Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-0593 State: PUBLISHED Published: 2025-02-14T20:18:42.184Z Last Updated: 2025-02-14T21:59:58.197Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SICK AG Products: SICK Lector8xx, SICK InspectorP8xx Problem Types: CWE-77 Description: The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by using lower-level functions to interact with the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://sick.com/psirt - https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF - https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
mation_CYBERSECURITY_BY_SICK_en_IM0084411.PDF - https://www.cisa.gov/resources-tools/resources/ics-recommended-practices - https://www.first.org/cvss/calculator/3.1 - https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0002.pdf - https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0002.json
CVE ID: CVE-2025-0595 State: PUBLISHED Published: 2025-03-17T13:47:10.467Z Last Updated: 2025-03-17T16:31:40.273Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: 3DSwymer Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-0596 State: PUBLISHED Published: 2025-03-17T13:47:37.908Z Last Updated: 2025-03-17T16:31:16.967Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: ENOVIA Collaborative Industry Innovator Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-0598 State: PUBLISHED Published: 2025-03-17T13:48:13.773Z Last Updated: 2025-03-17T16:30:48.075Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: ENOVIA Collaborative Industry Innovator Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting Relations in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-0599 State: PUBLISHED Published: 2025-03-17T13:49:03.861Z Last Updated: 2025-03-17T14:16:16.303Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: ENOVIA Collaborative Industry Innovator Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-0600 State: PUBLISHED Published: 2025-03-17T13:49:26.468Z Last Updated: 2025-03-17T14:15:14.506Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: ENOVIA Collaborative Industry Innovator Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-0601 State: PUBLISHED Published: 2025-03-17T13:49:31.605Z Last Updated: 2025-03-17T14:13:25.452Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: ENOVIA Collaborative Industry Innovator Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-0602 State: PUBLISHED Published: 2025-05-30T14:19:49.945Z Last Updated: 2025-05-30T21:59:29.518Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: Collaborative Industry Innovator Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting Compare in Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-0603 State: PUBLISHED Published: 2025-10-07T11:43:34.206Z Last Updated: 2025-10-07T14:23:51.917Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Callvision Healthcare Products: Callvision Emergency Code Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Callvision Healthcare Callvision Emergency Code allows SQL Injection, Blind SQL Injection.This issue affects Callvision Emergency Code: before V3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0320
CVE ID: CVE-2025-0604 State: PUBLISHED Published: 2025-01-22T14:34:45.923Z Last Updated: 2025-11-20T19:59:49.418Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Red Hat Products: Red Hat Build of Keycloak, Red Hat build of Keycloak 26.0, Red Hat Single Sign-On 7 Problem Types: CWE-287 Description: A flaw was found in Keycloak. When an Active Directory user resets their password, the system updates it without performing an LDAP bind to validate the new credentials against AD. This vulnerability allows users whose AD accounts are expired or disabled to regain access in Keycloak, bypassing AD restrictions. The issue enables authentication bypass and could allo
disabled to regain access in Keycloak, bypassing AD restrictions. The issue enables authentication bypass and could allow unauthorized access under certain conditions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:2544 - https://access.redhat.com/errata/RHSA-2025:2545 - https://access.redhat.com/security/cve/CVE-2025-0604 - https://bugzilla.redhat.com/show_bug.cgi?id=2338993
CVE ID: CVE-2025-0605 State: PUBLISHED Published: 2025-05-22T14:31:54.105Z Last Updated: 2025-05-22T14:45:03.172Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-1390 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Group access controls could allow certain users to bypass two-factor authentication requirements. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/514204 - https://hackerone.com/reports/2919391
CVE ID: CVE-2025-0606 State: PUBLISHED Published: 2025-10-06T09:10:29.759Z Last Updated: 2025-10-06T13:18:14.549Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L) Vendors: Logo Software Inc. Products: Logo Cloud Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in Logo Software Inc. Logo Cloud allows Forceful Browsing, Resource Leak Exposure.This issue affects Logo Cloud: before 0.67. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0318
CVE ID: CVE-2025-0607 State: PUBLISHED Published: 2025-10-06T09:14:57.495Z Last Updated: 2025-10-06T14:53:33.310Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Logo Software Inc. Products: Logo Cloud Problem Types: CWE-116 Description: Improper Encoding or Escaping of Output vulnerability in Logo Software Inc. Logo Cloud allows Phishing.This issue affects Logo Cloud: before 2.57. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0318
CVE ID: CVE-2025-0608 State: PUBLISHED Published: 2025-10-06T09:18:31.439Z Last Updated: 2025-10-06T12:59:48.721Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Logo Software Inc. Products: Logo Cloud Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Logo Software Inc. Logo Cloud allows Phishing, Forceful Browsing.This issue affects Logo Cloud: before 2025.R6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0318
CVE ID: CVE-2025-0609 State: PUBLISHED Published: 2025-10-06T09:21:45.354Z Last Updated: 2025-10-06T12:51:43.199Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Logo Software Inc. Products: Logo Cloud Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Logo Software Inc. Logo Cloud allows Cross-Site Scripting (XSS).This issue affects Logo Cloud: before 1.18. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0318
