Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-27678 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:46:11.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Client Remote Code Execution V-2023-001. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27679 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:46:13.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross-Site Scripting in Badge Registration V-2023-005. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27680 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:46:14.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.750 Application 20.0.1442 allows Insecure Firmware Image with Insufficient Verification of Data Authenticity V-2024-004. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27681 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:46:16.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 mishandles Client Inter-process Security V-2022-004. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27682 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:46:17.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Insecure Log Permissions V-2022-005. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27683 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:46:18.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Driver Unrestricted Upload of File with Dangerous Type V-2022-006. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27684 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:46:20.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Debug Bundle Contains Sensitive Data V-2022-003. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27685 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:46:21.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Configuration File Contains CA & Private Key V-2022-001. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27686 State: PUBLISHED Published: 2025-04-07T13:23:08.166Z Last Updated: 2025-04-07T13:58:27.666Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: Dell Products: Unisphere for PowerMax Problem Types: CWE-90 Description: Dell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/suppo
leading to Script injection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-ao/000302223/dsa-2025-111-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtual-appliance-dell-unisphere-360-dell-solutions-enabler-and-dell-solutions-enabler-virtual-appliance-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2025-27688 State: PUBLISHED Published: 2025-03-18T15:55:44.470Z Last Updated: 2025-03-19T03:55:50.783Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Wyse Proprietary OS (Modern ThinOS) Problem Types: CWE-732 Description: Dell ThinOS 2408 and prior, contains an improper permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000289886/dsa-2025-107
CVE ID: CVE-2025-27689 State: PUBLISHED Published: 2025-06-12T20:36:24.943Z Last Updated: 2025-06-14T03:56:24.614Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: iDRAC Tools Problem Types: CWE-284 Description: Dell iDRAC Tools, version(s) prior to 11.3.0.0, contain(s) an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000323242/dsa-2025-169-security-update-for-dell-idrac-tools-vulnerabilities
CVE ID: CVE-2025-27690 State: PUBLISHED Published: 2025-04-10T02:04:43.949Z Last Updated: 2025-04-11T03:55:24.269Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-1393 Description: Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to the takeover of a high privileged user account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000300860/dsa-2025-119-security-update-for-dell-powerscale-onefs-f
eferences: - https://www.dell.com/support/kbdoc/en-us/000300860/dsa-2025-119-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE ID: CVE-2025-27692 State: PUBLISHED Published: 2025-04-02T00:24:44.123Z Last Updated: 2025-04-10T14:30:35.940Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Dell Products: Wyse Management Suite Repository Problem Types: CWE-434 Description: Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000296515/dsa-20
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000296515/dsa-2025-135
CVE ID: CVE-2025-27693 State: PUBLISHED Published: 2025-04-02T00:19:55.827Z Last Updated: 2025-04-02T13:24:36.590Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-79 Description: Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000296515/dsa-2025-135
CVE ID: CVE-2025-27694 State: PUBLISHED Published: 2025-04-02T00:12:16.032Z Last Updated: 2025-04-02T13:24:43.503Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-410 Description: Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insufficient Resource Pool vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000296515/dsa-2025-135
CVE ID: CVE-2025-27695 State: PUBLISHED Published: 2025-05-08T19:06:42.090Z Last Updated: 2025-05-08T19:16:17.939Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-290 Description: Dell Wyse Management Suite, versions prior to WMS 5.1 contain an Authentication Bypass by Spoofing vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000296515/dsa-2025-135
CVE ID: CVE-2025-27696 State: PUBLISHED Published: 2025-05-13T08:21:21.199Z Last Updated: 2025-09-01T09:52:53.293Z Vendors: Apache Software Foundation Products: Apache Superset Problem Types: CWE-863 Description: Incorrect Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authenticated users with read permissions. This issue affects Apache Superset: through 4.1.1. Users are recommended to upgrade to version 4.1.2 or above, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/k2od03bxnxs6vcp80sr03ywcxl194413
CVE ID: CVE-2025-27700 State: PUBLISHED Published: 2025-05-27T15:41:52.015Z Last Updated: 2025-09-04T05:15:33.572Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: There is a possible bypass of carrier restrictions due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2025-05-01
CVE ID: CVE-2025-27701 State: PUBLISHED Published: 2025-05-27T15:42:11.318Z Last Updated: 2025-09-04T05:15:46.435Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In the function process_crypto_cmd, the values of ptrs[i] can be potentially equal to NULL which is valid value after calling slice_map_array(). Later this values will be derefenced without prior NULL check, which can lead to local Temporary DoS or OOB Read, leading to information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2025-05-01
CVE ID: CVE-2025-27702 State: PUBLISHED Published: 2025-05-28T20:42:34.657Z Last Updated: 2025-05-28T23:54:02.125Z Vendors: Absolute Security Products: Secure Access Description: CVE-2025-27702 is a vulnerability in the management console of Absolute Secure Access prior to version 13.54. Attackers with administrative access to the console and who have been assigned a certain set of permissions can bypass those permissions to improperly modify settings. The attack complexity is low, there are no preexisting attack requirements; the privileges required are high, and there is no user interaction required. There is no impact to system confidentiality or availability, impact to system integrity i
