Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-7405 State: PUBLISHED Published: 2025-09-01T03:54:47.567Z Last Updated: 2025-09-02T19:27:49.951Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-F Series FX5U-32MT/ES, MELSEC iQ-F Series FX5U-32MT/DS, MELSEC iQ-F Series FX5U-32MT/ESS, MELSEC iQ-F Series FX5U-32MT/DSS, MELSEC iQ-F Series FX5U-32MR/ES, MELSEC iQ-F Series FX5U-32MR/DS, MELSEC iQ-F Series FX5U-64MT/ES, MELSEC iQ-F Series FX5U-64MT/DS, MELSEC iQ-F Series FX5U-64MT/ESS, MELSEC iQ-F Series FX5U-64MT/DSS, MELSEC iQ-F Series FX5U-64MR/ES, MELSEC iQ-F Series FX5U-64MR/DS, MELSEC iQ-F Series FX5U-80MT/ES, MELSEC iQ-F Series FX5U-80MT/DS
F Series FX5U-64MR/ES, MELSEC iQ-F Series FX5U-64MR/DS, MELSEC iQ-F Series FX5U-80MT/ES, MELSEC iQ-F Series FX5U-80MT/DS, MELSEC iQ-F Series FX5U-80MT/ESS, MELSEC iQ-F Series FX5U-80MT/DSS, MELSEC iQ-F Series FX5U-80MR/ES, MELSEC iQ-F Series FX5U-80MR/DS, MELSEC iQ-F Series FX5UC-32MT/D, MELSEC iQ-F Series FX5UC-32MT/DSS, MELSEC iQ-F Series FX5UC-64MT/D, MELSEC iQ-F Series FX5UC-64MT/DSS, MELSEC iQ-F Series FX5UC-96MT/D, MELSEC iQ-F Series FX5UC-96MT/DSS, MELSEC iQ-F Series FX5UC-32MT/DS-TS, MELSEC iQ-F Series FX5UC-32MT/DSS-TS, MELSEC iQ-F Series FX5UC-32MR/DS-TS, MELSEC iQ-F Series FX5UJ-24MT/ES, MELSEC iQ-F Series FX5UJ-24MT/DS, MELSEC iQ-F Series FX5UJ-24MT/ESS, MELSEC iQ-F Series FX5UJ-
Q-F Series FX5UJ-24MT/ES, MELSEC iQ-F Series FX5UJ-24MT/DS, MELSEC iQ-F Series FX5UJ-24MT/ESS, MELSEC iQ-F Series FX5UJ-24MT/DSS, MELSEC iQ-F Series FX5UJ-24MR/ES, MELSEC iQ-F Series FX5UJ-24MR/DS, MELSEC iQ-F Series FX5UJ-40MT/ES, MELSEC iQ-F Series FX5UJ-40MT/DS, MELSEC iQ-F Series FX5UJ-40MT/ESS, MELSEC iQ-F Series FX5UJ-40MT/DSS, MELSEC iQ-F Series FX5UJ-40MR/ES, MELSEC iQ-F Series FX5UJ-40MR/DS, MELSEC iQ-F Series FX5UJ-60MT/ES, MELSEC iQ-F Series FX5UJ-60MT/DS, MELSEC iQ-F Series FX5UJ-60MT/ESS, MELSEC iQ-F Series FX5UJ-60MT/DSS, MELSEC iQ-F Series FX5UJ-60MR/ES, MELSEC iQ-F Series FX5UJ-60MR/DS, MELSEC iQ-F Series FX5UJ-24MT/ES-A, MELSEC iQ-F Series FX5UJ-24MR/ES-A, MELSEC iQ-F Series
EC iQ-F Series FX5UJ-60MR/DS, MELSEC iQ-F Series FX5UJ-24MT/ES-A, MELSEC iQ-F Series FX5UJ-24MR/ES-A, MELSEC iQ-F Series FX5UJ-40MT/ES-A, MELSEC iQ-F Series FX5UJ-40MR/ES-A, MELSEC iQ-F Series FX5UJ-60MT/ES-A, MELSEC iQ-F Series FX5UJ-60MR/ES-A, MELSEC iQ-F Series FX5S-30MT/ES, MELSEC iQ-F Series FX5S-30MT/ESS, MELSEC iQ-F Series FX5S-30MR/ES, MELSEC iQ-F Series FX5S-40MT/ES, MELSEC iQ-F Series FX5S-40MT/ESS, MELSEC iQ-F Series FX5S-40MR/ES, MELSEC iQ-F Series FX5S-60MT/ES, MELSEC iQ-F Series FX5S-60MT/ESS, MELSEC iQ-F Series FX5S-60MR/ES, MELSEC iQ-F Series FX5S-80MT/ES, MELSEC iQ-F Series FX5S-80MT/ESS, MELSEC iQ-F Series FX5S-80MR/ES, MELSEC iQ-F Series FX5S-30MT/DS, MELSEC iQ-F Series FX
ELSEC iQ-F Series FX5S-80MT/ESS, MELSEC iQ-F Series FX5S-80MR/ES, MELSEC iQ-F Series FX5S-30MT/DS, MELSEC iQ-F Series FX5S-30MT/DSS, MELSEC iQ-F Series FX5S-30MR/DS, MELSEC iQ-F Series FX5S-40MT/DS, MELSEC iQ-F Series FX5S-40MT/DSS, MELSEC iQ-F Series FX5S-40MR/DS, MELSEC iQ-F Series FX5S-60MT/DS, MELSEC iQ-F Series FX5S-60MT/DSS, MELSEC iQ-F Series FX5S-60MR/DS, MELSEC iQ-F Series FX5S-80MT/DS, MELSEC iQ-F Series FX5S-80MT/DSS, MELSEC iQ-F Series FX5S-80MR/DS Problem Types: CWE-306 Description: Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values
ic Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values of the product and stop the operation of the programs, since MODBUS/TCP in the products does not have authentication features. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-011_en.pdf - https://jvn.jp/vu/JVNVU90041458/ - https://www.cisa.gov/news-events/ics-advisories/icsa-25-240-01
CVE ID: CVE-2025-7407 State: PUBLISHED Published: 2025-07-10T13:32:05.867Z Last Updated: 2025-07-10T15:14:00.461Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:W/RC:C) Vendors: Netgear Products: D6400 Problem Types: CWE-78, CWE-77 Description: A vulnerability, which was classified as critical, was found in Netgear D6400 1.0.0.114. This affects an unknown part of the file diag.cgi. The manipulation of the argument host_name leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early and confirmed the existence of the vulnerability. They reacted very quickly, profession
. The vendor was contacted early and confirmed the existence of the vulnerability. They reacted very quickly, professional and kind. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315867 - https://vuldb.com/?ctiid.315867 - https://vuldb.com/?submit.603668 - https://github.com/wudipjq/my_vuln/blob/main/Netgear7/vuln_66/66.md - https://github.com/wudipjq/my_vuln/blob/main/Netgear7/vuln_66/66.md#poc - https://www.netgear.com/
CVE ID: CVE-2025-7408 State: PUBLISHED Published: 2025-07-10T14:32:05.870Z Last Updated: 2025-07-10T20:17:06.126Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Zoo Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in SourceCodester Zoo Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/templates/animal_form_template.php. The manipulation of the argument msg leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315868 - https://vuldb.com/?ctiid.315868 - https://vuldb.com/?submit.608265 - https://github.com/manyufann/CVE/issues/4 - https://www.sourcecodester.com/
