Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-0718 State: PUBLISHED Published: 2025-03-23T06:00:04.552Z Last Updated: 2025-03-24T18:29:38.820Z Vendors: Unknown Products: Nested Pages Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Nested Pages WordPress plugin before 3.2.13 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/69ddd8eb-33f1-49cf-9428-3d89262b1887/
CVE ID: CVE-2025-0719 State: PUBLISHED Published: 2025-02-26T14:04:04.974Z Last Updated: 2025-02-26T14:20:27.526Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Cloud Pak for Data Problem Types: CWE-79 Description: IBM Cloud Pak for Data 4.0.0 through 4.8.5 and 5.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7184173
CVE ID: CVE-2025-0720 State: PUBLISHED Published: 2025-01-26T23:00:10.927Z Last Updated: 2025-02-12T20:01:14.153Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Microword Products: eScan Antivirus Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Microword eScan Antivirus 7.0.32 on Linux. It has been rated as problematic. Affected by this issue is the function removeExtraSlashes of the file /opt/MicroWorld/sbin/rtscanner of the component Folder Watch List Handler. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was
The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293480 - https://vuldb.com/?ctiid.293480 - https://vuldb.com/?submit.482371
CVE ID: CVE-2025-0721 State: PUBLISHED Published: 2025-01-26T23:31:04.608Z Last Updated: 2025-04-16T11:21:26.458Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: needyamin Products: image_gallery Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in needyamin image_gallery 1.0. This affects the function image_gallery of the file /view.php. The manipulation of the argument Username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CI
sed. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293481 - https://vuldb.com/?ctiid.293481 - https://vuldb.com/?submit.482812 - https://www.websecurityinsights.my.id/2025/01/imagegallery-viewphpusername-cross-site.html
CVE ID: CVE-2025-0722 State: PUBLISHED Published: 2025-01-26T23:31:06.503Z Last Updated: 2025-04-16T11:21:50.763Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: needyamin Products: image_gallery Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical was found in needyamin image_gallery 1.0. This vulnerability affects unknown code of the file /admin/gallery.php of the component Cover Image Handler. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Ad
d to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293482 - https://vuldb.com/?ctiid.293482 - https://vuldb.com/?submit.482822 - https://www.websecurityinsights.my.id/2025/01/imagegallery-add-gallery.html
CVE ID: CVE-2025-0723 State: PUBLISHED Published: 2025-03-22T04:22:04.937Z Last Updated: 2025-03-24T15:14:14.671Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: metagauss Products: ProfileGrid – User Profiles, Groups and Communities Problem Types: CWE-89 Description: The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind and time-based SQL Injections via the rid and search parameters in all versions up to, and including, 5.9.4.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscrib
k of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/140fa6e8-4381-4df2-af62-44d40b116daf?source=cve - https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/tags/5.9.4.2/includes/class-profile-magic-request.php#L2379 - https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/ta
magic-request.php#L2379 - https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/tags/5.9.4.2/includes/class-profile-magic-chat-system.php#L39
CVE ID: CVE-2025-0724 State: PUBLISHED Published: 2025-03-22T04:22:06.213Z Last Updated: 2025-04-01T16:32:20.890Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: metagauss Products: ProfileGrid – User Profiles, Groups and Communities Problem Types: CWE-502 Description: The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.9.4.5 via deserialization of untrusted input in the get_user_meta_fields_html function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. No known POP chain is present in the vu
cated attackers, with Subscriber-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6bb1de69-7bc2-4785-9789-0a2d1cf35b9b?source=cve - https://plugins.trac
www.wordfence.com/threat-intel/vulnerabilities/id/6bb1de69-7bc2-4785-9789-0a2d1cf35b9b?source=cve - https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/tags/5.9.4.2/includes/class-profile-magic-html-generator.php#L259
CVE ID: CVE-2025-0725 State: PUBLISHED Published: 2025-02-05T09:18:20.468Z Last Updated: 2025-06-12T16:04:29.956Z Vendors: curl Products: curl Problem Types: CWE-680 Integer Overflow to Buffer Overflow Description: When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://curl.se/docs/CVE-2025-0725.json - https://curl.se/docs/CVE-2025-0725.html - https://hackerone.com/reports/2956023
CVE ID: CVE-2025-0726 State: PUBLISHED Published: 2025-02-21T08:12:11.703Z Last Updated: 2025-02-21T14:17:39.802Z Vendors: Eclipse Foundation Products: ThreadX Problem Types: CWE-459 Description: In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause a denial of service by specially crafted packets. The core issue is missing closing of a file in case of an error condition, resulting in the 404 error for each further file request. Users can work-around the issue by disabling the PUT request support. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/netxduo/commit/c78d650be7377aae1a8704bc0ce5cc
- CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/netxduo/commit/c78d650be7377aae1a8704bc0ce5cc6f9f189014 - https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-pwf8-5q9w-m763
CVE ID: CVE-2025-0727 State: PUBLISHED Published: 2025-02-21T08:19:11.412Z Last Updated: 2025-02-21T15:34:39.515Z Vendors: Eclipse Foundation Products: ThreadX Problem Types: CWE-191 Description: In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially crafted packets with Content-Length in one packet smaller than the data request size of the other packet. A possible workaround is to disable HTTP PUT support. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/netxduo/commit/c78d650be7377aae1a8704bc
Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/netxduo/commit/c78d650be7377aae1a8704bc0ce5cc6f9f189014 - https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-jf6x-9mgc-p72w
CVE ID: CVE-2025-0728 State: PUBLISHED Published: 2025-02-21T08:16:16.029Z Last Updated: 2025-02-21T14:12:36.893Z Vendors: Eclipse Foundation Products: ThreadX Problem Types: CWE-191 Description: In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially crafted packets with Content-Length smaller than the data request size. A possible workaround is to disable HTTP PUT support. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/netxduo/commit/c78d650be7377aae1a8704bc0ce5cc6f9f189014 - https://github.
