Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-40907 State: PUBLISHED Published: 2025-05-16T13:03:02.774Z Last Updated: 2025-09-05T13:23:05.630Z Vendors: ETHER Products: FCGI Problem Types: CWE-1395, CWE-190, CWE-122 Description: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library. The included FastCGI library is affected by CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://www.openwall.com/lists/oss-security/2025/04/23/4 - https://github.com/FastCGI-
SA ADP Vulnrichment: References: - http://www.openwall.com/lists/oss-security/2025/04/23/4 - https://github.com/FastCGI-Archives/fcgi2/issues/67 - https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.5 - https://www.synacktiv.com/en/publications/cve-2025-23016-exploiting-the-fastcgi-library - https://github.com/perl-catalyst/FCGI/issues/14 - https://patch-diff.githubusercontent.com/raw/FastCGI-Archives/fcgi2/pull/74.patch
CVE ID: CVE-2025-40908 State: PUBLISHED Published: 2025-06-01T13:41:48.168Z Last Updated: 2025-06-02T03:22:25.333Z Vendors: TINITA Products: YAML::LibYAML Problem Types: CWE-552 Description: YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ingydotnet/yaml-libyaml-pm/issues/120 - https://github.com/ingydotnet/yaml-libyaml-pm/pull/121 - https://github.com/ingydotnet/yaml-libyaml-pm/pull/122
CVE ID: CVE-2025-40909 State: PUBLISHED Published: 2025-05-30T12:20:11.237Z Last Updated: 2025-11-03T18:09:27.894Z Vendors: perl Products: perl Problem Types: CWE-689, CWE-426 Description: Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any third (or more) thread already running. This may lead to unintended operations such as loading code or accessing files from unexpected locations, which a local attacker may be able to exploit. The bug was introduced
code or accessing files from unexpected locations, which a local attacker may be able to exploit. The bug was introduced in commit 11a11ecf4bea72b17d250cfb43c897be1341861e and released in Perl version 5.13.6 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Perl/perl5/commit/918bfff86ca8d6d4e4ec5b30994451e0bd74aba9.patch - https://www.openwall.com/lists/oss-security/2025/05/22/2 - https://github.com/Perl/perl5/issues/23010 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098226 - https://github.com/Perl/perl5/issues/10387 - https://perldoc.perl.org/5.14.0/perl5136delta#Directory-handles-not-copied-to-threads - https://github.com/
sues/10387 - https://perldoc.perl.org/5.14.0/perl5136delta#Directory-handles-not-copied-to-threads - https://github.com/Perl/perl5/commit/11a11ecf4bea72b17d250cfb43c897be1341861e
CVE ID: CVE-2025-40910 State: PUBLISHED Published: 2025-06-27T12:19:59.195Z Last Updated: 2025-06-27T20:06:41.450Z Vendors: TPODER Products: Net::IP::LPM Problem Types: CWE-1287 Description: Net::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal numbers, which can confuse users who are intentionally using octal notation, as well as users who believe they are using decimal notation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://metacpan.org/release/TPODER/Net-IP-LPM-1.10/diff/TPODER/Ne
Analyst Notes: - CISA ADP Vulnrichment: References: - https://metacpan.org/release/TPODER/Net-IP-LPM-1.10/diff/TPODER/Net-IP-LPM-1.09/lib/Net/IP/LPM.pm - https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/ - https://security.metacpan.org/patches/N/Net-IP-LPM/1.10/CVE-2025-40910-r1.patch
CVE ID: CVE-2025-40911 State: PUBLISHED Published: 2025-05-27T21:17:42.238Z Last Updated: 2025-05-28T13:56:12.480Z Vendors: RRWO Products: Net::CIDR::Set Problem Types: CWE-1287 Description: Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly handle leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal numbers, which can confuse users who are intentionally using octal notation, as well as users who believe they are using decimal notation. Net::CIDR::Set used code from Net::CIDR::Lite, which had a similar vulnerability CVE-2021-47154. Additional Analyst N