CVE ID: CVE-2025-7409 State: PUBLISHED Published: 2025-07-10T16:32:06.073Z Last Updated: 2025-07-10T18:49:50.913Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Mobile Shop Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Mobile Shop 1.0 and classified as critical. This issue affects some unknown processing of the file /LoginAsAdmin.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315869 - https://
nd may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315869 - https://vuldb.com/?ctiid.315869 - https://vuldb.com/?submit.608518 - https://github.com/rom4j/cve/issues/20 - https://code-projects.org/
CVE ID: CVE-2025-7410 State: PUBLISHED Published: 2025-07-10T17:02:05.511Z Last Updated: 2025-07-10T17:48:25.965Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: LifeStyle Store Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects LifeStyle Store 1.0. It has been classified as critical. Affected is an unknown function of the file /cart_remove.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315870
e public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315870 - https://vuldb.com/?ctiid.315870 - https://vuldb.com/?submit.608524 - https://github.com/rom4j/cve/issues/19 - https://code-projects.org/
CVE ID: CVE-2025-7411 State: PUBLISHED Published: 2025-07-10T19:02:06.058Z Last Updated: 2025-07-10T20:16:41.718Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: LifeStyle Store Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /success.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315871 - https://vuldb.com/?ctiid.315871 - https://vuldb.com/?submit.608531 - https://github.com/rom4j/cve/issues/18 - https://code-projects.org/
CVE ID: CVE-2025-7412 State: PUBLISHED Published: 2025-07-10T19:32:06.284Z Last Updated: 2025-07-10T20:30:11.750Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Library System Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /user/student/profile.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315872 - https://vuldb.com/?ctiid.315872 - https://vuldb.com/?submit.608532 - https://github.com/rom4j/cve/issues/17 - https://code-projects.org/
CVE ID: CVE-2025-7413 State: PUBLISHED Published: 2025-07-10T20:02:05.739Z Last Updated: 2025-07-10T20:20:15.391Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Library System Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical has been found in code-projects Library System 1.0. This affects an unknown part of the file /user/teacher/profile.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315873 - https://vuldb.com/?ctiid.315873 - https://vuldb.com/?submit.608533 - https://github.com/rom4j/cve/issues/16 - https://code-projects.org/
CVE ID: CVE-2025-7414 State: PUBLISHED Published: 2025-07-10T20:32:07.344Z Last Updated: 2025-07-10T20:47:41.403Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: O3V2 Problem Types: CWE-78, CWE-77 Description: A vulnerability classified as critical was found in Tenda O3V2 1.0.0.12(3880). This vulnerability affects the function fromNetToolGet of the file /goform/setPingInfo of the component httpd. The manipulation of the argument domain leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315874 - https://vuldb.com/?ctiid.315874 - https://vuldb.com/?submit.608855 - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_47/47.md - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_47/47.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7415 State: PUBLISHED Published: 2025-07-10T21:02:07.027Z Last Updated: 2025-07-11T16:58:46.182Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: O3V2 Problem Types: CWE-77, CWE-74 Description: A vulnerability, which was classified as critical, has been found in Tenda O3V2 1.0.0.12(3880). This issue affects the function fromTraceroutGet of the file /goform/getTraceroute of the component httpd. The manipulation of the argument dest leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315875 - https://vuldb.com/?ctiid.315875 - https://vuldb.com/?submit.608856 - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_48/48.md - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_48/48.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7416 State: PUBLISHED Published: 2025-07-10T21:32:06.731Z Last Updated: 2025-07-11T16:49:53.541Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: O3V2 Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, was found in Tenda O3V2 1.0.0.12(3880). Affected is the function fromSysToolTime of the file /goform/setSysTimeInfo of the component httpd. The manipulation of the argument Time leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315876 - https://vuldb.com/?ctiid.315876 - https://vuldb.com/?submit.608857 - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_49/49.md - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_49/49.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7417 State: PUBLISHED Published: 2025-07-10T22:02:07.293Z Last Updated: 2025-07-11T16:41:42.215Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: O3V2 Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in Tenda O3V2 1.0.0.12(3880) and classified as critical. Affected by this vulnerability is the function fromNetToolGet of the file /goform/setPingInfo of the component httpd. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315877 - https://vuldb.com/?ctiid.315877 - https://vuldb.com/?submit.608863 - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_50/50.md - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_50/50.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7418 State: PUBLISHED Published: 2025-07-10T22:32:07.119Z Last Updated: 2025-07-11T14:07:09.954Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: O3V2 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda O3V2 1.0.0.12(3880) and classified as critical. Affected by this issue is the function fromPingResultGet of the file /goform/setPing of the component httpd. The manipulation of the argument destIP leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315878 - https://vuldb.com/?ctiid.315878 - https://vuldb.com/?submit.608864 - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_51/51.md - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_51/51.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7419 State: PUBLISHED Published: 2025-07-10T23:02:07.821Z Last Updated: 2025-07-11T14:06:07.885Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: O3V2 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been classified as critical. This affects the function fromSpeedTestSet of the file /goform/setRateTest of the component httpd. The manipulation of the argument destIP leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315879 - https://vuldb.com/?ctiid.315879 - https://vuldb.com/?submit.608865 - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_52/52.md - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_52/52.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7420 State: PUBLISHED Published: 2025-07-10T23:32:06.990Z Last Updated: 2025-07-11T13:56:07.527Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: O3V2 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been declared as critical. This vulnerability affects the function formWifiBasicSet of the file /goform/setWrlBasicInfo of the component httpd. The manipulation of the argument extChannel leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ly. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315880 - https://vuldb.com/?ctiid.315880 - https://vuldb.com/?submit.608866 - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_53/53.md - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_53/53.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7421 State: PUBLISHED Published: 2025-07-11T00:02:06.586Z Last Updated: 2025-07-11T13:35:03.633Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: O3V2 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been rated as critical. This issue affects the function fromMacFilterModify of the file /goform/operateMacFilter of the component httpd. The manipulation of the argument mac leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315881 - https://vuldb.com/?ctiid.315881 - https://vuldb.com/?submit.608867 - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_54/54.md - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_54/54.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7422 State: PUBLISHED Published: 2025-07-11T00:32:07.629Z Last Updated: 2025-07-11T13:33:23.043Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: O3V2 Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical has been found in Tenda O3V2 1.0.0.12(3880). Affected is the function setAutoReboot of the file /goform/setNetworkService of the component httpd. The manipulation of the argument week leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315882 - https://vuldb.com/?ctiid.315882 - https://vuldb.com/?submit.608868 - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_55/55.md - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_55/55.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7423 State: PUBLISHED Published: 2025-07-11T01:02:08.323Z Last Updated: 2025-07-11T13:32:32.154Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: O3V2 Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical was found in Tenda O3V2 1.0.0.12(3880). Affected by this vulnerability is the function formWifiMacFilterSet of the file /goform/setWrlFilterList of the component httpd. The manipulation of the argument macList leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315883 - https://vuldb.com/?ctiid.315883 - https://vuldb.com/?submit.608869 - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_56/56.md - https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_56/56.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7424 State: PUBLISHED Published: 2025-07-10T14:05:41.808Z Last Updated: 2025-11-06T21:10:45.779Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-843 Description: A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases,
g XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2025-7424 - https://bugzilla.redhat.com/show_bug.cgi?id=2379228
CVE ID: CVE-2025-7425 State: PUBLISHED Published: 2025-07-10T13:53:37.295Z Last Updated: 2025-11-22T03:00:55.883Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat En
Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat OpenShift Container Platform 4.16, Red Hat OpenShift Container Platform