Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-8745 State: PUBLISHED Published: 2025-08-09T05:02:05.495Z Last Updated: 2025-08-11T18:33:45.620Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: Weee Products: RICEPO App Problem Types: CWE-926 Description: A vulnerability, which was classified as problematic, has been found in Weee RICEPO App 6.17.77 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.ricepo.app. The manipulation leads to improper export of android application components. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early ab
o be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319241 - https://vuldb.com/?ctiid.319241 - https://vuldb.com/?submit.623581 - https://github.com/KMov-g/androidapps/blob/main/com.ricepo.app.md - https://github.com/KMov-g/androidapps/blob/main/com.ricepo.app.md#steps-to-reproduce
CVE ID: CVE-2025-8746 State: PUBLISHED Published: 2025-08-09T06:02:07.329Z Last Updated: 2025-08-11T17:56:50.375Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R) Vendors: GNU Products: libopts Problem Types: CWE-119 Description: A vulnerability, which was classified as problematic, was found in GNU libopts up to 27.6. Affected is the function __strstr_sse2. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. This issue was initially reported to the tcpreplay project, but the code maintainer explains, that this "bug appears to be in libopts which is an e
ported to the tcpreplay project, but the code maintainer explains, that this "bug appears to be in libopts which is an external library." This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319242 - https://vuldb.com/?ctiid.319242 - https://vuldb.com/?submit.623632 - https://github.com/appneta/tcpreplay/issues/957 - https://github.com/appneta/tcpreplay/issues/957#issuecomment-3124774393 - https://drive.google.com/file/d/1yjKOHxvL_9xExy4QUb5x43dxci1x59ts/view?usp=sharing - https://www.gnu.org/
CVE ID: CVE-2025-8747 State: PUBLISHED Published: 2025-08-11T07:21:16.619Z Last Updated: 2025-08-15T03:55:47.720Z Vendors: Google Products: Keras Problem Types: CWE-502 Description: A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted `.keras` model archive. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/keras-team/keras/pull/21429 - https://jfrog.com/blog/keras-safe_mode-bypass-vulnerability/
CVE ID: CVE-2025-8748 State: PUBLISHED Published: 2025-08-08T11:09:17.348Z Last Updated: 2025-11-05T12:02:30.747Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Mobile Industrial Robots Products: MiR Robots, MiR Fleet Problem Types: CWE-78 Description: MiR software versions prior to version 3.0.0 are affected by a command injection vulnerability. A malicious HTTP request crafted by an authenticated user could allow the execution of arbitrary commands on the underlying operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mobile-industrial-robots.com/security-advisories/command-injection - https://supportportal.mobile-indus
ences: - https://mobile-industrial-robots.com/security-advisories/command-injection - https://supportportal.mobile-industrial-robots.com/documentation/mir-cybersecurity-guide/mir-cybersecurity-guide/
CVE ID: CVE-2025-8749 State: PUBLISHED Published: 2025-08-08T11:46:16.957Z Last Updated: 2025-11-05T12:06:17.424Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Mobile Industrial Robots Products: MiR Robots Problem Types: CWE-22 Description: Path Traversal vulnerability in API Endpoint in Mobile Industrial Robots (MiR) Software Versions prior to 3.0.0 on MiR Robots allows authenticated users to extract files from the robot file system via a crafted API request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mobile-industrial-robots.com/security-advisories/path-traversal - https://supportportal.mobile-industrial-robots.com/documenta
-industrial-robots.com/security-advisories/path-traversal - https://supportportal.mobile-industrial-robots.com/documentation/mir-cybersecurity-guide/mir-cybersecurity-guide/
CVE ID: CVE-2025-8750 State: PUBLISHED Published: 2025-08-09T07:02:06.213Z Last Updated: 2025-08-11T16:33:12.859Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: macrozheng Products: mall Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in macrozheng mall up to 1.0.3 and classified as problematic. Affected by this vulnerability is the function Upload of the file /minio/upload of the component Add Product Page. The manipulation of the argument File leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did n
exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319243 - https://vuldb.com/?ctiid.319243 - https://vuldb.com/?submit.623655 - https://github.com/N1n3b9S/cve/issues/13 - https://github.com/N1n3b9S/cve/issues/13#issue-3266856872
CVE ID: CVE-2025-8751 State: PUBLISHED Published: 2025-08-09T07:32:05.218Z Last Updated: 2025-08-11T16:32:23.305Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R) Vendors: Protected Products: Total WebShield Extension Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Protected Total WebShield Extension up to 3.2.0 on Chrome. It has been classified as problematic. This affects an unknown part of the component Block Page. The manipulation of the argument Category leads to cross site scripting. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploi
the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319245 - https://vuldb.com/?ctiid.319245 - https://vuldb.com/?submit.623677 - https://news.fmisec.com/self-html-injection-in-total-webshield-chrome-extension - https://news.fmisec.com/self-html-injection-in-total-webshield-chrome-extension#heading-vulnerability-details
CVE ID: CVE-2025-8752 State: PUBLISHED Published: 2025-08-09T12:02:10.294Z Last Updated: 2025-08-11T16:31:41.974Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: wangzhixuan Products: spring-shiro-training Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in wangzhixuan spring-shiro-training up to 94812c1fd8f7fe796c931f4984ff1aa0671ab562. It has been declared as critical. This vulnerability affects unknown code of the file /role/add. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product.
it has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319246 - https://vuldb.com/?ctiid.319246 - https://vuldb.com/?submit.623679 - https://gitee.com/wangzhixuan/spring-shiro-training/issues/ICP2ME
CVE ID: CVE-2025-8753 State: PUBLISHED Published: 2025-08-09T13:32:05.447Z Last Updated: 2025-08-12T16:05:36.510Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: linlinjava Products: litemall Problem Types: CWE-22 Description: A vulnerability, which was classified as critical, has been found in linlinjava litemall up to 1.8.0. Affected by this issue is the function delete of the file /admin/storage/delete of the component File Handler. The manipulation of the argument key leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319250 - https://vuldb.com/?ctiid.319250 - https://vuldb.com/?submit.623859 - https://github.com/linlinjava/litemall/issues/564 - https://github.com/linlinjava/litemall/issues/564#issue-3267670352
CVE ID: CVE-2025-8754 State: PUBLISHED Published: 2025-08-13T17:40:34.706Z Last Updated: 2025-08-13T17:53:43.102Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ABB Products: ABB AbilityTM zenon Problem Types: CWE-306 Description: Missing Authentication for Critical Function vulnerability in ABB ABB AbilityTM zenon.This issue affects ABB AbilityTM zenon: from 7.50 through 14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=2NGA002743&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2025-8755 State: PUBLISHED Published: 2025-08-09T14:02:05.525Z Last Updated: 2025-08-12T16:05:29.061Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:R) Vendors: macrozheng Products: mall Problem Types: CWE-639, CWE-285 Description: A vulnerability was found in macrozheng mall up to 1.0.3 and classified as problematic. This issue affects the function detail of the file UmsMemberController.java of the component com.macro.mall.portal.controller. The manipulation of the argument orderId leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early a
ay be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319253 - https://vuldb.com/?ctiid.319253 - https://vuldb.com/?submit.624046 - https://github.com/N1n3b9S/cve/issues/14 - https://github.com/N1n3b9S/cve/issues/14#issue-3269039303
CVE ID: CVE-2025-8756 State: PUBLISHED Published: 2025-08-09T14:32:05.558Z Last Updated: 2025-08-12T16:05:22.995Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: TDuckCloud Products: tduck-platform Problem Types: CWE-285, CWE-266 Description: A vulnerability has been found in TDuckCloud tduck-platform up to 5.1 and classified as critical. Affected by this vulnerability is the function preHandle of the file /manage/ of the component com.tduck.cloud.api.web.interceptor.AuthorizationInterceptor. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Not
he attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319261 - https://vuldb.com/?ctiid.319261 - https://vuldb.com/?submit.624188 - https://github.com/TDuckCloud/tduck-platform/issues/28 - https://github.com/TDuckCloud/tduck-platform/issues/28#issue-3269885235
CVE ID: CVE-2025-8757 State: PUBLISHED Published: 2025-08-09T15:02:05.815Z Last Updated: 2025-08-12T16:05:16.788Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R) Vendors: TRENDnet Products: TV-IP110WN Problem Types: CWE-272, CWE-266 Description: A vulnerability was found in TRENDnet TV-IP110WN 1.2.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /server/boa.conf of the component Embedded Boa Web Server. The manipulation leads to least privilege violation. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has bee
this attack. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319262 - https://vuldb.com/?ctiid.319262 - https://vuldb.com/?submit.624257 - https://www.notion.so/23e54a1113e780569260e231993bdf61
CVE ID: CVE-2025-8758 State: PUBLISHED Published: 2025-08-09T16:02:05.577Z Last Updated: 2025-08-12T16:05:10.629Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R) Vendors: TRENDnet Products: TEW-822DRE Problem Types: CWE-272, CWE-266 Description: A vulnerability was found in TRENDnet TEW-822DRE FW103B02. It has been classified as problematic. This affects an unknown part of the component vsftpd. The manipulation leads to least privilege violation. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted ear
lity is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319263 - https://vuldb.com/?ctiid.319263 - https://vuldb.com/?submit.624299 - https://www.notion.so/23e54a1113e78009adc9d909b254812b
CVE ID: CVE-2025-8759 State: PUBLISHED Published: 2025-08-09T17:02:05.648Z Last Updated: 2025-08-12T16:05:03.361Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: TRENDnet Products: TN-200 Problem Types: CWE-321, CWE-320 Description: A vulnerability was found in TRENDnet TN-200 1.02b02. It has been declared as problematic. This vulnerability affects unknown code of the component Lighttpd. The manipulation of the argument secdownload.secret with the input neV3rUseMe leads to use of hard-coded cryptographic key . The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has
nitiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319264 - https://vuldb.com/?ctiid.319264 - https://vuldb.com/?submit.624555 - https://www.notion.so/23f54a1113e7801e944ec65a2f7c5448
CVE ID: CVE-2025-8760 State: PUBLISHED Published: 2025-08-13T06:14:02.783Z Last Updated: 2025-08-13T13:31:00.583Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C/E:ND/RL:W/RC:UR) Vendors: INSTAR Products: 2K+, 4K Problem Types: CWE-120, CWE-119 Description: A vulnerability was identified in INSTAR 2K+ and 4K 3.11.1 Build 1124. This affects the function base64_decode of the component fcgi_server. The manipulation of the argument Authorization leads to buffer overflow. It is possible to initiate the attack remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319863 - https://vuldb.com/?ctiid.319863 - https://modzero.com/static/MZ-25-03_modzero_INST
ces: - https://vuldb.com/?id.319863 - https://vuldb.com/?ctiid.319863 - https://modzero.com/static/MZ-25-03_modzero_INSTAR.pdf
CVE ID: CVE-2025-8761 State: PUBLISHED Published: 2025-08-13T06:14:06.147Z Last Updated: 2025-08-13T13:29:47.081Z Severity: N/A (CVSS 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C/E:POC/RL:W/RC:UR) Vendors: INSTAR Products: 2K+, 4K Problem Types: CWE-404 Description: A vulnerability has been found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This vulnerability affects unknown code of the component Backend IPC Server. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319864 - https://vuldb.com/?ctiid.319864 - https://modzero.com/stat
DP Vulnrichment: References: - https://vuldb.com/?id.319864 - https://vuldb.com/?ctiid.319864 - https://modzero.com/static/MZ-25-03_modzero_INSTAR.pdf
CVE ID: CVE-2025-8762 State: PUBLISHED Published: 2025-08-13T06:14:04.487Z Last Updated: 2025-08-13T13:30:21.695Z Severity: N/A (CVSS 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: INSTAR Products: 2K+, 4K Problem Types: CWE-1263, CWE-284 Description: A vulnerability was found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This issue affects some unknown processing of the component UART Interface. The manipulation leads to improper physical access control. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319865 - https://vuldb.co