CVE ID: CVE-2025-0610 State: PUBLISHED Published: 2025-09-01T12:44:34.614Z Last Updated: 2025-09-02T19:14:07.383Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Akınsoft Products: QR Menü Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request Forgery.This issue affects QR Menü: from s1.05.06 before v1.05.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0202
CVE ID: CVE-2025-0611 State: PUBLISHED Published: 2025-01-22T19:22:36.353Z Last Updated: 2025-02-06T21:28:35.737Z Vendors: Google Products: Chrome Problem Types: Object corruption Description: Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_22.html - https://issues.chromium.org/issues/386143468
CVE ID: CVE-2025-0612 State: PUBLISHED Published: 2025-01-22T19:22:37.153Z Last Updated: 2025-02-04T18:50:43.490Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_22.html - https://issues.chromium.org/issues/385155406
CVE ID: CVE-2025-0613 State: PUBLISHED Published: 2025-03-31T06:00:01.529Z Last Updated: 2025-03-31T14:59:55.246Z Vendors: Unknown Products: Photo Gallery by 10Web Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Photo Gallery by 10Web WordPress plugin before 1.8.34 does not sanitised and escaped comment added on images by unauthenticated users, leading to an Unauthenticated Stored-XSS attack when comments are displayed Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/22be2b44-cd42-4b02-8448-59dd2989dde1/
CVE ID: CVE-2025-0614 State: PUBLISHED Published: 2025-01-21T11:43:41.851Z Last Updated: 2025-01-21T14:46:34.186Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Qualifio Products: Wheel of fortune Problem Types: CWE-22 Description: Input validation vulnerability in Qualifio's Wheel of Fortune. This vulnerability could allow an attacker to modify a single email to contain upper and lower case characters in order to access the application and win prizes as many times as wanted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-qualifios-wheel-fortune
CVE ID: CVE-2025-0615 State: PUBLISHED Published: 2025-01-21T11:44:51.027Z Last Updated: 2025-01-21T14:45:26.167Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Qualifio Products: Wheel of fortune Problem Types: CWE-22 Description: Input validation vulnerability in Qualifio's Wheel of Fortune. This vulnerability allows an attacker to modify an email to contain the ‘+’ symbol to access the application and win prizes as many times as wanted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-qualifios-wheel-fortune
CVE ID: CVE-2025-0616 State: PUBLISHED Published: 2025-10-03T08:05:08.511Z Last Updated: 2025-10-03T15:55:41.245Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: Teknolojik Center Telecommunication Industry Trade Co. Ltd. Products: B2B - Netsis Panel Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Teknolojik Center Telecommunication Industry Trade Co. Ltd. B2B - Netsis Panel allows SQL Injection.This issue affects B2B - Netsis Panel: through 20251003. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0311
CVE ID: CVE-2025-0617 State: PUBLISHED Published: 2025-01-29T10:08:29.476Z Last Updated: 2025-02-12T19:51:14.817Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Trellix Products: Trellix HX Console Problem Types: CWE-776 Description: An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The malicious detection would then trigger file parsing containing exponential entity expansions in the consumer process thus causing a Denial of Service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://thrive.trellix.com/s/article/000014214
CVE ID: CVE-2025-0618 State: PUBLISHED Published: 2025-04-23T06:15:20.536Z Last Updated: 2025-04-23T13:02:16.433Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Trellix Products: FireEye EDR HX Problem Types: CWE-94 Description: A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamper protection event to the HX service to trigger an exception. This exception will prevent any further tamper protection events from being processed, even after a reboot of HX. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://thrive.trellix.com/s/article/000014456
CVE ID: CVE-2025-0619 State: PUBLISHED Published: 2025-01-23T11:07:10.295Z Last Updated: 2025-02-12T20:41:24.465Z Vendors: M-Files Corporation Products: M-Files Server Problem Types: CWE-522 Description: Unsafe password recovery from configuration in M-Files Server before 25.1 allows a highly privileged user to recover external connector passwords Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://product.m-files.com/security-advisories/cve-2025-0619/
CVE ID: CVE-2025-0620 State: PUBLISHED Published: 2025-06-06T13:10:07.110Z Last Updated: 2025-11-20T19:59:52.662Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-552 Description: A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again. Additional Analyst Notes: - CVE Program Contain
can expose file shares until clients disconnect and then connect again. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-0620 - https://bugzilla.redhat.com/show_bug.cgi?id=2370453 - https://www.samba.org/samba/security/CVE-2025-0620.html
CVE ID: CVE-2025-0622 State: PUBLISHED Published: 2025-02-18T19:26:13.082Z Last Updated: 2025-11-06T23:18:55.454Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat OpenShift Container Platform 4 Problem Types: CWE-416 Description: A flaw was found in command/gpg. In some scenarios, hooks created by loaded modules are not removed when the related module is unloaded. This flaw allows an attacker to force grub2 to call the hooks once the module that registered it was unloaded, leading to a use-after-free vulnerability. If corr
b2 to call the hooks once the module that registered it was unloaded, leading to a use-after-free vulnerability. If correctly exploited, this vulnerability may result in arbitrary code execution, eventually allowing the attacker to bypass secure boot protections. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:16154 - https://access.redhat.com/errata/RHSA-2025:6990 - https://access.redhat.com/security/cve/CVE-2025-0622 - https://bugzilla.redhat.com/show_bug.cgi?id=2345865
CVE ID: CVE-2025-0623 State: REJECTED Published: N/A Last Updated: 2025-01-21T16:39:01.016Z Description: No description available.