no user interaction required. There is no impact to system confidentiality or availability, impact to system integrity is high. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.absolute.com/platform/vulnerability-archive/cve-2025-27702
CVE ID: CVE-2025-27703 State: PUBLISHED Published: 2025-05-28T20:56:53.459Z Last Updated: 2025-05-28T23:57:51.968Z Vendors: Absolute Security Products: Secure Access Description: CVE-2025-27703 is a privilege escalation vulnerability in the management console of Absolute Secure Access prior to version 13.54. Attackers with administrative access to a specific subset of privileged features in the console can elevate their permissions to access additional features in the console. The attack complexity is low, there are no preexisting attack requirements; the privileges required are high, and there is no user interaction required. The impact to system confidentiality is low, the impact to system
d are high, and there is no user interaction required. The impact to system confidentiality is low, the impact to system integrity is high and the impact to system availability is low. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.absolute.com/platform/vulnerability-archive/cve-2025-27703
CVE ID: CVE-2025-27704 State: PUBLISHED Published: 2025-03-19T19:08:26.262Z Last Updated: 2025-04-03T13:06:17.528Z Vendors: Absolute Security Products: Secure Access Problem Types: CWE-79 Description: There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. Attackers with system administrator permissions can interfere with another system administrator’s use of the management console when the second administrator logs in. Attack complexity is high, attack requirements are present, privileges required are none, user interaction is required. The impact to confidentiality is low, the impact to availability is none
equired are none, user interaction is required. The impact to confidentiality is low, the impact to availability is none, and the impact to system integrity is none. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.absolute.com/platform/security-information/vulnerability-archive/secure-access-1353/
CVE ID: CVE-2025-27705 State: PUBLISHED Published: 2025-03-19T19:15:08.265Z Last Updated: 2025-03-19T20:06:42.594Z Vendors: Absolute Security Products: Secure Access Problem Types: CWE-79 Description: There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. Attackers with system administrator permissions can interfere with another system administrator’s use of the management console when the second administrator logs in. Attack complexity is high, attack requirements are present, privileges required are none, user interaction is required. The impact to confidentiality is low, the impact to availability is none
CVE ID: CVE-2025-27706 State: PUBLISHED Published: 2025-05-28T21:01:08.548Z Last Updated: 2025-05-28T23:55:03.442Z Vendors: Absolute Security Products: Secure Access Description: CVE-2025-27706 is a cross-site scripting vulnerability in the management console of Absolute Secure Access prior to version 13.54. Attackers with system administrator permissions can interfere with another system administrator’s use of the management console when the second administrator visits the page. Attack complexity is low, there are no preexisting attack requirements, privileges required are high and active user interaction is required. There is no impact on confidentiality, the impact on integrity is low and
high and active user interaction is required. There is no impact on confidentiality, the impact on integrity is low and there is no impact on availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.absolute.com/platform/vulnerability-archive/cve-2025-27706
CVE ID: CVE-2025-27707 State: PUBLISHED Published: 2025-08-12T16:59:33.769Z Last Updated: 2025-08-13T20:15:00.545Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Edge Orchestrator software Problem Types: Denial of Service, CWE-200 Description: Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01317.html
CVE ID: CVE-2025-27709 State: PUBLISHED Published: 2025-06-09T11:04:38.114Z Last Updated: 2025-06-09T15:39:11.883Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: ADAudit Plus Problem Types: CWE-89 Description: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/active-directory-audit/cve-2025-27709.html
CVE ID: CVE-2025-27710 State: PUBLISHED Published: 2025-11-11T16:50:22.300Z Last Updated: 2025-11-12T20:00:22.966Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) QAT Windows software Problem Types: Information Disclosure, CWE-822 Description: Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal know
his result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html
CVE ID: CVE-2025-27711 State: PUBLISHED Published: 2025-11-11T16:50:24.723Z Last Updated: 2025-11-14T17:37:52.472Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) One Boot Flash Update (Intel(R) OFU) software Problem Types: Escalation of Privilege, CWE-276 Description: Incorrect default permissions for some Intel(R) One Boot Flash Update (Intel(R) OFU) software before version 14.1.31 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access
ed with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01331.html
CVE ID: CVE-2025-27712 State: PUBLISHED Published: 2025-11-11T16:50:26.475Z Last Updated: 2025-11-14T17:37:29.150Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) Neural Compressor software Problem Types: Escalation of Privilege, CWE-707 Description: Improper neutralization for some Intel(R) Neural Compressor software before version v3.4 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without
lation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01365.html
CVE ID: CVE-2025-27713 State: PUBLISHED Published: 2025-11-11T16:50:28.055Z Last Updated: 2025-11-13T04:55:24.750Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) QAT Windows software Problem Types: Escalation of Privilege, CWE-787 Description: Out-of-bounds write for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal kno
This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html
CVE ID: CVE-2025-27714 State: PUBLISHED Published: 2025-08-21T19:42:59.699Z Last Updated: 2025-08-21T20:08:59.493Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: INFINITT Healthcare Products: INFINITT PACS System Manager Problem Types: CWE-434 Description: An attacker could exploit this vulnerability by uploading arbitrary files via the a specific endpoint, leading to unauthorized remote code execution or system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-100-01