ferences: - https://github.com/eclipse-threadx/netxduo/commit/c78d650be7377aae1a8704bc0ce5cc6f9f189014 - https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-hqp7-4q26-6wqf
CVE ID: CVE-2025-0729 State: PUBLISHED Published: 2025-01-27T17:00:11.408Z Last Updated: 2025-01-27T18:49:02.244Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: TP-Link Products: TL-SG108E Problem Types: CWE-451 Description: A vulnerability was found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to clickjacking. The attack may be initiated remotely. Upgrading to version 1.0.0 Build 20250124 Rel. 54920(Beta) is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early. They reacted very professional and provided a pre-fi
to upgrade the affected component. The vendor was contacted early. They reacted very professional and provided a pre-fix version for their customers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293507 - https://vuldb.com/?ctiid.293507 - https://vuldb.com/?submit.478451 - https://github.com/TheCyberDiver/Public-Disclosures-CVE-/blob/main/tp-link%20clickjacking.md - https://static.tp-link.com/upload/beta/2025/202501/20250124/TL-SG108E(UN)%206.0_1.0.0%20Build%2020250124%20Rel.54920(Beta)_up.zip - https://www.tp-link.com/
CVE ID: CVE-2025-0730 State: PUBLISHED Published: 2025-01-27T17:00:13.810Z Last Updated: 2025-01-27T18:48:22.203Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: TP-Link Products: TL-SG108E Problem Types: CWE-598 Description: A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file /usr_account_set.cgi of the component HTTP GET Request Handler. The manipulation of the argument username/password leads to use of get request method with sensitive query strings. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability
ry strings. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.0 Build 20250124 Rel. 54920(Beta) is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early. They reacted very professional and provided a pre-fix version for their customers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293508 - https://vuldb.com/?ctiid.293508 - https://vuldb.com/?submit.478465 - https://github.com/TheCyberDiver/Public-Disclosures-CVE-/blob/main/tp
?ctiid.293508 - https://vuldb.com/?submit.478465 - https://github.com/TheCyberDiver/Public-Disclosures-CVE-/blob/main/tp-link%20sensitive%20info%20in%20GET.md - https://static.tp-link.com/upload/beta/2025/202501/20250124/TL-SG108E(UN)%206.0_1.0.0%20Build%2020250124%20Rel.54920(Beta)_up.zip - https://www.tp-link.com/
CVE ID: CVE-2025-0731 State: PUBLISHED Published: 2025-02-26T10:01:50.336Z Last Updated: 2025-02-26T15:27:59.319Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: SMA Products: www.sunnyportal.com Problem Types: CWE-434 Description: An unauthenticated remote attacker can upload a .aspx file instead of a PV system picture through the demo account. The code can only be executed in the security context of the user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2025-012
CVE ID: CVE-2025-0732 State: PUBLISHED Published: 2025-01-27T18:00:11.934Z Last Updated: 2025-01-27T20:03:52.901Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: Discord Problem Types: CWE-426 Description: A vulnerability, which was classified as problematic, has been found in Discord up to 1.0.9177 on Windows. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to untrusted search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The vendor was contacted early about this disclosure but did not respond in any
e exploitation is known to be difficult. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293510 - https://vuldb.com/?ctiid.293510 - https://vuldb.com/?submit.481209
CVE ID: CVE-2025-0733 State: PUBLISHED Published: 2025-01-27T18:00:13.776Z Last Updated: 2025-01-27T19:52:30.190Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: Postman Problem Types: CWE-426 Description: A vulnerability, which was classified as problematic, was found in Postman up to 11.20 on Windows. This affects an unknown part in the library profapi.dll. The manipulation leads to untrusted search path. An attack has to be approached locally. The complexity of an attack is rather high. The exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: -
icult. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293511 - https://vuldb.com/?ctiid.293511 - https://vuldb.com/?submit.481185
CVE ID: CVE-2025-0734 State: PUBLISHED Published: 2025-01-27T19:00:12.136Z Last Updated: 2025-02-12T20:01:11.854Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: y_project Products: RuoYi Problem Types: CWE-502, CWE-20 Description: A vulnerability has been found in y_project RuoYi up to 4.8.0 and classified as critical. This vulnerability affects the function getBeanName of the component Whitelist. The manipulation leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
