Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
] [bhelgaas: add back report info from https://lore.kernel.org/lkml/20241218115951.83062-1-ryotkkr98@gmail.com/] Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/stable/c/c250262d6485ca333e9821f85b07eb383ec546b1 - https://git.kernel.org/stable/c/c2968c812339593ac6e2bdd5cc3adabe3f05fa53 - https://git.kernel.org/stable/c/13e5148f70e81991acbe0bab5b1b50ba699116e7 - https://git.kernel.org/stable/c/5c3cfcf0b4bf43530788b08a8eaf7896ec567484 - https://git.kernel.org/stable/c/2358046ead696ca5c7c628d6c0e2c6792619a3e5 - https://git.kernel.org/stable/c/20d0a9062c031068fa39f725a32f182b709b5525 - https://git.kernel.org/stable/c/18056a48669a040bef491e63b25896561ee14d90
CVE ID: CVE-2025-23162 State: PUBLISHED Published: 2025-05-01T12:55:46.725Z Last Updated: 2025-05-26T05:19:47.114Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Don't try to trigger a full GT reset if VF VFs don't have access to the GDRST(0x941c) register that driver uses to reset a GT. Attempt to trigger a reset using debugfs: $ cat /sys/kernel/debug/dri/0000:00:02.1/gt0/force_reset or due to a hang condition detected by the driver leads to: [ ] xe 0000:00:02.1: [drm] GT0: trying reset from force_reset [xe] [ ] xe 0000:00:02.1: [drm] GT0: reset queued [ ] xe 0000:00:02.1: [drm] GT0: reset started [ ] ------------[
reset [xe] [ ] xe 0000:00:02.1: [drm] GT0: reset queued [ ] xe 0000:00:02.1: [drm] GT0: reset started [ ] ------------[ cut here ]------------ [ ] xe 0000:00:02.1: [drm] GT0: VF is trying to write 0x1 to an inaccessible register 0x941c+0x0 [ ] WARNING: CPU: 3 PID: 3069 at drivers/gpu/drm/xe/xe_gt_sriov_vf.c:996 xe_gt_sriov_vf_write32+0xc6/0x580 [xe] [ ] RIP: 0010:xe_gt_sriov_vf_write32+0xc6/0x580 [xe] [ ] Call Trace: [ ] <TASK> [ ] ? show_regs+0x6c/0x80 [ ] ? __warn+0x93/0x1c0 [ ] ? xe_gt_sriov_vf_write32+0xc6/0x580 [xe] [ ] ? report_bug+0x182/0x1b0 [ ] ? handle_bug+0x6e/0xb0 [ ] ? exc_invalid_op+0x18/0x80 [ ] ? asm_exc_invalid_op+0x1b/0x20 [ ] ? xe_gt_sriov_vf_write32+0xc6/0x580 [xe] [ ] ?
