c7eb7b34cbb2293cae4f264b3925fe
CVE ID: CVE-2025-65102 State: PUBLISHED Published: 2025-11-21T21:36:58.375Z Last Updated: 2025-11-21T21:55:09.092Z Vendors: pjsip Products: pjproject Problem Types: CWE-120 Description: PJSIP is a free and open source multimedia communication library. Prior to version 2.16, Opus PLC may zero-fill the input frame as long as the decoder ptime, while the input frame length, which is based on stream ptime, may be less than that. This issue affects PJSIP users who use the Opus audio codec in receiving direction. The vulnerability can lead to unexpected application termination due to a memory overwrite. This issue has been patched in version 2.16. Additional Analyst Notes: - CISA ADP Vulnrichment:
e to a memory overwrite. This issue has been patched in version 2.16. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pjsip/pjproject/security/advisories/GHSA-w5vr-39x7-h8g5 - https://github.com/pjsip/pjproject/commit/6e9bd2e7d25bba26f852771b40693f45da14fa8f
CVE ID: CVE-2025-65103 State: PUBLISHED Published: 2025-11-19T19:09:09.209Z Last Updated: 2025-11-19T20:31:35.423Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: devcode-it Products: openstamanager Problem Types: CWE-89 Description: OpenSTAManager is an open source management software for technical assistance and invoicing. Prior to version 2.9.5, an authenticated SQL Injection vulnerability in the API allows any user, regardless of permission level, to execute arbitrary SQL queries. By manipulating the display parameter in an API request, an attacker can exfiltrate, modify, or delete any data in the database, leading to a full system compromise. This issue h
n attacker can exfiltrate, modify, or delete any data in the database, leading to a full system compromise. This issue has been patched in version 2.9.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/devcode-it/openstamanager/security/advisories/GHSA-2jm2-2p35-rp3j
CVE ID: CVE-2025-65106 State: PUBLISHED Published: 2025-11-21T21:43:02.461Z Last Updated: 2025-11-21T21:53:19.566Z Vendors: langchain-ai Products: langchain Problem Types: CWE-1336 Description: LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This vulnerability affects applications that accept untrusted template strings (not just template variables) in ChatPromptTemplate and related prompt template classes. This issue has been patched in versions 0.3.80 and
ariables) in ChatPromptTemplate and related prompt template classes. This issue has been patched in versions 0.3.80 and 1.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/langchain-ai/langchain/security/advisories/GHSA-6qv9-48xg-fc7f - https://github.com/langchain-ai/langchain/commit/c4b6ba254e1a49ed91f2e268e6484011c540542a - https://github.com/langchain-ai/langchain/commit/fa7789d6c21222b85211755d822ef698d3b34e00
CVE ID: CVE-2025-65107 State: PUBLISHED Published: 2025-11-21T21:49:18.988Z Last Updated: 2025-11-24T17:16:40.383Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: langfuse Products: langfuse Problem Types: CWE-352, CWE-285 Description: Langfuse is an open source large language model engineering platform. In versions from 2.95.0 to before 2.95.12 and from 3.17.0 to before 3.131.0, in SSO provider configurations without an explicit AUTH_<PROVIDER>_CHECK setting, a potential account takeover may happen if an authenticated user is made to call a specifically crafted URL via a CSRF or phishing attack. This issue has been patched in versions 2.95.12 and 3.131.0. A
a specifically crafted URL via a CSRF or phishing attack. This issue has been patched in versions 2.95.12 and 3.131.0. A workaround for this issue involves setting AUTH_<PROVIDER>_CHECK. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/langfuse/langfuse/security/advisories/GHSA-w9pw-c549-5m6w
CVE ID: CVE-2025-65108 State: PUBLISHED Published: 2025-11-21T21:52:02.729Z Last Updated: 2025-11-24T17:17:08.879Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: simonhaenisch Products: md-to-pdf Problem Types: CWE-94 Description: md-to-pdf is a CLI tool for converting Markdown files to PDF using Node.js and headless Chrome. Prior to version 5.2.5, a Markdown front-matter block that contains JavaScript delimiter causes the JS engine in gray-matter library to execute arbitrary code in the Markdown to PDF converter process of md-to-pdf library, resulting in remote code execution. This issue has been patched in version 5.2.5. Additional Analyst Notes: - CISA
ary, resulting in remote code execution. This issue has been patched in version 5.2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/simonhaenisch/md-to-pdf/security/advisories/GHSA-547r-qmjm-8hvw - https://github.com/simonhaenisch/md-to-pdf/commit/46bdcf2051c8d1758b391c1353185a179a47a4d9
