Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-32383 State: PUBLISHED Published: 2025-04-10T13:07:12.404Z Last Updated: 2025-04-10T13:35:56.129Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: 1Panel-dev Products: MaxKB Problem Types: CWE-94 Description: MaxKB (Max Knowledge Base) is an open source knowledge base question-answering system based on a large language model and retrieval-augmented generation (RAG). A reverse shell vulnerability exists in the module of function library. The vulnerability allow privileged‌ users to create a reverse shell. This vulnerability is fixed in v1.10.4-lts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/1Panel-dev/M
s fixed in v1.10.4-lts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-fjf6-6cvf-xr72 - https://github.com/1Panel-dev/MaxKB/commit/4ae02c8d3eb65542c88ef58c0abd94c52c949d8f
CVE ID: CVE-2025-32385 State: PUBLISHED Published: 2025-04-15T23:23:58.292Z Last Updated: 2025-04-17T14:23:10.191Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: espocrm Products: espocrm Problem Types: CWE-1021 Description: EspoCRM is an Open Source Customer Relationship Management software. Prior to 9.0.5, Iframe dashlet allows user to display iframes with arbitrary URLs. As the sandbox attribute is not included in the iframe, the remote page can open popups outside of the iframe, potentially tricking users and creating a phishing risk. The iframe URL is user-defined, so an attacker would need to trick the user into specifying a malicious URL. The missing
The iframe URL is user-defined, so an attacker would need to trick the user into specifying a malicious URL. The missing sandbox attribute also allows the remote page to send messages to the parent frame. However, EspoCRM does not make use of these messages. This vulnerability is fixed in 9.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/espocrm/espocrm/security/advisories/GHSA-2rf2-mj98-2fr8
CVE ID: CVE-2025-32386 State: PUBLISHED Published: 2025-04-09T22:28:44.142Z Last Updated: 2025-04-10T13:39:53.113Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: helm Products: helm Problem Types: CWE-789, CWE-770 Description: Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed (e.g., >800x difference). When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issue has been resolved in Helm v3.17.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/helm/helm/securit
d in Helm v3.17.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/helm/helm/security/advisories/GHSA-4hfp-h4cw-hj8p - https://github.com/helm/helm/commit/d8ca55fc669645c10c0681d49723f4bb8c0b1ce7
CVE ID: CVE-2025-32387 State: PUBLISHED Published: 2025-04-09T22:28:33.476Z Last Updated: 2025-04-10T14:58:47.796Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: helm Products: helm Problem Types: CWE-121, CWE-674 Description: Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack overflow. This issue has been resolved in Helm v3.17.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/helm/helm/security/advisories/GHSA-5xqw-8hwv-wg92 - https://github.co
ADP Vulnrichment: References: - https://github.com/helm/helm/security/advisories/GHSA-5xqw-8hwv-wg92 - https://github.com/helm/helm/commit/d8ca55fc669645c10c0681d49723f4bb8c0b1ce7
CVE ID: CVE-2025-32388 State: PUBLISHED Published: 2025-04-15T22:32:06.059Z Last Updated: 2025-04-16T13:33:47.383Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: sveltejs Products: kit Problem Types: CWE-79 Description: SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.20.6 , unsanitized search param names cause XSS vulnerability. You are affected if you iterate over all entries of event.url.searchParams inside a server load function. Attackers can exploit it by crafting a malicious URL and getting a user to click a link with said URL. This vulnerability is fixed in 2.20.6. Additional Analyst Notes:
s URL and getting a user to click a link with said URL. This vulnerability is fixed in 2.20.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sveltejs/kit/security/advisories/GHSA-6q87-84jw-cjhp - https://github.com/sveltejs/kit/commit/d3300c6a67908590266c363dba7b0835d9a194cf - https://github.com/sveltejs/kit/releases/tag/%40sveltejs%2Fkit%402.20.6
CVE ID: CVE-2025-32389 State: PUBLISHED Published: 2025-04-18T15:56:39.962Z Last Updated: 2025-04-18T16:24:24.300Z Vendors: NamelessMC Products: Nameless Problem Types: CWE-89 Description: NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Prior to version 2.1.4, NamelessMC is vulnerable to SQL injection by providing an unexpected square bracket GET parameter syntax. Square bracket GET parameter syntax refers to the structure `?param[0]=a&param[1]=b&param[2]=c` utilized by PHP, which is parsed by PHP as `$_GET['param']` being of type array. This issue has been patched in version 2.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