b0 [ ] ? exc_invalid_op+0x18/0x80 [ ] ? asm_exc_invalid_op+0x1b/0x20 [ ] ? xe_gt_sriov_vf_write32+0xc6/0x580 [xe] [ ] ? xe_gt_sriov_vf_write32+0xc6/0x580 [xe] [ ] ? xe_gt_tlb_invalidation_reset+0xef/0x110 [xe] [ ] ? __mutex_unlock_slowpath+0x41/0x2e0 [ ] xe_mmio_write32+0x64/0x150 [xe] [ ] do_gt_reset+0x2f/0xa0 [xe] [ ] gt_reset_worker+0x14e/0x1e0 [xe] [ ] process_one_work+0x21c/0x740 [ ] worker_thread+0x1db/0x3c0 Fix that by sending H2G VF_RESET(0x5507) action instead. References: - https://git.kernel.org/stable/c/2eec2fa8666dcecebae33a565a818c9de9af8b50 - https://git.kernel.org/stable/c/90b16edb3213e4ae4a3138bb20703ae367e88a01 - https://git.kernel.org/stable/c/a9bc61a61372897886f58fdaa5582
el.org/stable/c/90b16edb3213e4ae4a3138bb20703ae367e88a01 - https://git.kernel.org/stable/c/a9bc61a61372897886f58fdaa5582e3f7bf9a50b - https://git.kernel.org/stable/c/459777724d306315070d24608fcd89aea85516d6
CVE ID: CVE-2025-23163 State: PUBLISHED Published: 2025-05-01T12:55:47.380Z Last Updated: 2025-11-03T19:43:03.854Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: vlan: don't propagate flags on open With the device instance lock, there is now a possibility of a deadlock: [ 1.211455] ============================================ [ 1.211571] WARNING: possible recursive locking detected [ 1.211687] 6.14.0-rc5-01215-g032756b4ca7a-dirty #5 Not tainted [ 1.211823] -------------------------------------------- [ 1.211936] ip/184 is trying to acquire lock: [ 1.212032] ffff8881024a4c30 (&dev->lock){+.+.}-{4:4}, at: dev_set_allmulti+0x
211936] ip/184 is trying to acquire lock: [ 1.212032] ffff8881024a4c30 (&dev->lock){+.+.}-{4:4}, at: dev_set_allmulti+0x4e/0xb0 [ 1.212207] [ 1.212207] but task is already holding lock: [ 1.212332] ffff8881024a4c30 (&dev->lock){+.+.}-{4:4}, at: dev_open+0x50/0xb0 [ 1.212487] [ 1.212487] other info that might help us debug this: [ 1.212626] Possible unsafe locking scenario: [ 1.212626] [ 1.212751] CPU0 [ 1.212815] ---- [ 1.212871] lock(&dev->lock); [ 1.212944] lock(&dev->lock); [ 1.213016] [ 1.213016] *** DEADLOCK *** [ 1.213016] [ 1.213143] May be due to missing lock nesting notation [ 1.213143] [ 1.213294] 3 locks held by ip/184: [ 1.213371] #0: ffffffff838b53e0 (rtnl_mutex){+.+.}-{4:4}, at
g notation [ 1.213143] [ 1.213294] 3 locks held by ip/184: [ 1.213371] #0: ffffffff838b53e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock+0x1b/0xa0 [ 1.213543] #1: ffffffff84e5fc70 (&net->rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock+0x37/0xa0 [ 1.213727] #2: ffff8881024a4c30 (&dev->lock){+.+.}-{4:4}, at: dev_open+0x50/0xb0 [ 1.213895] [ 1.213895] stack backtrace: [ 1.213991] CPU: 0 UID: 0 PID: 184 Comm: ip Not tainted 6.14.0-rc5-01215-g032756b4ca7a-dirty #5 [ 1.213993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Arch Linux 1.16.3-1-1 04/01/2014 [ 1.213994] Call Trace: [ 1.213995] <TASK> [ 1.213996] dump_stack_lvl+0x8e/0xd0 [ 1.214000] print_deadlock_bug+0x28b/0x2a0 [ 1.214020]
l Trace: [ 1.213995] <TASK> [ 1.213996] dump_stack_lvl+0x8e/0xd0 [ 1.214000] print_deadlock_bug+0x28b/0x2a0 [ 1.214020] lock_acquire+0xea/0x2a0 [ 1.214027] __mutex_lock+0xbf/0xd40 [ 1.214038] dev_set_allmulti+0x4e/0xb0 # real_dev->flags & IFF_ALLMULTI [ 1.214040] vlan_dev_open+0xa5/0x170 # ndo_open on vlandev [ 1.214042] __dev_open+0x145/0x270 [ 1.214046] __dev_change_flags+0xb0/0x1e0 [ 1.214051] netif_change_flags+0x22/0x60 # IFF_UP vlandev [ 1.214053] dev_change_flags+0x61/0xb0 # for each device in group from dev->vlan_info [ 1.214055] vlan_device_event+0x766/0x7c0 # on netdevsim0 [ 1.214058] notifier_call_chain+0x78/0x120 [ 1.214062] netif_open+0x6d/0x90 [ 1.214064] dev_open+0x5b/0xb0 # l
etdevsim0 [ 1.214058] notifier_call_chain+0x78/0x120 [ 1.214062] netif_open+0x6d/0x90 [ 1.214064] dev_open+0x5b/0xb0 # locks netdevsim0 [ 1.214066] bond_enslave+0x64c/0x1230 [ 1.214075] do_set_master+0x175/0x1e0 # on netdevsim0 [ 1.214077] do_setlink+0x516/0x13b0 [ 1.214094] rtnl_newlink+0xaba/0xb80 [ 1.214132] rtnetlink_rcv_msg+0x440/0x490 [ 1.214144] netlink_rcv_skb+0xeb/0x120 [ 1.214150] netlink_unicast+0x1f9/0x320 [ 1.214153] netlink_sendmsg+0x346/0x3f0 [ 1.214157] __sock_sendmsg+0x86/0xb0 [ 1.214160] ____sys_sendmsg+0x1c8/0x220 [ 1.214164] ___sys_sendmsg+0x28f/0x2d0 [ 1.214179] __x64_sys_sendmsg+0xef/0x140 [ 1.214184] do_syscall_64+0xec/0x1d0 [ 1.214190] entry_SYSCALL_64_after_hwframe+0
