Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-54623 State: PUBLISHED Published: 2025-08-06T01:44:32.090Z Last Updated: 2025-08-06T16:07:00.705Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-680 Description: Out-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54624 State: PUBLISHED Published: 2025-08-06T02:03:34.107Z Last Updated: 2025-08-06T15:19:24.948Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-275 Description: Unexpected injection event vulnerability in the multimodalinput module. Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54625 State: PUBLISHED Published: 2025-08-06T02:07:18.708Z Last Updated: 2025-08-06T14:51:08.740Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-414 Description: Race condition vulnerability in the kernel file system module. Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54626 State: PUBLISHED Published: 2025-08-06T02:05:02.919Z Last Updated: 2025-08-06T15:12:40.580Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-416 Description: Pointer dangling vulnerability in the cjwindow module. Impact: Successful exploitation of this vulnerability may affect function stability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54627 State: PUBLISHED Published: 2025-08-06T02:08:28.378Z Last Updated: 2025-08-06T20:22:16.837Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-787 Description: Out-of-bounds write vulnerability in the skia module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54628 State: PUBLISHED Published: 2025-08-06T02:10:38.653Z Last Updated: 2025-08-06T20:21:52.923Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-118 Description: Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54629 State: PUBLISHED Published: 2025-08-06T02:12:25.631Z Last Updated: 2025-08-06T13:47:39.703Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-362 Description: Race condition issue occurring in the physical page import process of the memory management module. Impact: Successful exploitation of this vulnerability may affect service integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54630 State: PUBLISHED Published: 2025-08-06T02:15:58.460Z Last Updated: 2025-08-06T13:47:14.425Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-122 Description: :Vulnerability of insufficient data length verification in the DFA module. Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54631 State: PUBLISHED Published: 2025-08-06T02:17:52.267Z Last Updated: 2025-08-06T15:40:44.298Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-190 Description: Vulnerability of insufficient data length verification in the partition module. Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54632 State: PUBLISHED Published: 2025-08-06T02:19:18.754Z Last Updated: 2025-08-06T15:40:38.787Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-120 Description: Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulnerability may affect service integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54633 State: PUBLISHED Published: 2025-08-06T02:20:18.835Z Last Updated: 2025-08-06T15:40:33.327Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-125 Description: Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54634 State: PUBLISHED Published: 2025-08-06T02:21:29.264Z Last Updated: 2025-08-06T15:40:27.445Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-755 Description: Vulnerability of improper processing of abnormal conditions in huge page separation. Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54635 State: PUBLISHED Published: 2025-08-06T02:30:01.134Z Last Updated: 2025-08-06T13:34:57.517Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-416 Description: Vulnerability of returning released pointers in the distributed notification service. Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54636 State: PUBLISHED Published: 2025-08-06T02:32:06.961Z Last Updated: 2025-08-06T20:03:08.598Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-20 Description: Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54637 State: PUBLISHED Published: 2025-08-06T02:33:47.309Z Last Updated: 2025-08-06T19:48:30.710Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-125 Description: Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54638 State: PUBLISHED Published: 2025-08-06T02:35:18.531Z Last Updated: 2025-08-06T19:41:43.740Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-502 Description: Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability may affect the availability of the ad service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54639 State: PUBLISHED Published: 2025-08-06T02:38:25.798Z Last Updated: 2025-08-06T19:40:47.074Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-502 Description: ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exceptions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54640 State: PUBLISHED Published: 2025-08-06T02:40:00.628Z Last Updated: 2025-08-06T19:39:45.795Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-502 Description: ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exceptions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54641 State: PUBLISHED Published: 2025-08-06T02:42:45.212Z Last Updated: 2025-08-06T15:40:21.691Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-20 Description: Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54642 State: PUBLISHED Published: 2025-08-06T02:44:14.445Z Last Updated: 2025-08-06T15:40:16.147Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-20 Description: Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54643 State: PUBLISHED Published: 2025-08-06T02:45:44.428Z Last Updated: 2025-08-06T15:40:09.839Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-125 Description: Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54644 State: PUBLISHED Published: 2025-08-06T02:47:07.843Z Last Updated: 2025-08-06T15:40:00.465Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-125 Description: Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54645 State: PUBLISHED Published: 2025-08-06T02:48:19.313Z Last Updated: 2025-08-06T15:39:53.867Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-129 Description: Out-of-bounds array access issue due to insufficient data verification in the location service module. Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54646 State: PUBLISHED Published: 2025-08-06T02:50:23.319Z Last Updated: 2025-08-06T15:39:49.052Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-130 Description: Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54647 State: PUBLISHED Published: 2025-08-06T02:51:18.850Z Last Updated: 2025-08-06T15:39:43.642Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-125 Description: Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54648 State: PUBLISHED Published: 2025-08-06T02:52:26.530Z Last Updated: 2025-08-06T15:39:38.233Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-125 Description: Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54649 State: PUBLISHED Published: 2025-08-06T02:53:27.348Z Last Updated: 2025-08-06T15:39:32.615Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-843 Description: Vulnerability of using incompatible types to access resources in the location service. Impact: Successful exploitation of this vulnerability may cause some location information attributes to be incorrect. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54650 State: PUBLISHED Published: 2025-08-06T02:54:32.135Z Last Updated: 2025-08-06T15:39:26.694Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-129 Description: Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54651 State: PUBLISHED Published: 2025-08-06T02:55:31.662Z Last Updated: 2025-08-06T14:48:33.916Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-362 Description: Race condition vulnerability in the kernel hufs module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/8/