n. Net::CIDR::Set used code from Net::CIDR::Lite, which had a similar vulnerability CVE-2021-47154. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://metacpan.org/release/RRWO/Net-CIDR-Set-0.14/changes - https://github.com/robrwo/perl-Net-CIDR-Set/commit/be7d91e8446ad8013b08b4be313d666dab003a8a.patch - https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/
CVE ID: CVE-2025-40912 State: PUBLISHED Published: 2025-06-11T17:48:39.344Z Last Updated: 2025-06-11T18:44:15.223Z Vendors: MIK Products: CryptX Problem Types: CWE-1395 Description: CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode. CryptX embeds the tomcrypt library. The versions of that library in CryptX before 0.065 may be susceptible to CVE-2019-17362. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libtom/libtomcrypt/issues/507
CVE ID: CVE-2025-40913 State: PUBLISHED Published: 2025-07-16T14:05:33.899Z Last Updated: 2025-07-16T20:50:08.893Z Vendors: ATRODO Products: Net::Dropbear Problem Types: CWE-1395 Description: Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow. Net::Dropbear embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cve.org/CVERecord?id=CVE-2023-36328 - https://github.com/libtom/libtommath/pull/546 - https://github.com/advisories/GHSA-j3xv-6967-cv88 - https://metacpan.org/release/ATRODO/Net-Dropbe
libtommath/pull/546 - https://github.com/advisories/GHSA-j3xv-6967-cv88 - https://metacpan.org/release/ATRODO/Net-Dropbear-0.16/source/dropbear/libtommath/bn_mp_grow.c
CVE ID: CVE-2025-40914 State: PUBLISHED Published: 2025-06-11T14:06:53.418Z Last Updated: 2025-06-11T14:43:31.248Z Vendors: MIK Products: CryptX Problem Types: CWE-1395 Description: Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow. CryptX embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cve.org/CVERecord?id=CVE-2023-36328 - https://github.com/libtom/libtommath/pull/546 - https://github.com/advisories/GHSA-j3xv-6967-cv88 - https://metacpan.org/release/MIK/CryptX-0.086/source/src/ltm/bn_mp_grow.c
CVE ID: CVE-2025-40915 State: PUBLISHED Published: 2025-06-11T17:09:50.664Z Last Updated: 2025-06-11T17:57:28.026Z Vendors: GRYPHON Products: Mojolicious::Plugin::CSRF Problem Types: CWE-338 Description: Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens. That version of the module generates tokens as an MD5 of the process id, the current time, and a single call to the built-in rand() function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://metacpan.org/release/GRYPHON/Mojolicious-Plugin-CSRF-1.04/diff/GRYPHON/Mojolicious-Plugin-CSRF-1.03 - https://metacpan.org/release/GRYPHON/Mojolicious-Plugin-CSRF-1.04/changes
CVE ID: CVE-2025-40916 State: PUBLISHED Published: 2025-06-16T11:01:08.871Z Last Updated: 2025-06-16T13:31:45.621Z Vendors: GRYPHON Products: Mojolicious::Plugin::CaptchaPNG Problem Types: CWE-338, CWE-804 Description: Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha. That version uses the built-in rand() function for generating the captcha text as well as image noise, which is insecure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://metacpan.org/release/GRYPHON/Mojolicious-Plugin-CaptchaPNG-1.04/diff/GRYPHON/Mojolicious-Plugin-CaptchaPNG-1.05/lib/Mojolicious/Plugin/CaptchaPNG.pm - https://metacpan.org
tchaPNG-1.04/diff/GRYPHON/Mojolicious-Plugin-CaptchaPNG-1.05/lib/Mojolicious/Plugin/CaptchaPNG.pm - https://metacpan.org/release/GRYPHON/Mojolicious-Plugin-CaptchaPNG-1.06/changes - https://metacpan.org/pod/perlfunc#rand - https://security.metacpan.org/docs/guides/random-data-for-security.html
CVE ID: CVE-2025-40918 State: PUBLISHED Published: 2025-07-16T14:00:12.777Z Last Updated: 2025-11-04T21:10:18.064Z Vendors: EHUELS Products: Authen::SASL::Perl::DIGEST_MD5 Problem Types: CWE-340, CWE-338 Description: Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce (client nonce) is generated from an MD5 hash of the PID, the epoch time and the built-in rand function. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage. According to RFC 2831, The cnonce-value is an opaque quoted string valu