CVE ID: CVE-2025-65109 State: PUBLISHED Published: 2025-11-21T21:56:53.667Z Last Updated: 2025-11-24T17:17:41.932Z Vendors: mindersec Products: minder Problem Types: CWE-830 Description: Minder is an open source software supply chain security platform. In Minder Helm version 0.20241106.3386+ref.2507dbf and Minder Go versions from 0.0.72 to 0.0.83, Minder users may fetch content in the context of the Minder server, which may include URLs which the user would not normally have access to. This issue has been patched in Minder Helm version 0.20250203.3849+ref.fdc94f0 and Minder Go version 0.0.84. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mindersec/minder
Go version 0.0.84. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mindersec/minder/security/advisories/GHSA-6xvf-4vh9-mw47 - https://github.com/mindersec/minder/commit/f770400923984649a287d7215410ef108e845af8
CVE ID: CVE-2025-65111 State: PUBLISHED Published: 2025-11-21T22:02:52.563Z Last Updated: 2025-11-24T17:50:51.445Z Vendors: authzed Products: spicedb Problem Types: CWE-277 Description: SpiceDB is an open source database system for creating and managing security-critical application permissions. Prior to version 1.47.1, if a schema includes the following characteristics: permission defined in terms of a union (+) and that union references the same relation on both sides (but one side arrows to a different permission). Then SpiceDB may have missing LookupResources results when checking the permission. This only affects LookupResources; other APIs calculate permissionship correctly. The issue
en checking the permission. This only affects LookupResources; other APIs calculate permissionship correctly. The issue is fixed in version 1.47.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/authzed/spicedb/security/advisories/GHSA-9m7r-g8hg-x3vr - https://github.com/authzed/spicedb/commit/8c2edbe1e7bd3851fa2138f4cc344bfde986dcf2
CVE ID: CVE-2025-65220 State: PUBLISHED Published: 2025-11-20T00:00:00.000Z Last Updated: 2025-11-20T15:27:20.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow in: /goform/SetVirtualServerCfg via the list parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN1.md
CVE ID: CVE-2025-65221 State: PUBLISHED Published: 2025-11-20T00:00:00.000Z Last Updated: 2025-11-20T15:29:04.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the list parameter of /goform/setPptpUserList. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN2.md
CVE ID: CVE-2025-65222 State: PUBLISHED Published: 2025-11-20T00:00:00.000Z Last Updated: 2025-11-20T15:28:14.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the rebootTime parameter of /goform/SetSysAutoRebbotCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN3.md
CVE ID: CVE-2025-65223 State: PUBLISHED Published: 2025-11-20T00:00:00.000Z Last Updated: 2025-11-20T15:30:24.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN4.md
CVE ID: CVE-2025-65226 State: PUBLISHED Published: 2025-11-20T00:00:00.000Z Last Updated: 2025-11-20T15:31:42.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /goform/saveParentControlInfo. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN5.md
CVE ID: CVE-2025-65493 State: PUBLISHED Published: 2025-11-24T00:00:00.000Z Last Updated: 2025-11-24T14:53:58.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: NULL pointer dereference in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS/TLS connection that triggers BIO_get_data() to return NULL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/obgm/libcoap/issues/1743 - https://github.com/obgm/libcoap/pull/1750
CVE ID: CVE-2025-65494 State: PUBLISHED Published: 2025-11-24T00:00:00.000Z Last Updated: 2025-11-24T14:49:31.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: NULL pointer dereference in get_san_or_cn_from_cert() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted X.509 certificate that causes sk_GENERAL_NAME_value() to return NULL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/obgm/libcoap/issues/1745 - https://github.com/obgm/libcoap/pull/1750
CVE ID: CVE-2025-65495 State: PUBLISHED Published: 2025-11-24T00:00:00.000Z Last Updated: 2025-11-24T14:41:15.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted TLS certificate that causes i2d_X509() to return -1 and be misused as a malloc() size parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/obgm/libcoap/issues/1744 - https://github.com/obgm/libcoap/pull/1750
CVE ID: CVE-2025-65496 State: PUBLISHED Published: 2025-11-24T00:00:00.000Z Last Updated: 2025-11-24T18:26:49.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/obgm/libcoap/issues/1745 - https://github.com/obgm/libcoap/pull/1750