Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-4435 State: PUBLISHED Published: 2025-06-03T12:59:06.792Z Last Updated: 2025-07-07T17:36:13.968Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Python Software Foundation Products: CPython Description: When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still be extracted and not skipped. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/python/cpython/issues/135034 - https://github.com/python/cpython/pull/1350
ulnrichment: References: - https://github.com/python/cpython/issues/135034 - https://github.com/python/cpython/pull/135037 - https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/ - https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a - https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a - https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da - https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01 - https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9 - https://github.com/python/cpython/commit/4633
ithub.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9 - https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e - https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a - https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1
CVE ID: CVE-2025-4436 State: REJECTED Published: N/A Last Updated: 2025-05-20T22:16:04.785Z Description: No description available.
CVE ID: CVE-2025-4437 State: PUBLISHED Published: 2025-08-20T12:19:18.453Z Last Updated: 2025-11-20T20:49:02.529Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat OpenShift Container Platform 4 Problem Types: CWE-770 Description: There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent user, CRI-O attempts to create the user, reading the container's entire /etc/passwd file into memory. If this file is excessively large, it can cause the a high memory consumption leading applications to be killed due to out-of-memory. As a result a denial-of-service can
e a high memory consumption leading applications to be killed due to out-of-memory. As a result a denial-of-service can be achieved, possibly disrupting other pods and services running in the same host. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-4437 - https://bugzilla.redhat.com/show_bug.cgi?id=2375084
CVE ID: CVE-2025-4439 State: PUBLISHED Published: 2025-07-23T18:09:17.968Z Last Updated: 2025-07-25T03:55:23.550Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-79 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed an authenticated user to perform cross-site scripting attacks when the instance is served through certain content delivery networks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/541177 - https://hackerone.com/reports/312
ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/541177 - https://hackerone.com/reports/3120111
CVE ID: CVE-2025-4440 State: PUBLISHED Published: 2025-05-08T23:00:06.909Z Last Updated: 2025-05-09T04:01:57.100Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: H3C Products: GR-1800AX Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in H3C GR-1800AX up to 100R008 and classified as critical. Affected by this issue is the function EnableIpv6 of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308048 - https://vuldb.com/?ctiid.308048 - https://vuldb.com/?submit.557087 - https://github.com/CH13hh/tmp_store_cc/blob/main/H3C%20GR-1800AX/1.md
CVE ID: CVE-2025-4441 State: PUBLISHED Published: 2025-05-08T23:00:18.629Z Last Updated: 2025-05-09T04:00:55.603Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: D-Link Products: DIR-605L Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in D-Link DIR-605L 2.13B01. It has been classified as critical. This affects the function formSetWAN_Wizard534. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
ts products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308049 - https://vuldb.com/?ctiid.308049 - https://vuldb.com/?submit.558351 - https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir605l/Buffer_overflow-formSetWAN_Wizard534-curTime/README.md - https://www.dlink.com/
CVE ID: CVE-2025-4442 State: PUBLISHED Published: 2025-05-08T23:31:14.388Z Last Updated: 2025-05-09T03:59:38.525Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: D-Link Products: DIR-605L Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in D-Link DIR-605L 2.13B01. It has been declared as critical. This vulnerability affects the function formSetWAN_Wizard55. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
cts products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308050 - https://vuldb.com/?ctiid.308050 - https://vuldb.com/?submit.558352 - https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir605l/Buffer_overflow-formSetWAN_Wizard55-curTime/README.md - https://www.dlink.com/
CVE ID: CVE-2025-4443 State: PUBLISHED Published: 2025-05-08T23:31:26.235Z Last Updated: 2025-05-09T03:54:24.291Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DIR-605L Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in D-Link DIR-605L 2.13B01. It has been rated as critical. This issue affects the function sub_454F2C. The manipulation of the argument sysCmd leads to command injection. The attack may be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
