Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
indows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-190, CWE-122 Description: Integer overflow or wraparound in Windows SMB allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32718
CVE ID: CVE-2025-32719 State: PUBLISHED Published: 2025-06-10T17:02:13.413Z Last Updated: 2025-07-11T16:36:17.890Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wi
Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-125 Description: Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32719
CVE ID: CVE-2025-32720 State: PUBLISHED Published: 2025-06-10T17:02:14.043Z Last Updated: 2025-07-11T16:36:18.397Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wi
Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-125 Description: Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32720
CVE ID: CVE-2025-32721 State: PUBLISHED Published: 2025-06-10T17:02:14.644Z Last Updated: 2025-07-11T16:36:19.152Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wind
indows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-59 Description: Improper link resolution before file access ('link following') in Windows Recovery Driver allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32721
CVE ID: CVE-2025-32722 State: PUBLISHED Published: 2025-06-10T17:02:15.311Z Last Updated: 2025-07-11T16:36:19.758Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wi
Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-284 Description: Improper access control in Windows Storage Port Driver allows an authorized attacker to disclose information locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32722
CVE ID: CVE-2025-32724 State: PUBLISHED Published: 2025-06-10T17:02:15.866Z Last Updated: 2025-07-11T16:36:20.475Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wind
indows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-400 Description: Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorize
n: Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32724
CVE ID: CVE-2025-32725 State: PUBLISHED Published: 2025-06-10T17:02:30.084Z Last Updated: 2025-07-11T16:36:36.875Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2025 (Server Core installation), Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-693 Description: Protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Additional Analyst Notes: - CI
re in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32725
CVE ID: CVE-2025-32726 State: PUBLISHED Published: 2025-04-12T01:32:44.970Z Last Updated: 2025-06-04T17:53:35.018Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C) Vendors: Microsoft Products: Visual Studio Code Problem Types: CWE-284 Description: Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32726
CVE ID: CVE-2025-32728 State: PUBLISHED Published: 2025-04-10T00:00:00.000Z Last Updated: 2025-05-08T13:11:19.684Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: OpenBSD Products: OpenSSH Problem Types: CWE-440 Description: In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041879.html - https://www.openssh.com/txt/release-10.0 - https://github.com/openssh/openssh-portable/commit/fc86875e6acb36401dfc1dfb6b6
ttps://www.openssh.com/txt/release-10.0 - https://github.com/openssh/openssh-portable/commit/fc86875e6acb36401dfc1dfb6b628a9d1460f367 - https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/013_ssh.patch.sig - https://www.openssh.com/txt/release-7.4
CVE ID: CVE-2025-32730 State: PUBLISHED Published: 2025-04-24T06:38:06.606Z Last Updated: 2025-04-24T13:59:03.642Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: i-PRO Co., Ltd. Products: i-PRO Configuration Tool Problem Types: CWE-321 Description: Use of hard-coded cryptographic key vulnerability in i-PRO Configuration Tool affects the network system for i-PRO Co., Ltd. surveillance cameras and recorders. This vulnerability allows a local authenticated attacker to use the authentication information from the last connected surveillance cameras and recorders. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://i-pro.com/products_and_solu
eras and recorders. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://i-pro.com/products_and_solutions/en/surveillance/solutions/technologies/cyber-security/psirt/security-advisories - https://jvn.jp/en/jp/JVN84627857/
CVE ID: CVE-2025-32731 State: PUBLISHED Published: 2025-07-28T13:36:18.137Z Last Updated: 2025-11-03T19:53:37.817Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: MedDream Products: MedDream PACS Premium Problem Types: CWE-79 Description: A reflected cross-site scripting (xss) vulnerability exists in the radiationDoseReport.php functionality of meddream MedDream PACS Premium 7.3.5.860. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulne
ional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2176
CVE ID: CVE-2025-32732 State: PUBLISHED Published: 2025-11-11T16:51:08.578Z Last Updated: 2025-11-14T15:28:38.240Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: n/a Products: Intel(R) QAT Windows software Problem Types: Denial of Service, CWE-120 Description: Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no use