function is unsuitable for cryptographic usage. According to RFC 2831, The cnonce-value is an opaque quoted string value provided by the client and used by both client and server to avoid chosen plaintext attacks, and to provide mutual authentication. The security of the implementation depends on a good choice. It is RECOMMENDED that it contain at least 64 bits of entropy. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://metacpan.org/release/EHUELS/Authen-SASL-2.1900/changes - https://metacpan.org/dist/Authen-SASL/source/lib/Authen/SASL/Perl/DIGEST_MD5.pm#L263 - https://datatracker.ietf.org/doc/html/rfc2831 - https://security.metacpan.org/pat
/Authen/SASL/Perl/DIGEST_MD5.pm#L263 - https://datatracker.ietf.org/doc/html/rfc2831 - https://security.metacpan.org/patches/A/Authen-SASL/2.1800/CVE-2025-40918-r1.patch - https://github.com/gbarr/perl-authen-sasl/pull/22
CVE ID: CVE-2025-40919 State: PUBLISHED Published: 2025-07-16T14:04:09.443Z Last Updated: 2025-07-16T20:49:26.539Z Vendors: SALVA Products: Authen::DigestMD5 Problem Types: CWE-340, CWE-338 Description: Authen::DigestMD5 versions 0.01 through 0.02 for Perl generate the cnonce insecurely. The cnonce (client nonce) is generated from an MD5 hash of the PID, the epoch time and the built-in rand function. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage. According to RFC 2831, "The cnonce-value is an opaque quoted string value provided by the client and
yptographic usage. According to RFC 2831, "The cnonce-value is an opaque quoted string value provided by the client and used by both client and server to avoid chosen plaintext attacks, and to provide mutual authentication. The security of the implementation depends on a good choice. It is RECOMMENDED that it contain at least 64 bits of entropy." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://metacpan.org/release/SALVA/Authen-DigestMD5-0.01/source/DigestMD5.pm#L126 - https://datatracker.ietf.org/doc/html/rfc2831
CVE ID: CVE-2025-40920 State: PUBLISHED Published: 2025-08-11T20:19:57.516Z Last Updated: 2025-11-04T21:10:19.369Z Vendors: ETHER Products: Catalyst::Authentication::Credential::HTTP Problem Types: CWE-340, CWE-338 Description: Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID library. * Data::UUID does not use a strong cryptographic source for generating UUIDs. * Data::UUID returns v3 UUIDs, which are generated from known information and are unsuitable for security, as per RFC 9562. * The nonces should be generated from a strong cryptographic source, as per RFC 7616. Additional Analyst Notes: - CISA ADP Vulnrichment: - C
be generated from a strong cryptographic source, as per RFC 7616. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.metacpan.org/patches/C/Catalyst-Authentication-Credential-HTTP/1.018/CVE-2025-40920-r1.patch - https://github.com/perl-catalyst/Catalyst-Authentication-Credential-HTTP/pull/1 - https://metacpan.org/release/ETHER/Catalyst-Authentication-Credential-HTTP-1.018/source/lib/Catalyst/Authentication/Credential/HTTP.pm#L391 - https://datatracker.ietf.org/doc/html/rfc9562#name-security-considerations - https://datatracker.ietf.org/doc/html/rfc7616#section-5.12
CVE ID: CVE-2025-40923 State: PUBLISHED Published: 2025-07-16T13:05:03.782Z Last Updated: 2025-11-04T21:10:20.704Z Vendors: MIYAGAWA Products: Plack::Middleware::Session Problem Types: CWE-340, CWE-338 Description: Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage. Predicable session ids could allow an attacker to gain access to systems. Addit
n is unsuitable for cryptographic usage. Predicable session ids could allow an attacker to gain access to systems. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://metacpan.org/release/MIYAGAWA/Plack-Middleware-Session-0.34/source/lib/Plack/Session/State.pm#L22 - https://github.com/plack/Plack-Middleware-Session/pull/52 - https://github.com/plack/Plack-Middleware-Session/commit/1fbfbb355e34e7f4b3906f66cf958cedadd2b9be.patch - https://security.metacpan.org/docs/guides/random-data-for-security.html