e used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319865 - https://vuldb.com/?ctiid.319865 - https://modzero.com/static/MZ-25-03_modzero_INSTAR.pdf
CVE ID: CVE-2025-8763 State: PUBLISHED Published: 2025-08-09T18:02:05.844Z Last Updated: 2025-08-12T16:04:54.327Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:R) Vendors: Ruijie Products: EG306MG Problem Types: CWE-311, CWE-310 Description: A vulnerability was found in Ruijie EG306MG 3.0(1)B11P309. It has been rated as problematic. This issue affects some unknown processing of the file /etc/strongswan.conf of the component strongSwan. The manipulation of the argument i_dont_care_about_security_and_use_aggressive_mode_psk leads to missing encryption of sensitive data. The attack may be initiated remotely. The complexity of an attack is rather high. The expl
encryption of sensitive data. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319265 - https://vuldb.com/?ctiid.319265 - https://vuldb.com/?submit.624325 - https://www.notion.so/23e54a1113e78049aba1f9f586c67764
CVE ID: CVE-2025-8764 State: PUBLISHED Published: 2025-08-09T18:32:06.025Z Last Updated: 2025-08-12T16:04:47.459Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: linlinjava Products: litemall Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical has been found in linlinjava litemall up to 1.8.0. Affected is the function Upload of the file /wx/storage/upload. The manipulation of the argument File leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319266 - https:
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319266 - https://vuldb.com/?ctiid.319266 - https://vuldb.com/?submit.623957 - https://github.com/linlinjava/litemall/issues/567 - https://github.com/linlinjava/litemall/issues/567#issue-3268166914
CVE ID: CVE-2025-8765 State: PUBLISHED Published: 2025-08-09T19:02:06.209Z Last Updated: 2025-08-12T16:04:40.267Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Datacom Products: DM955 5GT 1200 Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in Datacom DM955 5GT 1200 825.8010.00. Affected by this vulnerability is an unknown functionality of the component Wireless Basic Settings. The manipulation of the argument SSID leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319267 - https://vuldb.com/?ctiid.319267 - https://vuldb.com/?submit.624545
CVE ID: CVE-2025-8767 State: PUBLISHED Published: 2025-08-12T06:42:40.577Z Last Updated: 2025-08-12T20:07:51.764Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: anwppro Products: AnWP Football Leagues Problem Types: CWE-1236 Description: The AnWP Football Leagues plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 0.16.17 via the 'download_csv_players' and 'download_csv_games' functions. This makes it possible for authenticated attackers, with Administrator-level access and above, to embed untrusted input into exported CSV files, which can result in code execution when these files are downloaded and opened on a local sy
put into exported CSV files, which can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/04676263-cdad-40cd-bb54-61beb727e09d?source=cve - https://plugins.trac.wordpress.org/browser/football-leagues-by-anwppro/trunk/includes/class-anwpfl-data-port.php#L93 - https://plugins.trac.wordpress.org/browser/football-leagues-by-anwppro/trunk/includes/class-anwpfl-data-port.php#L265 - https://plugins.trac.wordpress.org/browser/football-leagues-by-anwppro/trunk/includes/class-anwpfl-data-port.php#L58 - http://plug
ugins.trac.wordpress.org/browser/football-leagues-by-anwppro/trunk/includes/class-anwpfl-data-port.php#L58 - http://plugins.trac.wordpress.org/changeset/3342787/football-leagues-by-anwppro/trunk/includes/class-anwpfl-data-port.php
CVE ID: CVE-2025-8768 State: REJECTED Published: N/A Last Updated: 2025-11-10T15:04:23.664Z Description: No description available.
CVE ID: CVE-2025-8770 State: PUBLISHED Published: 2025-08-13T17:26:10.817Z Last Updated: 2025-08-13T20:05:23.927Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-639 Description: An issue has been discovered in GitLab EE affecting all versions from 18.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that could have allowed authenticated users with specific access to bypass merge request approval policies by manipulating approval rule identifiers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/549105
CVE ID: CVE-2025-8771 State: REJECTED Published: N/A Last Updated: 2025-08-09T04:52:57.594Z Description: No description available.