ially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html
CVE ID: CVE-2025-32738 State: PUBLISHED Published: 2025-05-15T08:48:19.734Z Last Updated: 2025-05-15T13:59:02.855Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: I-O DATA DEVICE, INC. Products: HDL-TC1, HDL-TC500, HDL-T1NV, HDL-T1WH, HDL-T2NV, HDL-T2WH, HDL-T3NV, HDL-T3WH Problem Types: CWE-306 Description: Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier. If exploited, a remote unauthenticated attacker may change the product settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.iodata.jp/support/information/2025/05_hdl-t/ - https://
nalyst Notes: - CISA ADP Vulnrichment: References: - https://www.iodata.jp/support/information/2025/05_hdl-t/ - https://jvn.jp/en/vu/JVNVU91726405/
CVE ID: CVE-2025-32743 State: PUBLISHED Published: 2025-04-10T00:00:00.000Z Last Updated: 2025-04-10T14:30:27.850Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: ConnMan Products: ConnMan Problem Types: CWE-392 Description: In ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c can be NULL or an empty string when the TC (Truncated) bit is set in a DNS response. This allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code, because those lookup values lead to incorrect length calculations and incorrect memcpy operations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.git
ations and incorrect memcpy operations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.git.kernel.org/pub/scm/network/connman/connman.git/tree/src/dnsproxy.c?h=1.44#n1688 - https://lapis-sawfish-be3.notion.site/0-click-Vulnerability-in-Comman-1-43_v3-1cadc00d01d080b0b3b9c46a6da584cc
CVE ID: CVE-2025-32744 State: PUBLISHED Published: 2025-07-21T16:25:49.033Z Last Updated: 2025-07-23T03:55:27.892Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: Dell Products: AppSync Problem Types: CWE-434 Description: Dell AppSync, version(s) 4.6.0.0, contains an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000345331/dsa-2025-277-security-update-for-dell-appsync-vulnerabilities
CVE ID: CVE-2025-32752 State: PUBLISHED Published: 2025-05-29T18:53:52.910Z Last Updated: 2025-06-12T16:34:16.735Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: Dell Products: ThinOS Problem Types: CWE-312 Description: Dell ThinOS 2502 and prior contain a Cleartext Storage of Sensitive Information vulnerability. A high privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000325632/dsa-2025-225
CVE ID: CVE-2025-32753 State: PUBLISHED Published: 2025-06-20T13:46:26.212Z Last Updated: 2025-06-20T14:25:41.495Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-89 Description: Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains an improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service, information disclosure, and information tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/k
d information tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000326339/dsa-2025-208-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE ID: CVE-2025-32754 State: PUBLISHED Published: 2025-04-10T11:20:29.928Z Last Updated: 2025-04-10T13:21:34.648Z Vendors: Jenkins Project Products: Jenkins jenkins/ssh-agent Docker images Description: In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH client (typically the Jenkins controller) and SSH build agent to impersonate the latter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/202
he latter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2025-04-10/#SECURITY-3565
CVE ID: CVE-2025-32755 State: PUBLISHED Published: 2025-04-10T11:21:31.212Z Last Updated: 2025-04-10T13:20:19.382Z Vendors: Jenkins Project Products: Jenkins jenkins/ssh-slave Docker images Description: In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH client (typically the Jenkins controller) and SSH build agent to impersonate the latter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2025-0
latter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2025-04-10/#SECURITY-3565
CVE ID: CVE-2025-32756 State: PUBLISHED Published: 2025-05-13T14:46:44.208Z Last Updated: 2025-10-21T22:55:16.319Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C) Vendors: Fortinet Products: FortiVoice, FortiRecorder, FortiMail, FortiNDR, FortiCamera Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiVoice versions 7.2.0, 7.0.0 through 7.0.6, 6.4.0 through 6.4.10, FortiRecorder versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.5, 6.4.0 through 6.4.5, FortiMail versions 7.6.0 through 7.6.2, 7.4.0 through 7.4.4, 7.2.0 through 7.2.7, 7.0.0 through 7.0.8, FortiNDR versions 7.6.0, 7.4.0 through 7.4.7, 7
gh 7.6.2, 7.4.0 through 7.4.4, 7.2.0 through 7.2.7, 7.0.0 through 7.0.8, FortiNDR versions 7.6.0, 7.4.0 through 7.4.7, 7.2.0 through 7.2.4, 7.0.0 through 7.0.6, FortiCamera versions 2.1.0 through 2.1.3, 2.0 all versions, 1.1 all versions, allows a remote unauthenticated attacker to execute arbitrary code or commands via sending HTTP requests with specially crafted hash cookie. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-25-254
CVE ID: CVE-2025-32757 State: REJECTED Published: N/A Last Updated: 2025-04-11T02:55:14.311Z Description: No description available.