CVE ID: CVE-2025-40924 State: PUBLISHED Published: 2025-07-17T13:33:43.739Z Last Updated: 2025-07-17T19:53:31.346Z Vendors: HAARG Products: Catalyst::Plugin::Session Problem Types: CWE-340, CWE-338 Description: Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely. The session id is generated from a (usually SHA-1) hash of a simple counter, the epoch time, the built-in rand function, the PID and the current Catalyst context. This information is of low entropy. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage. Predic
if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage. Predicable session ids could allow an attacker to gain access to systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://metacpan.org/release/HAARG/Catalyst-Plugin-Session-0.43/source/lib/Catalyst/Plugin/Session.pm#L632 - https://github.com/perl-catalyst/Catalyst-Plugin-Session/pull/5 - https://github.com/perl-catalyst/Catalyst-Plugin-Session/commit/c0e2b4ab1e42ebce1008286db8c571b6ee98c22c.patch
CVE ID: CVE-2025-40925 State: PUBLISHED Published: 2025-09-20T12:31:34.353Z Last Updated: 2025-09-22T17:27:16.336Z Vendors: BLUEFEET Products: Starch Problem Types: CWE-340, CWE-338 Description: Starch versions 0.14 and earlier generate session ids insecurely. The default session id generator returns a SHA-1 hash seeded with a counter, the epoch time, the built-in rand function, the PID, and internal Perl reference addresses. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage. Predicable session ids could allow an attacker to gain access to systems. A
ction is unsuitable for cryptographic usage. Predicable session ids could allow an attacker to gain access to systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bluefeet/Starch/pull/5 - https://github.com/bluefeet/Starch/commit/5573449e64e0660f7ee209d1eab5881d4ccbee3b.patch - https://metacpan.org/dist/Starch/source/lib/Starch/Manager.pm
CVE ID: CVE-2025-40927 State: PUBLISHED Published: 2025-08-29T00:10:07.161Z Last Updated: 2025-08-29T13:18:32.704Z Vendors: MANWAR Products: CGI::Simple Problem Types: CWE-113 Description: CGI::Simple versions before 1.282 for Perl has a HTTP response splitting flaw This vulnerability is a confirmed HTTP response splitting flaw in CGI::Simple that allows HTTP response header injection, which can be used for reflected XSS or open redirect under certain conditions. Although some validation exists, it can be bypassed using URL-encoded values, allowing an attacker to inject untrusted content into the response via query parameters. As a result, an attacker can inject a line break (e.g. %0A) into
rusted content into the response via query parameters. As a result, an attacker can inject a line break (e.g. %0A) into the parameter value, causing the server to split the HTTP response and inject arbitrary headers or even an HTML/JavaScript body, leading to reflected cross-site scripting (XSS), open redirect or other attacks. The issue documented in CVE-2010-4410 https://www.cve.org/CVERecord?id=CVE-2010-4410 is related but the fix was incomplete. Impact By injecting %0A (newline) into a query string parameter, an attacker can: * Break the current HTTP header * Inject a new header or entire body * Deliver a script payload that is reflected in the server’s response That can lead to the foll
ew header or entire body * Deliver a script payload that is reflected in the server’s response That can lead to the following attacks: * reflected XSS * open redirect * cache poisoning * header manipulation Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://metacpan.org/release/MANWAR/CGI-Simple-1.281/source/lib/CGI/Simple.pm#L1031-1035 - https://metacpan.org/release/MANWAR/CGI-Simple-1.281/diff/MANWAR/CGI-Simple-1.282/lib/CGI/Simple.pm - https://owasp.org/www-community/attacks/HTTP_Response_Splitting - https://datatracker.ietf.org/doc/html/rfc7230#section-3 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2320 - https://rt.perl.org/Public/Bug/Display.html?id=2