re no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308051 - https://vuldb.com/?ctiid.308051 - https://vuldb.com/?submit.558355 - https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir605l/Command_injection-sub_454F2C-sysCmd/README.md - https://www.dlink.com/
CVE ID: CVE-2025-4444 State: PUBLISHED Published: 2025-09-18T13:58:52.524Z Last Updated: 2025-09-18T20:41:21.835Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C) Vendors: n/a Products: Tor Problem Types: CWE-400, CWE-404 Description: A security flaw has been discovered in Tor up to 0.4.7.16/0.4.8.17. Impacted is an unknown function of the component Onion Service Descriptor Handler. Performing manipulation results in resource consumption. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is considered difficult. Upgrading to version 0.4.8.18 and 0.4.9.3-alpha is recommended to address this issue. It is recomm
considered difficult. Upgrading to version 0.4.8.18 and 0.4.9.3-alpha is recommended to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324814 - https://vuldb.com/?ctiid.324814 - https://vuldb.com/?submit.640605 - https://github.com/chunmianwang/Tordos - https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.8/ReleaseNotes - https://forum.torproject.org/t/alpha-and-stable-release-0-4-8-18-and-0-4-9-3-alpha/20578
CVE ID: CVE-2025-4445 State: PUBLISHED Published: 2025-05-09T00:00:15.485Z Last Updated: 2025-05-09T03:52:32.258Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DIR-605L Problem Types: CWE-77, CWE-74 Description: A vulnerability classified as critical has been found in D-Link DIR-605L 2.13B01. Affected is the function wake_on_lan. The manipulation of the argument mac leads to command injection. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
o longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308052 - https://vuldb.com/?ctiid.308052 - https://vuldb.com/?submit.558356 - https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir605l/Command_injection-wake_on_lan-mac/README.md - https://www.dlink.com/
CVE ID: CVE-2025-4446 State: PUBLISHED Published: 2025-05-09T00:00:16.970Z Last Updated: 2025-05-09T03:50:23.507Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: H3C Products: GR-5400AX Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in H3C GR-5400AX up to 100R008 and classified as critical. This vulnerability affects the function Edit_List_SSID of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack needs to be approached within the local network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308056 - https://vuldb.com/?ctiid.308056 - https://vu
otes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308056 - https://vuldb.com/?ctiid.308056 - https://vuldb.com/?submit.561866 - https://github.com/CH13hh/tmp_store_cc/blob/main/H3C%20GB5400AX/5.md
CVE ID: CVE-2025-4447 State: PUBLISHED Published: 2025-05-09T20:40:25.953Z Last Updated: 2025-05-10T01:46:54.369Z Vendors: Eclipse Foundation Products: OpenJ9 Problem Types: CWE-121 Description: In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer overflow can be caused by modifying a file on disk that is read when the JVM starts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.eclipse.org/security/cve-assignement/-/issues/61 - https://github.com/eclipse-openj9/openj9/pull/21762
CVE ID: CVE-2025-4448 State: PUBLISHED Published: 2025-05-09T00:31:04.140Z Last Updated: 2025-05-09T03:48:39.143Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: D-Link Products: DIR-619L Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical was found in D-Link DIR-619L 2.04B04. This vulnerability affects the function formEasySetupWizard. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
s that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308062 - https://vuldb.com/?ctiid.308062 - https://vuldb.com/?submit.558357 - https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir619l/Buffer_overflow-formEasySetupWizard-curTime/README.md - https://www.dlink.com/
CVE ID: CVE-2025-4449 State: PUBLISHED Published: 2025-05-09T00:31:05.703Z Last Updated: 2025-05-09T15:37:02.843Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: D-Link Products: DIR-619L Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.04B04. This issue affects the function formEasySetupWizard3. The manipulation of the argument wan_connected leads to buffer overflow. The attack may be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308063 - https://vuldb.com/?ctiid.308063 - https://vuldb.com/?submit.558358 - https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir619l/Buffer_overflow-formEasySetupWizard3-wan_connected/README.md - https://www.dlink.com/
CVE ID: CVE-2025-4450 State: PUBLISHED Published: 2025-05-09T01:00:07.151Z Last Updated: 2025-05-09T15:37:21.275Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: D-Link Products: DIR-619L Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.04B04. Affected is the function formSetEasy_Wizard. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
ducts that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308064 - https://vuldb.com/?ctiid.308064 - https://vuldb.com/?submit.560792 - https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir619l/Buffer_overflow-formSetEasy_Wizard-curTime/README.md - https://www.dlink.com/
CVE ID: CVE-2025-4451 State: PUBLISHED Published: 2025-05-09T01:00:09.619Z Last Updated: 2025-05-09T03:46:47.370Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: D-Link Products: DIR-619L Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this vulnerability is the function formSetWAN_Wizard52. The manipulation of the argument curTime leads to buffer overflow. The attack can be launched remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308065 - https://vuldb.com/?ctiid.308065 - https://vuldb.com/?submit.560793 - https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir619l/Buffer_overflow-formSetWAN_Wizard52-curTime/README.md - https://www.dlink.com/
CVE ID: CVE-2025-4452 State: PUBLISHED Published: 2025-05-09T01:31:04.972Z Last Updated: 2025-05-09T03:44:49.921Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: D-Link Products: DIR-619L Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this issue is the function formSetWizard2. The manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
hat are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308066 - https://vuldb.com/?ctiid.308066 - https://vuldb.com/?submit.560795 - https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir619l/Buffer_overflow-formSetWizard2-curTime/README.md - https://www.dlink.com/
CVE ID: CVE-2025-4453 State: PUBLISHED Published: 2025-05-09T02:00:07.368Z Last Updated: 2025-05-09T03:37:26.539Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DIR-619L Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in D-Link DIR-619L 2.04B04. It has been classified as critical. This affects the function formSysCmd. The manipulation of the argument sysCmd leads to command injection. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
ts that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308067 - https://vuldb.com/?ctiid.308067 - https://vuldb.com/?submit.560797 - https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir619l/Command_injection-formSysCmd-sysCmd/README.md - https://www.dlink.com/
CVE ID: CVE-2025-4454 State: PUBLISHED Published: 2025-05-09T02:00:09.484Z Last Updated: 2025-05-09T03:35:50.687Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DIR-619L Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in D-Link DIR-619L 2.04B04. It has been declared as critical. This vulnerability affects the function wake_on_lan. The manipulation of the argument mac leads to command injection. The attack can be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
ts that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308068 - https://vuldb.com/?ctiid.308068 - https://vuldb.com/?submit.560798 - https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir619l/Command_injection-wake_on_lan-mac/README.md - https://www.dlink.com/
CVE ID: CVE-2025-4455 State: PUBLISHED Published: 2025-05-09T02:31:04.290Z Last Updated: 2025-05-09T03:33:59.816Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Patch My PC Products: Home Updater Problem Types: CWE-427, CWE-426 Description: A vulnerability was found in Patch My PC Home Updater up to 5.1.3.0. It has been rated as critical. This issue affects some unknown processing in the library advapi32.dll/BCrypt.dll/comctl32.dll/crypt32.dll/dwmapi.dll/gdi32.dll/gdiplus.dll/imm32.dll/iphlpapi.dll/kernel32.dll/mscms.dll/msctf.dll/ntdll.dll/ole32.dll/oleaut32.dll/PresentationNative_cor3.dll/secur32.dll/shcore.dll/shell32.dll/sspicli.dll/System.IO. The manipulat
e32.dll/oleaut32.dll/PresentationNative_cor3.dll/secur32.dll/shcore.dll/shell32.dll/sspicli.dll/System.IO. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308069 - https://vuldb.com/?ctiid.308069 - https://vuldb.com/?submit.562440 - https://gist.github.com/shellkraft/d7db265b53115d52a4ca5bffe5e9c6e4
CVE ID: CVE-2025-4456 State: PUBLISHED Published: 2025-05-09T03:00:06.099Z Last Updated: 2025-05-09T03:30:40.804Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Project Worlds Products: Car Rental Project Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308070 - https://vuldb.com/?ctiid.308070 - https://vuldb.com/?submit.565441 - https://github.com/3507998897/myCVE/issues/7
CVE ID: CVE-2025-4457 State: PUBLISHED Published: 2025-05-09T03:00:07.953Z Last Updated: 2025-05-09T03:29:20.193Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Project Worlds Products: Car Rental Project Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308071 - h
ublic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308071 - https://vuldb.com/?ctiid.308071 - https://vuldb.com/?submit.565445 - https://github.com/3507998897/myCVE/issues/8
CVE ID: CVE-2025-4458 State: PUBLISHED Published: 2025-05-09T03:31:05.033Z Last Updated: 2025-05-09T13:55:47.601Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /edit_upatient.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
e exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308077 - https://vuldb.com/?ctiid.308077 - https://vuldb.com/?submit.565463 - https://github.com/ABC-YOLO/cve/blob/main/cve2.md - https://code-projects.org/
CVE ID: CVE-2025-4459 State: PUBLISHED Published: 2025-05-09T04:00:05.837Z Last Updated: 2025-05-09T13:28:15.078Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file fecalysis_form.php. The manipulation of the argument itr_no leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
loit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308078 - https://vuldb.com/?ctiid.308078 - https://vuldb.com/?submit.565464 - https://github.com/ABC-YOLO/cve/blob/main/cve3.md - https://code-projects.org/