CVE ID: CVE-2025-32758 State: REJECTED Published: N/A Last Updated: 2025-04-11T02:55:13.792Z Description: No description available.
CVE ID: CVE-2025-32759 State: REJECTED Published: N/A Last Updated: 2025-04-11T02:55:13.211Z Description: No description available.
CVE ID: CVE-2025-32760 State: REJECTED Published: N/A Last Updated: 2025-04-11T02:55:12.000Z Description: No description available.
CVE ID: CVE-2025-32761 State: REJECTED Published: N/A Last Updated: 2025-04-11T02:55:11.245Z Description: No description available.
CVE ID: CVE-2025-32762 State: REJECTED Published: N/A Last Updated: 2025-04-11T02:55:10.762Z Description: No description available.
CVE ID: CVE-2025-32763 State: REJECTED Published: N/A Last Updated: 2025-04-11T02:55:10.277Z Description: No description available.
CVE ID: CVE-2025-32764 State: REJECTED Published: N/A Last Updated: 2025-04-11T02:55:09.799Z Description: No description available.
CVE ID: CVE-2025-32765 State: REJECTED Published: N/A Last Updated: 2025-04-11T02:55:09.218Z Description: No description available.
CVE ID: CVE-2025-32766 State: PUBLISHED Published: 2025-08-12T18:59:16.692Z Last Updated: 2025-08-13T15:04:33.656Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C) Vendors: Fortinet Products: FortiWeb Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.4.8 allows a privileged attacker to execute arbitrary code or commands via crafted CLI commands Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-25-383
CVE ID: CVE-2025-32767 State: REJECTED Published: N/A Last Updated: 2025-04-11T02:55:08.758Z Description: No description available.
CVE ID: CVE-2025-32768 State: REJECTED Published: N/A Last Updated: 2025-04-11T02:55:08.279Z Description: No description available.
CVE ID: CVE-2025-32769 State: REJECTED Published: N/A Last Updated: 2025-04-11T02:55:07.782Z Description: No description available.
CVE ID: CVE-2025-32770 State: REJECTED Published: N/A Last Updated: 2025-04-11T02:55:07.242Z Description: No description available.
CVE ID: CVE-2025-32771 State: REJECTED Published: N/A Last Updated: 2025-04-11T02:55:06.704Z Description: No description available.
CVE ID: CVE-2025-32772 State: REJECTED Published: N/A Last Updated: 2025-04-11T02:55:06.083Z Description: No description available.
CVE ID: CVE-2025-32773 State: REJECTED Published: N/A Last Updated: 2025-04-11T02:55:05.565Z Description: No description available.
CVE ID: CVE-2025-32774 State: REJECTED Published: N/A Last Updated: 2025-04-11T02:55:04.981Z Description: No description available.
CVE ID: CVE-2025-32775 State: REJECTED Published: N/A Last Updated: 2025-04-11T02:55:04.315Z Description: No description available.
CVE ID: CVE-2025-32776 State: PUBLISHED Published: 2025-04-15T16:32:20.628Z Last Updated: 2025-11-03T19:53:39.183Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: openrazer Products: openrazer Problem Types: CWE-125 Description: OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. By writing specially crafted data to the `matrix_custom_frame` file, an attacker can cause the custom kernel driver to read more bytes than provided by user space. This data will be written into the RGB arguments which will be sent to the USB device. This issue has been patched in v3.10.2. Additional Analyst Note
the RGB arguments which will be sent to the USB device. This issue has been patched in v3.10.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/openrazer/openrazer/security/advisories/GHSA-835j-6976-46jx - https://github.com/openrazer/openrazer/issues/2433 - https://github.com/openrazer/openrazer/commit/57610511d2548eda66999eaed5aa4517e89d6d39 - https://github.com/openrazer/openrazer/commit/d869abd20995b4931795e1cde54d4ac84d9ca62f
CVE ID: CVE-2025-32777 State: PUBLISHED Published: 2025-04-30T18:27:16.929Z Last Updated: 2025-05-01T18:51:41.932Z Vendors: volcano-sh Products: volcano Problem Types: CWE-770 Description: Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege escalation, because Volcano users may run their Elastic service and extender plugins in separate pods or nodes from the scheduler. In the Kubernetes security model, node isolation is a security boundary, and as such an a