ed early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293512 - https://vuldb.com/?ctiid.293512 - https://vuldb.com/?submit.482823 - https://gist.github.com/GSBP0/3c1b0f9dbdd2a48b8f52330cfbbc279b
CVE ID: CVE-2025-0736 State: PUBLISHED Published: 2025-01-28T09:12:38.101Z Last Updated: 2025-11-11T16:11:27.773Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Data Grid Problem Types: CWE-532 Description: A flaw was found in Infinispan, when using JGroups with JDBC_PING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by malicious actors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:2663 - https://a
tional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:2663 - https://access.redhat.com/security/cve/CVE-2025-0736 - https://bugzilla.redhat.com/show_bug.cgi?id=2342233
CVE ID: CVE-2025-0739 State: PUBLISHED Published: 2025-01-30T11:10:48.173Z Last Updated: 2025-01-30T14:59:17.678Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: EmbedAI Products: EmbedAI Problem Types: CWE-284 Description: An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to show subscription's information of others users by changing the "SUSCBRIPTION_ID" param of the endpoint "/demos/embedai/subscriptions/show/<SUSCBRIPTION_ID>". Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-embedai
CVE ID: CVE-2025-0740 State: PUBLISHED Published: 2025-01-30T11:11:24.393Z Last Updated: 2025-01-30T14:58:52.942Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: EmbedAI Products: EmbedAI Problem Types: CWE-284 Description: An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain chat messages belonging to other users by changing the “CHAT_ID” of the endpoint "/embedai/chats/load_messages?chat_id=<CHAT_ID>". Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-embedai
CVE ID: CVE-2025-0741 State: PUBLISHED Published: 2025-01-30T11:13:35.543Z Last Updated: 2025-02-18T19:04:32.016Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: EmbedAI Products: EmbedAI Problem Types: CWE-284 Description: An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to write messages into other users chat by changing the parameter "chat_id" of the POST request "/embedai/chats/send_message". Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-embedai
CVE ID: CVE-2025-0742 State: PUBLISHED Published: 2025-01-30T11:14:14.753Z Last Updated: 2025-02-18T19:04:06.195Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: EmbedAI Products: EmbedAI Problem Types: CWE-284 Description: An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain files stored by others users by changing the "FILE_ID" of the endpoint "/embedai/files/show/<FILE_ID>". Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-embedai
CVE ID: CVE-2025-0743 State: PUBLISHED Published: 2025-01-30T11:16:46.978Z Last Updated: 2025-02-18T19:03:35.811Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: EmbedAI Products: EmbedAI Problem Types: CWE-284 Description: An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to leverage the endpoint "/embedai/visits/show/<VISIT_ID>" to obtain information about the visits made by other users. The information provided by this endpoint includes IP address, userAgent and location of the user that visited the web page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ent and location of the user that visited the web page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-embedai
CVE ID: CVE-2025-0744 State: PUBLISHED Published: 2025-01-30T11:17:25.952Z Last Updated: 2025-02-18T19:03:02.490Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: EmbedAI Products: EmbedAI Problem Types: CWE-284 Description: an Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker change his subscription plan without paying by making a POST request changing the parameters of the "/demos/embedai/pmt_cash_on_delivery/pay" endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-embedai
CVE ID: CVE-2025-0745 State: PUBLISHED Published: 2025-01-30T11:18:01.189Z Last Updated: 2025-02-18T19:02:35.781Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: EmbedAI Products: EmbedAI Problem Types: CWE-284 Description: An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain the backups of the database by requesting the "/embedai/app/uploads/database/<SQL_FILE>" endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-embedai
CVE ID: CVE-2025-0746 State: PUBLISHED Published: 2025-01-30T11:19:29.744Z Last Updated: 2025-02-18T19:02:02.663Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: EmbedAI Products: EmbedAI Problem Types: CWE-79 Description: A Reflected Cross-Site Scripting vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to craft a malicious URL leveraging the"/embedai/users/show/<SCRIPT>" endpoint to inject the malicious JavaScript code. This JavaScript code will be executed when a user opens the malicious URL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notice
icious URL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-embedai