1.214179] __x64_sys_sendmsg+0xef/0x140 [ 1.214184] do_syscall_64+0xec/0x1d0 [ 1.214190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1.214191] RIP: 0033:0x7f2d1b4a7e56 Device setup: netdevsim0 (down) ^ ^ bond netdevsim1.100@netdevsim1 allmulticast=on (down) When we enslave the lower device (netdevsim0) which has a vlan, we propagate vlan's allmuti/promisc flags during ndo_open. This causes (re)locking on of the real_dev. Propagate allmulti/promisc on flags change, not on the open. There is a slight semantics change that vlans that are down now propagate the flags, but this seems unlikely to result in the real issues. Reproducer: echo 0 1 > /sys/bus/netdevsim/new_device dev_path=$(ls -d /sys/bu
ems unlikely to result in the real issues. Reproducer: echo 0 1 > /sys/bus/netdevsim/new_device dev_path=$(ls -d /sys/bus/netdevsim/devices/netdevsim0/net/*) dev=$(echo $dev_path | rev | cut -d/ -f1 | rev) ip link set dev $dev name netdevsim0 ip link set dev netdevsim0 up ip link add link netdevsim0 name netdevsim0.100 type vlan id 100 ip link set dev netdevsim0.100 allm ---truncated--- Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/stable/c/a32f1d4f1f4c9d978698f3c718621f6198f2e7ac - https://git.kernel.org/stable/c/b1e3eeb037256a2f1206a8d69810ec47eb152026 - https://git.kernel.org/stable/c/523fa0979d842443aa14b80002e45b471cbac137 - https://git.kernel.o
06a8d69810ec47eb152026 - https://git.kernel.org/stable/c/523fa0979d842443aa14b80002e45b471cbac137 - https://git.kernel.org/stable/c/53fb25e90c0a503a17c639341ba5e755cb2feb5c - https://git.kernel.org/stable/c/d537859e56bcc3091805c524484a4c85386b3cc8 - https://git.kernel.org/stable/c/299d7d27af6b5844cda06a0fdfa635705e1bc50f - https://git.kernel.org/stable/c/8980018a9806743d9b80837330d46f06ecf78516 - https://git.kernel.org/stable/c/538b43aa21e3b17c110104efd218b966d2eda5f8 - https://git.kernel.org/stable/c/27b918007d96402aba10ed52a6af8015230f1793
CVE ID: CVE-2025-23164 State: PUBLISHED Published: 2025-05-19T01:25:08.458Z Last Updated: 2025-05-19T14:45:25.014Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Ubiquiti Inc Products: UniFi Protect Application Description: A misconfigured access token mechanism in the Unifi Protect Application (Version 5.3.41 and earlier) could permit the recipient of a "Share Livestream" link to maintain access to the corresponding livestream subsequent to such link becoming disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-047-047/cef86c37-7421-44fd-b251-84e76475a5bc
CVE ID: CVE-2025-23165 State: PUBLISHED Published: 2025-05-19T01:25:08.569Z Last Updated: 2025-05-28T00:06:31.253Z Severity: LOW (CVSS 3.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: nodejs Products: node Description: In Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in `uv_fs_s.file`: a UTF-16 path buffer is allocated but subsequently overwritten when the file descriptor is set. This results in an unrecoverable memory leak on every call. Repeated use can cause unbounded memory growth, leading to a denial of service. Impact: * This vulnerability affects APIs relying on `ReadFileUtf8` on Node.js release lines: v20 and v22. Additional Analyst No
* This vulnerability affects APIs relying on `ReadFileUtf8` on Node.js release lines: v20 and v22. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nodejs.org/en/blog/vulnerability/may-2025-security-releases
CVE ID: CVE-2025-23166 State: PUBLISHED Published: 2025-05-19T01:25:08.462Z Last Updated: 2025-05-28T00:07:12.640Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: nodejs Products: node Description: The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nodejs.org/en/blog/vulnerability/may-2025-security-release