This issue has been patched in version 2.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/NamelessMC/Nameless/security/advisories/GHSA-5984-mhcp-cq2x - https://github.com/NamelessMC/Nameless/commit/02c81c7c45b98fad1ebe3bc085efae18aec4566f - https://github.com/NamelessMC/Nameless/releases/tag/v2.1.4
CVE ID: CVE-2025-32390 State: PUBLISHED Published: 2025-05-12T10:30:52.179Z Last Updated: 2025-05-12T12:39:09.869Z Vendors: espocrm Products: espocrm Problem Types: CWE-74 Description: EspoCRM is a free, open-source customer relationship management platform. Prior to version 9.0.8, HTML Injection in Knowledge Base (KB) articles leads to complete page defacement imitating the login page. Authenticated users with the read knowledge article privilege can browse to the KB article and if they submit their credentials, they get captured in plain text. The vulnerability is allowed by overly permissive HTML editing being allowed on the KB articles. Any authenticated user with the privilege to read K
by overly permissive HTML editing being allowed on the KB articles. Any authenticated user with the privilege to read KB articles is impacted. In an enterprise with multiple applications, the malicious KB article could be edited to match the login pages of other applications, which would make it useful for credential harvesting against other applications as well. Version 9.0.8 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/espocrm/espocrm/security/advisories/GHSA-qrwp-v8v3-hqp2 - https://github.com/espocrm/espocrm/commit/6b58d30eec8864de52844bfb8dac346ce5c729d7
CVE ID: CVE-2025-32391 State: PUBLISHED Published: 2025-04-10T13:11:48.634Z Last Updated: 2025-04-10T13:34:59.611Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: hedgedoc Products: hedgedoc Problem Types: CWE-79 Description: HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to 1.10.3, a malicious SVG file uploaded to HedgeDoc results in the possibility of XSS when opened in a new tab instead of the editor itself. The XSS is possible by exploiting the JSONP capabilities of GitHub Gist embeddings. Only instances with the local filesystem upload backend or special configurations, where the uploads are served from the same
nstances with the local filesystem upload backend or special configurations, where the uploads are served from the same domain as HedgeDoc, are vulnerable. This vulnerability is fixed in 1.10.3. When upgrading to HedgeDoc 1.10.3 is not possible, instance owners could add the following headers for all routes under /uploads as a first-countermeasure: Content-Disposition: attachment and Content-Security-Policy: default-src 'none'. Additionally, the external URLs in the script-src attribute of the Content-Security-Policy header should be removed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-3983-rrqh-mvx5 - https:/
A ADP Vulnrichment: References: - https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-3983-rrqh-mvx5 - https://github.com/hedgedoc/hedgedoc/commit/0636b5c20b7097afccfa6641830352ad068ef964 - https://github.com/hedgedoc/hedgedoc/commit/3f520ea59abf912c66d7443cb99f29a567c47748 - https://github.com/hedgedoc/hedgedoc/commit/d2585fbd3b398b3359f6f88aa1fda8f4ecf2f78d
CVE ID: CVE-2025-32395 State: PUBLISHED Published: 2025-04-10T13:25:19.177Z Last Updated: 2025-04-10T14:14:40.591Z Vendors: vitejs Products: vite Problem Types: CWE-200 Description: Vite is a frontend tooling framework for javascript. Prior to 6.2.6, 6.1.5, 6.0.15, 5.4.18, and 4.5.13, the contents of arbitrary files can be returned to the browser if the dev server is running on Node or Bun. HTTP 1.1 spec (RFC 9112) does not allow # in request-target. Although an attacker can send such a request. For those requests with an invalid request-line (it includes request-target), the spec recommends to reject them with 400 or 301. The same can be said for HTTP 2. On Node and Bun, those requests are
he spec recommends to reject them with 400 or 301. The same can be said for HTTP 2. On Node and Bun, those requests are not rejected internally and is passed to the user land. For those requests, the value of http.IncomingMessage.url contains #. Vite assumed req.url won't contain # when checking server.fs.deny, allowing those kinds of requests to bypass the check. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) and running the Vite dev server on runtimes that are not Deno (e.g. Node, Bun) are affected. This vulnerability is fixed in 6.2.6, 6.1.5, 6.0.15, 5.4.18, and 4.5.13. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
ability is fixed in 6.2.6, 6.1.5, 6.0.15, 5.4.18, and 4.5.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vitejs/vite/security/advisories/GHSA-356w-63v5-8wf4 - https://github.com/vitejs/vite/commit/175a83909f02d3b554452a7bd02b9f340cdfef70