CVE ID: CVE-2025-54652 State: PUBLISHED Published: 2025-08-06T01:05:14.764Z Last Updated: 2025-08-06T14:00:19.096Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-22 Description: Path traversal vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization module. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/cn/support/bulletinlaptops/2025/8/
CVE ID: CVE-2025-54653 State: PUBLISHED Published: 2025-08-06T01:06:31.850Z Last Updated: 2025-08-06T13:56:44.008Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-22 Description: Path traversal vulnerability in the virtualization file module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization file module. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/cn/support/bulletinlaptops/2025/8/
CVE ID: CVE-2025-54654 State: PUBLISHED Published: 2025-10-11T01:50:10.109Z Last Updated: 2025-10-14T14:15:20.265Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-264 Description: Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/10/
CVE ID: CVE-2025-54655 State: PUBLISHED Published: 2025-08-06T01:07:40.817Z Last Updated: 2025-08-06T15:41:18.011Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-367 Description: Race condition vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality and integrity of the virtualization graphics module. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/cn/support/bulletinlaptops/2025/8/
CVE ID: CVE-2025-54656 State: PUBLISHED Published: 2025-07-30T15:58:02.362Z Last Updated: 2025-11-04T21:12:51.678Z Vendors: Apache Software Foundation Products: Apache Struts Extras Problem Types: CWE-117 Description: ** UNSUPPORTED WHEN ASSIGNED ** Improper Output Neutralization for Logs vulnerability in Apache Struts. This issue affects Apache Struts Extras: before 2. When using LookupDispatchAction, in some cases, Struts may print untrusted input to the logs without any filtering. Specially-crafted input may lead to log output where part of the message masquerades as a separate log line, confusing consumers of the logs (either human or automated). As this project is retired, we do not pla
eparate log line, confusing consumers of the logs (either human or automated). As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/so5cn07j2zn9vlf1xnfqp630wts719rr
CVE ID: CVE-2025-54657 State: REJECTED Published: N/A Last Updated: 2025-08-01T02:55:09.494Z Description: No description available.
CVE ID: CVE-2025-54658 State: PUBLISHED Published: 2025-10-16T13:55:28.898Z Last Updated: 2025-10-16T14:41:32.560Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C) Vendors: Fortinet Products: FortiDLP Problem Types: CWE-22 Description: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiDLP Agent's Outlookproxy plugin for MacOS 11.5.1 and 11.4.2 through 11.4.6 and 11.3.2 through 11.3.4 and 11.2.0 through 11.2.3 and 11.1.1 through 11.1.2 and 11.0.1 and 10.5.1 and 10.4.0, and 10.3.1 may allow an authenticated attacker to escalate their privilege to Root via sending a crafted request to a l
and 10.3.1 may allow an authenticated attacker to escalate their privilege to Root via sending a crafted request to a local listening port. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-25-628
CVE ID: CVE-2025-54660 State: PUBLISHED Published: 2025-11-18T17:01:18.577Z Last Updated: 2025-11-18T19:24:07.223Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:W/RC:R) Vendors: Fortinet Products: FortiClientWindows Problem Types: CWE-489 Description: An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientWindows 7.0 all versions may allow a local attacker to run the application step by step and retrieve the saved VPN user password Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-25-844
CVE ID: CVE-2025-54661 State: REJECTED Published: N/A Last Updated: 2025-07-29T02:55:07.342Z Description: No description available.
CVE ID: CVE-2025-54662 State: REJECTED Published: N/A Last Updated: 2025-07-29T02:55:06.840Z Description: No description available.
CVE ID: CVE-2025-54663 State: REJECTED Published: N/A Last Updated: 2025-07-29T02:55:06.363Z Description: No description available.
CVE ID: CVE-2025-54664 State: REJECTED Published: N/A Last Updated: 2025-07-29T02:55:05.916Z Description: No description available.
CVE ID: CVE-2025-54665 State: REJECTED Published: N/A Last Updated: 2025-07-29T02:55:05.431Z Description: No description available.
CVE ID: CVE-2025-54666 State: REJECTED Published: N/A Last Updated: 2025-07-29T02:55:04.891Z Description: No description available.
CVE ID: CVE-2025-54667 State: PUBLISHED Published: 2025-08-14T10:34:37.828Z Last Updated: 2025-08-14T14:42:19.457Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Saad Iqbal Products: myCred Problem Types: CWE-367 Description: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Saad Iqbal myCred allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This issue affects myCred: from n/a through 2.9.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mycred/vulnerability/wordpress-mycred-plugin-plugin-2-9-4-3-race-condition-vulnerability?_s_id=cve
CVE ID: CVE-2025-54668 State: PUBLISHED Published: 2025-08-14T10:34:38.390Z Last Updated: 2025-08-14T14:42:14.302Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Saad Iqbal Products: myCred Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred allows Stored XSS. This issue affects myCred: from n/a through 2.9.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mycred/vulnerability/wordpress-mycred-plugin-plugin-2-9-4-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-54669 State: PUBLISHED Published: 2025-08-14T10:34:39.239Z Last Updated: 2025-08-14T14:42:09.009Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: RomanCode Products: MapSVG Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RomanCode MapSVG allows SQL Injection. This issue affects MapSVG: from n/a through n/a. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mapsvg/vulnerability/wordpress-mapsvg-plugin-8-7-4-sql-injection-vulnerability?_s_id=cve