Analyst Notes: - CISA ADP Vulnrichment: References: - https://nodejs.org/en/blog/vulnerability/may-2025-security-releases
CVE ID: CVE-2025-23167 State: PUBLISHED Published: 2025-05-19T01:25:08.454Z Last Updated: 2025-05-27T18:31:36.494Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: nodejs Products: node Description: A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests. The issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination. Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade. A
ect header termination. Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nodejs.org/en/blog/vulnerability/may-2025-security-releases
CVE ID: CVE-2025-23168 State: PUBLISHED Published: 2025-06-18T23:30:52.692Z Last Updated: 2025-06-23T16:05:08.464Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Versa Products: Director Description: The Versa Director SD-WAN orchestration platform implements Two-Factor Authentication (2FA) using One-Time Passcodes (OTP) delivered via email or SMS. Versa Director accepts untrusted user input when dispatching 2FA codes, allowing an attacker who knows a valid username and password to redirect the OTP delivery (SMS/email) to their own device. OTP/TOTP codes are not invalidated after use, enabling reuse by an attacker who has previously intercepted or obtained
OTP/TOTP codes are not invalidated after use, enabling reuse by an attacker who has previously intercepted or obtained a valid code. In addition, the 2FA system does not adequately restrict the number or frequency of login attempts. The OTP values are generated from a relatively small keyspace, making brute-force attacks more feasible. Exploitation Status: Versa Networks is not aware of any reported instance where this vulnerability was exploited. Proof of concept for this vulnerability has been disclosed by third party security researchers. Workarounds or Mitigation: Versa recommends that Director be upgraded to one of the remediated software versions. Additional Analyst Notes: - CISA ADP
a recommends that Director be upgraded to one of the remediated software versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-portal.versa-networks.com/emailbulletins/68526512dc94d6b9f2faf715 - https://support.versa-networks.com/support/solutions/articles/23000026708-release-22-1-4 - https://support.versa-networks.com/support/solutions/articles/23000026033-release-22-1-3 - https://support.versa-networks.com/support/solutions/articles/23000025680-release-22-1-2 - https://support.versa-networks.com/support/solutions/articles/23000024323-release-21-2-3
CVE ID: CVE-2025-23169 State: PUBLISHED Published: 2025-06-18T23:30:49.907Z Last Updated: 2025-06-23T16:05:37.227Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: Versa Products: Director Description: The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, footer, and logo. However, the input provided for these customizations is not properly validated or sanitized, allowing a malicious user to inject and store cross-site scripting (XSS) payloads. Exploitation Status: Versa Networks is not aware of any reported instance where this vulnerability was exploited. Proof of concept for this vulnerability ha
is not aware of any reported instance where this vulnerability was exploited. Proof of concept for this vulnerability has been disclosed by third party security researchers. Workarounds or Mitigation: There are no workarounds to disable the GUI option. Versa recommends that Director be upgraded to one of the remediated software versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-portal.versa-networks.com/emailbulletins/68526a08dc94d6b9f2faf716 - https://support.versa-networks.com/support/solutions/articles/23000026708-release-22-1-4 - https://support.versa-networks.com/support/solutions/articles/23000026033-release-22-1-3 - https://support.versa-networ
https://support.versa-networks.com/support/solutions/articles/23000026033-release-22-1-3 - https://support.versa-networks.com/support/solutions/articles/23000025680-release-22-1-2 - https://support.versa-networks.com/support/solutions/articles/23000024323-release-21-2-3
CVE ID: CVE-2025-23170 State: PUBLISHED Published: 2025-06-18T23:30:49.238Z Last Updated: 2025-06-23T16:05:43.363Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Versa Products: Director Description: The Versa Director SD-WAN orchestration platform includes functionality to initiate SSH sessions to remote CPEs and the Director shell via Shell-In-A-Box. The underlying Python script, shell-connect.py, is vulnerable to command injection through the user argument. This allows an attacker to execute arbitrary commands on the system. Exploitation Status: Versa Networks is not aware of any reported instance where this vulnerability was exploited. Proof of concept
n Status: Versa Networks is not aware of any reported instance where this vulnerability was exploited. Proof of concept for this vulnerability has been disclosed by third party security researchers. Workarounds or Mitigation: There are no workarounds to disable the GUI option. Versa recommends that Director be upgraded to one of the remediated software versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-portal.versa-networks.com/emailbulletins/68526bc7dc94d6b9f2faf717 - https://support.versa-networks.com/support/solutions/articles/23000026708-release-22-1-4 - https://support.versa-networks.com/support/solutions/articles/23000026033-release-22-1-3 - htt
00026708-release-22-1-4 - https://support.versa-networks.com/support/solutions/articles/23000026033-release-22-1-3 - https://support.versa-networks.com/support/solutions/articles/23000025680-release-22-1-2 - https://support.versa-networks.com/support/solutions/articles/23000024323-release-21-2-3
CVE ID: CVE-2025-23171 State: PUBLISHED Published: 2025-06-18T23:30:53.336Z Last Updated: 2025-06-23T16:05:01.399Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Versa Products: Director Description: The Versa Director SD-WAN orchestration platform provides an option to upload various types of files. The Versa Director does not correctly limit file upload permissions. The UI appears not to allow file uploads but uploads still succeed. In addition, the Versa Director discloses the full filename of uploaded temporary files, including the UUID prefix. Insecure UCPE image upload in Versa Director allows an authenticated attacker to upload a webshell. Exploitation
prefix. Insecure UCPE image upload in Versa Director allows an authenticated attacker to upload a webshell. Exploitation Status: Versa Networks is not aware of any reported instance where this vulnerability was exploited. Proof of concept for this vulnerability has been disclosed by third party security researchers. Workarounds or Mitigation: There are no workarounds to disable the GUI option. Versa recommends that Director be upgraded to one of the remediated software versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-portal.versa-networks.com/emailbulletins/68526dbbdc94d6b9f2faf71a - https://support.versa-networks.com/support/solutions/articles/2300
etworks.com/emailbulletins/68526dbbdc94d6b9f2faf71a - https://support.versa-networks.com/support/solutions/articles/23000026708-release-22-1-4 - https://support.versa-networks.com/support/solutions/articles/23000026033-release-22-1-3 - https://support.versa-networks.com/support/solutions/articles/23000025680-release-22-1-2 - https://support.versa-networks.com/support/solutions/articles/23000024323-release-21-2-3
CVE ID: CVE-2025-23172 State: PUBLISHED Published: 2025-06-18T23:30:51.224Z Last Updated: 2025-06-23T16:05:24.756Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Versa Products: Director Description: The Versa Director SD-WAN orchestration platform includes a Webhook feature for sending notifications to external HTTP endpoints. However, the "Add Webhook" and "Test Webhook" functionalities can be abused by an authenticated user to send crafted HTTP requests to localhost. This can be leveraged to execute commands on behalf of the versa user, who has sudo privileges, potentially leading to privilege escalation or remote code execution. Exploitation Status: Versa