CVE ID: CVE-2025-32396 State: PUBLISHED Published: 2025-05-07T07:05:04.681Z Last Updated: 2025-05-07T14:02:25.242Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: RT-Labs Products: P-Net Problem Types: CWE-122 Description: An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32396
CVE ID: CVE-2025-32397 State: PUBLISHED Published: 2025-05-07T07:05:15.746Z Last Updated: 2025-05-07T14:02:19.332Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: RT-Labs Products: P-Net Problem Types: CWE-122 Description: An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32397
CVE ID: CVE-2025-32398 State: PUBLISHED Published: 2025-05-07T07:05:19.913Z Last Updated: 2025-05-07T14:02:13.297Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: RT-Labs Products: P-Net Problem Types: CWE-476 Description: A NULL Pointer Dereference in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32398
CVE ID: CVE-2025-32399 State: PUBLISHED Published: 2025-05-07T07:05:24.614Z Last Updated: 2025-05-07T14:02:07.833Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: RT-Labs Products: P-Net Problem Types: CWE-606 Description: An Unchecked Input for Loop Condition in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to cause IO devices that use the library to enter an infinite loop by sending a malicious RPC packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32399
CVE ID: CVE-2025-32400 State: PUBLISHED Published: 2025-05-07T07:05:29.110Z Last Updated: 2025-05-07T14:02:00.857Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: RT-Labs Products: P-Net Problem Types: CWE-122 Description: An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32400
CVE ID: CVE-2025-32401 State: PUBLISHED Published: 2025-05-07T07:05:33.647Z Last Updated: 2025-05-07T14:01:50.101Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: RT-Labs Products: P-Net Problem Types: CWE-122 Description: An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32401
CVE ID: CVE-2025-32402 State: PUBLISHED Published: 2025-05-07T07:05:37.811Z Last Updated: 2025-05-07T14:01:40.998Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: RT-Labs Products: P-Net Problem Types: CWE-787 Description: An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32402
CVE ID: CVE-2025-32403 State: PUBLISHED Published: 2025-05-07T07:05:41.872Z Last Updated: 2025-05-07T14:01:31.961Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: RT-Labs Products: P-Net Problem Types: CWE-787 Description: An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32403
CVE ID: CVE-2025-32404 State: PUBLISHED Published: 2025-05-07T07:05:46.358Z Last Updated: 2025-05-07T14:01:25.955Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: RT-Labs Products: P-Net Problem Types: CWE-787 Description: An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32404
CVE ID: CVE-2025-32405 State: PUBLISHED Published: 2025-05-07T07:05:50.198Z Last Updated: 2025-05-07T14:01:13.886Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: RT-Labs Products: P-Net Problem Types: CWE-787 Description: An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32405
CVE ID: CVE-2025-32406 State: PUBLISHED Published: 2025-04-08T00:00:00.000Z Last Updated: 2025-04-08T18:07:34.179Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: NAKIVO Products: Backup & Replication Director Problem Types: CWE-611 Description: An XXE issue in the Director NBR component in NAKIVO Backup & Replication 10.3.x through 11.0.1 before 11.0.2 allows remote attackers fetch and parse the XML response. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpcenter.nakivo.com/Knowledge-Base/Content/Security-Advisory/CVE-2025-32406.htm
CVE ID: CVE-2025-32407 State: PUBLISHED Published: 2025-05-16T00:00:00.000Z Last Updated: 2025-05-17T02:44:27.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Galaxy Watch 3, does not properly validate TLS certificates, allowing for an attacker to impersonate any and all websites visited by the user. This is a critical misconfiguration in the way the browser validates the identity of the server. It negates the use of HTTPS as a secure channel, allowing for Man-in-the-Middle attacks, stealing sensitive information or modifying incoming and outgoing traffic. NOTE: This vulnerability is in an end-of-life
tealing sensitive information or modifying incoming and outgoing traffic. NOTE: This vulnerability is in an end-of-life product that is no longer maintained by the vendor. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/diegovargasj/CVE-2025-32407