tion-3 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2320 - https://rt.perl.org/Public/Bug/Display.html?id=21951
CVE ID: CVE-2025-40928 State: PUBLISHED Published: 2025-09-08T15:08:21.860Z Last Updated: 2025-11-04T21:10:22.058Z Vendors: MLEHMANN Products: JSON::XS Problem Types: CWE-122 Description: JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://metacpan.org/release/MLEHMANN/JSON-XS-4.03/source/XS.xs#L256 - https://security.metacpan.org/patches/J/JSON-XS/4.03/CVE-2025-40928-r1.patch
CVE ID: CVE-2025-40929 State: PUBLISHED Published: 2025-09-08T15:08:52.327Z Last Updated: 2025-11-04T21:10:23.342Z Vendors: RURBAN Products: Cpanel::JSON::XS Problem Types: CWE-122 Description: Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.39/source/XS.xs#L713 - https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.40/changes - https://github.com/rurban/Cpanel-JSON-XS/commit/378236219eaa35742c3962ecbdee364903b0a1f2
N/Cpanel-JSON-XS-4.40/changes - https://github.com/rurban/Cpanel-JSON-XS/commit/378236219eaa35742c3962ecbdee364903b0a1f2.patch
CVE ID: CVE-2025-40930 State: PUBLISHED Published: 2025-09-08T15:09:01.179Z Last Updated: 2025-11-04T21:10:24.632Z Vendors: PJUHASZ Products: JSON::SIMD Problem Types: CWE-122 Description: JSON::SIMD before version 1.07 and earlier for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://metacpan.org/release/PJUHASZ/JSON-SIMD-1.06/source/SIMD.xs#L248 - https://metacpan.org/release/PJUHASZ/JSON-SIMD-1.07/changes - https://github.com/pjuhasz/JSON-SIMD/commit/9a87de7331c9fa5198cae404a83b17649cf7b918.patch
CVE ID: CVE-2025-40933 State: PUBLISHED Published: 2025-09-17T14:25:10.826Z Last Updated: 2025-09-17T17:21:55.927Z Vendors: KGOLDOV Products: Apache::AuthAny Problem Types: CWE-340, CWE-338 Description: Apache::AuthAny::Cookie v0.201 or earlier for Perl generates session ids insecurely. Session ids are generated using an MD5 hash of the epoch time and a call to the built-in rand function. The epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage. Predicable session ids could allow an attacker to gain access to systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://metacpan.org/rele
er to gain access to systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://metacpan.org/release/KGOLDOV/Apache2-AuthAny-0.201/source/lib/Apache2/AuthAny/Cookie.pm
CVE ID: CVE-2025-40936 State: PUBLISHED Published: 2025-11-17T11:39:23.557Z Last Updated: 2025-11-17T14:03:32.515Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: PS/IGES Parasolid Translator Component Problem Types: CWE-125 Description: A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0.258). The affected applications contains an out of bounds read vulnerability while parsing specially crafted IGS files. This could allow an attacker to crash the application or execute code in the context of the current process. (ZDI-CAN-26755) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
the context of the current process. (ZDI-CAN-26755) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-241605.html
CVE ID: CVE-2025-40979 State: PUBLISHED Published: 2025-09-10T11:35:57.252Z Last Updated: 2025-09-10T20:23:37.417Z Vendors: Grandstream Networks Products: Wave Problem Types: CWE-427 Description: DLL search order hijacking vulnerability in the wave.exe executable for Windows 11, version 1.27.8. Exploitation of this vulnerability could allow attackers with local access to execute arbitrary code by placing an arbitrary file in the 'C:\Users<user>\AppData\Local\Temp' directory, which could lead to arbitrary code execution and persistence. This vulnerability is only replicable in versions of Windows 11 and does not affect earlier versions. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
in versions of Windows 11 and does not affect earlier versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/dll-search-order-hijack-wave-grandstream-networks