CVE ID: CVE-2025-0624 State: PUBLISHED Published: 2025-02-19T18:23:21.463Z Last Updated: 2025-11-24T19:53:36.506Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterpris
anced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat OpenShift Container Platform 4.16, Red Hat OpenShift Container Platform 4.17, Red Hat OpenShift Con
atform 4.15, Red Hat OpenShift Container Platform 4.16, Red Hat OpenShift Container Platform 4.17, Red Hat OpenShift Container Platform 4.18, Red Hat Enterprise Linux 10 Problem Types: CWE-787 Description: A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user controlled environment variable into an internal buffer using the grub_strcpy() function. During this step, it fails to consider the environment variable length when allocating the internal buffer, resulting in an out-of-bounds write. If correctly exploited, this issue may result in remote code execution through the same network segment grub is searchin
If correctly exploited, this issue may result in remote code execution through the same network segment grub is searching for the boot information, which can be used to by-pass secure boot protections. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:2521 - https://access.redhat.com/errata/RHSA-2025:2653 - https://access.redhat.com/errata/RHSA-2025:2655 - https://access.redhat.com/errata/RHSA-2025:2675 - https://access.redhat.com/errata/RHSA-2025:2784 - https://access.redhat.com/errata/RHSA-2025:2799 - https://access.redhat.com/errata/RHSA-2025:2867 - https://access.redhat.com/errata/RHSA-2025:2869 - https://
2025:2799 - https://access.redhat.com/errata/RHSA-2025:2867 - https://access.redhat.com/errata/RHSA-2025:2869 - https://access.redhat.com/errata/RHSA-2025:3297 - https://access.redhat.com/errata/RHSA-2025:3301 - https://access.redhat.com/errata/RHSA-2025:3367 - https://access.redhat.com/errata/RHSA-2025:3396 - https://access.redhat.com/errata/RHSA-2025:3573 - https://access.redhat.com/errata/RHSA-2025:3577 - https://access.redhat.com/errata/RHSA-2025:3780 - https://access.redhat.com/errata/RHSA-2025:4422 - https://access.redhat.com/errata/RHSA-2025:7702 - https://access.redhat.com/security/cve/CVE-2025-0624 - https://bugzilla.redhat.com/show_bug.cgi?id=2346112
CVE ID: CVE-2025-0625 State: PUBLISHED Published: 2025-01-22T00:31:05.739Z Last Updated: 2025-01-22T18:31:40.025Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: CampCodes Products: School Management Software Problem Types: CWE-99 Description: A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0. This affects an unknown part of the component Attachment Handler. The manipulation leads to improper control of resource identifiers. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public a
of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292737 - https://vuldb.com/?ctiid.292737 - https://vuldb.com/?submit.484917 - https://github.com/KhukuriRimal/Vulnerabilities/blob/main/Insecure%20Direct%20Object%20Reference%20(IDOR)%20-%20All%20Student%20Homework%20Downloadable.pdf - https://www.campcodes.com/
CVE ID: CVE-2025-0626 State: PUBLISHED Published: 2025-01-30T18:17:29.717Z Last Updated: 2025-03-01T17:12:24.132Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Contec Health Products: CMS8000 Patient Monitor Problem Types: CWE-912 Description: The "monitor" binary in the firmware of the affected product attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so. The function also enables the network interface of the device if it is disabled. The function is triggered by attempting to update the device from the user menu. This could serve as a backdoor to the device, and could lead to a malicious actor being ab