ho has sudo privileges, potentially leading to privilege escalation or remote code execution. Exploitation Status: Versa Networks is not aware of any reported instance where this vulnerability was exploited. Proof of concept for this vulnerability has been disclosed by third party security researchers. Workarounds or Mitigation: There are no workarounds to disable the GUI option. Versa recommends that Director be upgraded to one of the remediated software versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-portal.versa-networks.com/emailbulletins/68526e7bdc94d6b9f2faf71b - https://support.versa-networks.com/support/solutions/articles/23000026708-releas
ailbulletins/68526e7bdc94d6b9f2faf71b - https://support.versa-networks.com/support/solutions/articles/23000026708-release-22-1-4 - https://support.versa-networks.com/support/solutions/articles/23000026033-release-22-1-3 - https://support.versa-networks.com/support/solutions/articles/23000025680-release-22-1-2 - https://support.versa-networks.com/support/solutions/articles/23000024323-release-21-2-3
CVE ID: CVE-2025-23173 State: PUBLISHED Published: 2025-06-18T23:30:50.570Z Last Updated: 2025-06-23T16:05:30.786Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Versa Products: Director Description: The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI. By default, the websockify service is exposed on port 6080 and accessible from the internet. This exposure introduces significant risk, as websockify has known weaknesses that can be exploited, potentially leading to remote code execution. Versa Networks is not aware of any reported instance where this vulnerability was exploited. P
to remote code execution. Versa Networks is not aware of any reported instance where this vulnerability was exploited. Proof of concept for this vulnerability has been disclosed by third party security researchers. Workarounds or Mitigation: Restrict access to TCP port 6080 if uCPE console access is not necessary. Versa recommends that Director be upgraded to one of the remediated software versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-portal.versa-networks.com/emailbulletins/68526ee0dc94d6b9f2faf71c - https://support.versa-networks.com/support/solutions/articles/23000026708-release-22-1-4 - https://support.versa-networks.com/support/solutions/art
rks.com/support/solutions/articles/23000026708-release-22-1-4 - https://support.versa-networks.com/support/solutions/articles/23000026033-release-22-1-3 - https://support.versa-networks.com/support/solutions/articles/23000025680-release-22-1-2 - https://support.versa-networks.com/support/solutions/articles/23000024323-release-21-2-3
CVE ID: CVE-2025-23174 State: PUBLISHED Published: 2025-04-21T16:53:08.584Z Last Updated: 2025-04-21T17:09:00.394Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Yoel Geva Products: Android App Problem Types: CWE-200 Description: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0
CVE ID: CVE-2025-23175 State: PUBLISHED Published: 2025-04-22T12:24:37.262Z Last Updated: 2025-04-22T13:06:43.171Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Tecnick Products: TCExam Problem Types: CWE-79 Description: Multiple XSS (CWE-79) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0
CVE ID: CVE-2025-23176 State: PUBLISHED Published: 2025-04-22T14:23:42.733Z Last Updated: 2025-04-22T16:05:24.088Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Tecnick Products: TCExam Problem Types: CWE-89 Description: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0
CVE ID: CVE-2025-23177 State: PUBLISHED Published: 2025-04-29T16:01:40.556Z Last Updated: 2025-04-29T17:56:14.312Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: Ribbon Communications Products: Apollo 9608 Problem Types: CWE-427 Description: CWE-427: Uncontrolled Search Path Element Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0