CVE ID: CVE-2025-32408 State: PUBLISHED Published: 2025-04-21T00:00:00.000Z Last Updated: 2025-04-23T16:06:24.755Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Soffid Products: IAM Problem Types: CWE-863 Description: In Soffid Console 3.6.31 before 3.6.32, authorization to use the pam service is mishandled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bookstack.soffid.com/books/security-advisories/page/cve-2025-32408
CVE ID: CVE-2025-32409 State: PUBLISHED Published: 2025-04-07T00:00:00.000Z Last Updated: 2025-04-08T15:58:04.589Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Ratta Products: SuperNote A6 X2 Nomad Problem Types: CWE-23 Description: Ratta SuperNote A6 X2 Nomad before December 2024 allows remote code execution because an arbitrary firmware image (signed with debug keys) can be sent to TCP port 60002, and placed into the correct image-update location as a consequence of both directory traversal and unintended handling of concurrency. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.prizmlabs.io/post/remote-rootkits-uncovering-a-0-c
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.prizmlabs.io/post/remote-rootkits-uncovering-a-0-click-rce-in-the-supernote-nomad-e-ink-tablet
CVE ID: CVE-2025-32412 State: PUBLISHED Published: 2025-06-17T20:18:47.252Z Last Updated: 2025-06-17T20:24:39.817Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Fuji Electric Products: Smart Editor Problem Types: CWE-125 Description: Fuji Electric Smart Editor is vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-168-04
CVE ID: CVE-2025-32413 State: PUBLISHED Published: 2025-04-08T00:00:00.000Z Last Updated: 2025-04-08T14:52:10.347Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: CIRCL Products: Vulnerability-Lookup Problem Types: CWE-79 Description: Vulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vulnerability-lookup/vulnerability-lookup/commit/0a120af1de4a0a13bc2e2000f3c4639291122ba0 - https://github.com/vulnerability-lookup/vulnerability-lookup/compare/v2.7.0...v2.7.1
CVE ID: CVE-2025-32414 State: PUBLISHED Published: 2025-04-08T00:00:00.000Z Last Updated: 2025-11-03T19:53:25.162Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: xmlsoft Products: libxml2 Problem Types: CWE-393 Description: In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/libxml2/-/issues/889
CVE ID: CVE-2025-32415 State: PUBLISHED Published: 2025-04-17T00:00:00.000Z Last Updated: 2025-11-03T19:53:26.647Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: xmlsoft Products: libxml2 Problem Types: CWE-1284 Description: In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/libxml2/-/issues/890
CVE ID: CVE-2025-32421 State: PUBLISHED Published: 2025-05-14T22:56:45.624Z Last Updated: 2025-05-15T15:42:26.847Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: vercel Products: next.js Problem Types: CWE-362 Description: Next.js is a React framework for building full-stack web applications. Versions prior to 14.2.24 and 15.1.6 have a race-condition vulnerability. This issue only affects the Pages Router under certain misconfigurations, causing normal endpoints to serve `pageProps` data instead of standard HTML. This issue was patched in versions 15.1.6 and 14.2.24 by stripping the `x-now-route-matches` header from incoming requests. Applications hosted on Ve
sions 15.1.6 and 14.2.24 by stripping the `x-now-route-matches` header from incoming requests. Applications hosted on Vercel's platform are not affected by this issue, as the platform does not cache responses based solely on `200 OK` status without explicit `cache-control` headers. Those who self-host Next.js deployments and are unable to upgrade immediately can mitigate this vulnerability by stripping the `x-now-route-matches` header from all incoming requests at the content development network and setting `cache-control: no-store` for all responses under risk. The maintainers of Next.js strongly recommend only caching responses with explicit cache-control headers. Additional Analyst Notes:
ners of Next.js strongly recommend only caching responses with explicit cache-control headers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vercel/next.js/security/advisories/GHSA-qpjv-v59x-3qc4 - https://vercel.com/changelog/cve-2025-32421
CVE ID: CVE-2025-32426 State: PUBLISHED Published: 2025-04-11T13:42:21.972Z Last Updated: 2025-04-11T14:16:53.734Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: verbb Products: formie Problem Types: CWE-79 Description: Formie is a Craft CMS plugin for creating forms. Prior to version 2.1.44, it is possible to inject malicious code into the HTML content of an email notification, which is then rendered on the preview. There is no issue when rendering the email via normal means (a delivered email). This would require access to the form's email notification settings. This has been fixed in Formie 2.1.44. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer