Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-11324 State: PUBLISHED Published: 2025-10-06T06:32:06.564Z Last Updated: 2025-10-06T17:12:43.710Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC18 Problem Types: CWE-121, CWE-119 Description: A vulnerability was identified in Tenda AC18 15.03.05.19(6318). Affected by this vulnerability is an unknown functionality of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327207 - https://vuldb.c
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327207 - https://vuldb.com/?ctiid.327207 - https://vuldb.com/?submit.664526 - https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/AC18/setNotUpgrade.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-11325 State: PUBLISHED Published: 2025-10-06T07:02:07.176Z Last Updated: 2025-10-06T18:33:43.444Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC18 Problem Types: CWE-121, CWE-119 Description: A security flaw has been discovered in Tenda AC18 15.03.05.19(6318). Affected by this issue is some unknown functionality of the file /goform/fast_setting_pppoe_set. Performing manipulation of the argument Username results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327208 - https://vuldb.com/?ctiid.327208 - https://vuldb.com/?submit.664527 - https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/AC18/fast_setting_pppoe_set.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-11326 State: PUBLISHED Published: 2025-10-06T07:32:07.259Z Last Updated: 2025-10-06T17:23:57.007Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC18 Problem Types: CWE-121, CWE-119 Description: A weakness has been identified in Tenda AC18 15.03.05.19(6318). This affects an unknown part of the file /goform/WifiMacFilterSet. Executing manipulation of the argument wifi_chkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327209 - https://v
be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327209 - https://vuldb.com/?ctiid.327209 - https://vuldb.com/?submit.664530 - https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/AC18/WifiMacFilterSet.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-11327 State: PUBLISHED Published: 2025-10-06T08:02:06.994Z Last Updated: 2025-10-06T16:32:34.292Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC18 Problem Types: CWE-121, CWE-119 Description: A security vulnerability has been detected in Tenda AC18 15.03.05.19(6318). This vulnerability affects unknown code of the file /goform/SetUpnpCfg. The manipulation of the argument upnpEn leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327210 - https://vuldb.c
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327210 - https://vuldb.com/?ctiid.327210 - https://vuldb.com/?submit.664532 - https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/AC18/SetUpnpCfg.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-11328 State: PUBLISHED Published: 2025-10-06T08:32:07.978Z Last Updated: 2025-10-06T14:47:22.685Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC18 Problem Types: CWE-121, CWE-119 Description: A vulnerability was detected in Tenda AC18 15.03.05.19(6318). This issue affects some unknown processing of the file /goform/SetDDNSCfg. The manipulation of the argument ddnsEn results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327211 - https://vuldb.com/?ctiid.327211 - https:
st Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327211 - https://vuldb.com/?ctiid.327211 - https://vuldb.com/?submit.664533 - https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/AC18/SetDDNSCfg.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-11329 State: PUBLISHED Published: 2025-10-06T09:02:06.493Z Last Updated: 2025-10-06T14:36:54.024Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Course Registration Problem Types: CWE-89, CWE-74 Description: A flaw has been found in code-projects Online Course Registration 1.0. Impacted is an unknown function of the file /admin/manage-students.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327212 - https://vuldb.com/?ctiid.327
tional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327212 - https://vuldb.com/?ctiid.327212 - https://vuldb.com/?submit.664538 - https://github.com/yihaofuweng/cve/issues/46 - https://code-projects.org/
CVE ID: CVE-2025-11330 State: PUBLISHED Published: 2025-10-06T09:32:07.494Z Last Updated: 2025-10-06T12:42:49.103Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Beauty Parlour Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/sales-reports-detail.php. Such manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327213 - https://vuldb.com/?ctiid.327213 - https://vuldb.com/?submit.664545 - https://vuldb.com/?submit.664546 - https://github.com/xiaoxinkaishi/cve/issues/6 - https://github.com/xiaoxinkaishi/cve/issues/7 - https://phpgurukul.com/
CVE ID: CVE-2025-11331 State: PUBLISHED Published: 2025-10-06T10:02:06.824Z Last Updated: 2025-10-06T12:37:39.018Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: IdeaCMS Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in IdeaCMS up to 1.8. The impacted element is an unknown function of the file app/common/logic/admin/Config.php of the component Website Name Handler. Performing manipulation of the argument 网站名称 results in command injection. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Ana
c and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327214 - https://vuldb.com/?ctiid.327214 - https://vuldb.com/?submit.664550 - https://github.com/tiancesec/CVE/issues/4
CVE ID: CVE-2025-11332 State: PUBLISHED Published: 2025-10-06T10:32:05.897Z Last Updated: 2025-10-06T12:33:34.147Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: n/a Products: CmsEasy Problem Types: CWE-79, CWE-94 Description: A vulnerability was determined in CmsEasy up to 7.7.7. This affects an unknown function in the library lib/inc/view.php of the component URL Handler. Executing manipulation of the argument PHP_SELF can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: -
lized. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327215 - https://vuldb.com/?ctiid.327215 - https://vuldb.com/?submit.664560 - https://github.com/tiancesec/CVE/issues/5
CVE ID: CVE-2025-11333 State: PUBLISHED Published: 2025-10-06T11:02:06.329Z Last Updated: 2025-10-06T11:50:28.693Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: langleyfcu Products: Online Banking System Problem Types: CWE-79, CWE-94 Description: A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customer_add_action.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. This product follows a r
te exploitation of the attack is possible. The exploit is publicly available and might be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327216 - https://vuldb.com/?ctiid.327216 - https://vuldb.com/?submit.664562 - https://github.com/mhszed/Report/blob/main/online-banking-system-mastercustomer_home.php%20xss1.docx
CVE ID: CVE-2025-11334 State: PUBLISHED Published: 2025-10-06T11:32:06.784Z Last Updated: 2025-10-06T11:49:29.335Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Apartment Visitor Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in Campcodes Online Apartment Visitor Management System 1.0. Affected is an unknown function of the file /visitor-detail.php. The manipulation of the argument editid results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327217 - https://vuldb.com/?ctiid.327217 - https://vuldb.com/?submit.664583 - https://github.com/melody27/cve/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-11335 State: PUBLISHED Published: 2025-10-06T12:32:09.515Z Last Updated: 2025-10-06T20:01:00.911Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DI-7100G C1 Problem Types: CWE-77, CWE-74 Description: A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub_46409C of the file /msp_info.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
t has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327218 - https://vuldb.com/?ctiid.327218 - https://vuldb.com/?submit.664597 - https://www.yuque.com/jh0ng/vmpda6/fpqlhpkb0orgseav - https://www.yuque.com/jh0ng/vmpda6/fpqlhpkb0orgseav#DOhrV - https://www.dlink.com/
CVE ID: CVE-2025-11336 State: PUBLISHED Published: 2025-10-06T13:02:05.806Z Last Updated: 2025-10-06T13:25:05.346Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: Four-Faith Products: Water Conservancy Informatization Platform Problem Types: CWE-22 Description: A security vulnerability has been detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. Affected by this issue is some unknown functionality of the file /stAlarmConfigure/index.do/../../aloneReport/download.do;otherlogout.do. Such manipulation of the argument fileName leads to path traversal. The attack may be performed from remote. The exploit has been disclosed p
the argument fileName leads to path traversal. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327219 - https://vuldb.com/?ctiid.327219 - https://vuldb.com/?submit.664612 - https://github.com/rookie1006/CVE/issues/1
CVE ID: CVE-2025-11337 State: PUBLISHED Published: 2025-10-06T13:32:06.133Z Last Updated: 2025-10-06T13:48:17.751Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: Four-Faith Products: Water Conservancy Informatization Platform Problem Types: CWE-22 Description: A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. This affects an unknown part of the file /aloneReport/index.do/../../aloneReport/download.do;othersusrlogout.do. Performing manipulation of the argument fileName results in path traversal. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor wa
path traversal. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327220 - https://vuldb.com/?ctiid.327220 - https://vuldb.com/?submit.664615 - https://github.com/jiangfeng13/CVE/issues/1
CVE ID: CVE-2025-11338 State: PUBLISHED Published: 2025-10-06T16:02:08.398Z Last Updated: 2025-10-06T17:16:48.402Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DI-7100G C1 Problem Types: CWE-120, CWE-119 Description: A flaw has been found in D-Link DI-7100G C1 up to 20250928. This vulnerability affects the function sub_4C0990 of the file /webchat/login.cgi of the component jhttpd. Executing manipulation of the argument openid can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327221 - ht
shed and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327221 - https://vuldb.com/?ctiid.327221 - https://vuldb.com/?submit.664619 - https://www.yuque.com/jh0ng/vmpda6/kggo2ngrcphzvwml - https://www.dlink.com/
CVE ID: CVE-2025-11339 State: PUBLISHED Published: 2025-10-06T16:32:09.380Z Last Updated: 2025-10-06T17:16:06.762Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DI-7100G C1 Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in D-Link DI-7100G C1 up to 20250928. This issue affects the function sub_4BD4F8 of the file /webchat/hi_block.asp of the component jhttpd. The manipulation of the argument popupId leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327222 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327222 - https://vuldb.com/?ctiid.327222 - https://vuldb.com/?submit.664635 - https://www.yuque.com/jh0ng/vmpda6/zr11zfssl8h74bn3 - https://www.yuque.com/jh0ng/vmpda6/zr11zfssl8h74bn3#Wjajr - https://www.dlink.com/
CVE ID: CVE-2025-11340 State: PUBLISHED Published: 2025-10-09T12:04:20.127Z Last Updated: 2025-10-09T13:43:00.365Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-863 Description: GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certain conditions, could have allowed authenticated users with read-only API tokens to perform unauthorized write operations on vulnerability records by exploiting incorrectly scoped GraphQL mutations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2025/10/08/patch-release-git
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2025/10/08/patch-release-gitlab-18-4-2-released/ - https://gitlab.com/gitlab-org/gitlab/-/issues/567847
CVE ID: CVE-2025-11341 State: PUBLISHED Published: 2025-10-06T17:02:05.698Z Last Updated: 2025-10-06T19:58:06.825Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Jinher Products: OA Problem Types: CWE-611, CWE-610 Description: A security flaw has been discovered in Jinher OA up to 2.0. This affects an unknown function of the file /c6/Jhsoft.Web.module/eformaspx/WebDesign.aspx/?type=SystemUserInfo&style=1. Performing manipulation results in xml external entity reference. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
sed to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327226 - https://vuldb.com/?ctiid.327226 - https://vuldb.com/?submit.664613 - https://github.com/rookie1006/CVE/issues/2
CVE ID: CVE-2025-11342 State: PUBLISHED Published: 2025-10-06T17:32:06.408Z Last Updated: 2025-10-06T19:57:13.571Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Course Registration Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in code-projects Online Course Registration 1.0. This impacts an unknown function of the file /admin/edit-course.php. Executing manipulation of the argument coursecode can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
ilable to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327227 - https://vuldb.com/?ctiid.327227 - https://vuldb.com/?submit.664823 - https://github.com/ttttbm123/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-11343 State: PUBLISHED Published: 2025-10-06T18:02:06.144Z Last Updated: 2025-10-06T18:27:29.292Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Student Crud Operation Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in code-projects Student Crud Operation 3.3. Affected is an unknown function of the file delete.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327228 - https://
nd may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327228 - https://vuldb.com/?ctiid.327228 - https://vuldb.com/?submit.664870 - https://github.com/romatdibrohiksnov/vulndb.com/blob/main/Student%20Crud%20Operation%20In%20PHP%20Unauthenticated%20SQL%20Injection%20allows%20mass%20deletion%20in%20delete.php.md - https://code-projects.org/
CVE ID: CVE-2025-11344 State: PUBLISHED Published: 2025-10-06T18:32:05.924Z Last Updated: 2025-10-07T10:04:33.324Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C) Vendors: n/a Products: ILIAS Problem Types: CWE-94, CWE-74 Description: A vulnerability was detected in ILIAS up to 8.23/9.13/10.1. Affected by this vulnerability is an unknown functionality of the component Certificate Import Handler. The manipulation results in Remote Code Execution. The attack may be performed from remote. Upgrading to version 8.24, 9.14 and 10.2 addresses this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327229 - https://vuldb.com/?ctiid.327229 - https://vuldb.com/?submit.664889 - https://docu.ilias.de/go/blog/15821/882
CVE ID: CVE-2025-11345 State: PUBLISHED Published: 2025-10-06T19:02:05.514Z Last Updated: 2025-10-06T19:35:49.946Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C) Vendors: n/a Products: ILIAS Problem Types: CWE-502, CWE-20 Description: A flaw has been found in ILIAS up to 8.23/9.13/10.1. Affected by this issue is the function unserialize of the component Test Import. This manipulation causes deserialization. It is possible to initiate the attack remotely. Upgrading to version 8.24, 9.14 and 10.2 can resolve this issue. Upgrading the affected component is advised. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327230 - https://vuldb.
advised. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327230 - https://vuldb.com/?ctiid.327230 - https://vuldb.com/?submit.664891 - https://docu.ilias.de/go/blog/15821/882
CVE ID: CVE-2025-11346 State: PUBLISHED Published: 2025-10-06T19:32:05.171Z Last Updated: 2025-10-06T19:43:16.138Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C) Vendors: n/a Products: ILIAS Problem Types: CWE-502, CWE-20 Description: A vulnerability has been found in ILIAS up to 8.23/9.13/10.1. This affects the function unserialize of the component Base64 Decoding Handler. Such manipulation of the argument f_settings leads to deserialization. It is possible to launch the attack remotely. Upgrading to version 8.24, 9.14 and 10.2 is able to mitigate this issue. It is advisable to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References
issue. It is advisable to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327231 - https://vuldb.com/?ctiid.327231 - https://vuldb.com/?submit.664892 - https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2113
CVE ID: CVE-2025-11347 State: PUBLISHED Published: 2025-10-07T02:48:36.596Z Last Updated: 2025-10-07T16:04:23.615Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Student Crud Operation Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in code-projects Student Crud Operation up to 3.3. This vulnerability affects the function move_uploaded_file of the file add.php of the component Add Student Page/Edit Student Page. Performing manipulation results in unrestricted upload. The attack can be initiated remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
emotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327232 - https://vuldb.com/?ctiid.327232 - https://vuldb.com/?submit.664897 - https://github.com/romatdibrohiksnov/vulndb.com/tree/main/Student-Registration-Crud-Operation%20Unauthenticated%20Arbitrary%20File%20Upload%20leads%20to%20Remote%20Code%20Execution - https://code-projects.org/