Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-3118 State: PUBLISHED Published: 2025-04-02T21:00:12.775Z Last Updated: 2025-04-06T05:29:44.536Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Tutor Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been classified as critical. This affects an unknown part of the file /tutor/courses/view_course.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.30
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303009 - https://vuldb.com/?ctiid.303009 - https://vuldb.com/?submit.524985 - https://github.com/byxs0x0/SQL/blob/main/SQL3.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-3119 State: PUBLISHED Published: 2025-04-02T21:31:05.341Z Last Updated: 2025-04-06T05:29:59.698Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Tutor Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /tutor/courses/manage_course.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303010 - https://vuldb.com/?ctiid.303010 - https://vuldb.com/?submit.524990 - https://github.com/byxs0x0/SQL/blob/main/SQL4.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-3120 State: PUBLISHED Published: 2025-04-02T21:31:07.699Z Last Updated: 2025-04-06T05:30:16.175Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Apartment Visitors Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Apartment Visitors Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /add-apartment.php. The manipulation of the argument apartmentno leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Anal
he exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303011 - https://vuldb.com/?ctiid.303011 - https://vuldb.com/?submit.524991 - https://github.com/byxs0x0/SQL/blob/main/SQL5.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-3121 State: PUBLISHED Published: 2025-04-02T22:00:12.390Z Last Updated: 2025-04-03T19:26:25.202Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: PyTorch Problem Types: CWE-119 Description: A vulnerability classified as problematic has been found in PyTorch 2.6.0. Affected is the function torch.jit.jit_module_from_flatbuffer. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303012 - https://vuldb.com/?ctiid.303012 - https://vuldb.com/?submi
DP Vulnrichment: References: - https://vuldb.com/?id.303012 - https://vuldb.com/?ctiid.303012 - https://vuldb.com/?submit.525049 - https://github.com/pytorch/pytorch/issues/149800 - https://github.com/pytorch/pytorch/issues/149800#issue-2940240700
CVE ID: CVE-2025-3122 State: PUBLISHED Published: 2025-04-02T22:00:14.705Z Last Updated: 2025-04-03T19:18:20.492Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: WebAssembly Products: wabt Problem Types: CWE-476, CWE-404 Description: A vulnerability classified as problematic was found in WebAssembly wabt 1.0.36. Affected by this vulnerability is the function BinaryReaderInterp::BeginFunctionBody of the file src/interp/binary-reader-interp.cc. The manipulation leads to null pointer dereference. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public an
y of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303013 - https://vuldb.com/?ctiid.303013 - https://vuldb.com/?submit.525091 - https://github.com/WebAssembly/wabt/issues/2565 - https://github.com/WebAssembly/wabt/issues/2565#issue-2927572319
CVE ID: CVE-2025-3123 State: PUBLISHED Published: 2025-04-02T22:31:04.900Z Last Updated: 2025-04-03T14:07:27.286Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: WonderCMS Problem Types: CWE-434, CWE-284 Description: A vulnerability, which was classified as critical, has been found in WonderCMS 3.5.0. Affected by this issue is the function installUpdateModuleAction of the component Theme Installation/Plugin Installation. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor explains, that "[t
and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor explains, that "[t]he philosophy has always been, admin [...] bear responsibility to not install themes/plugins from untrusted sources." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303014 - https://vuldb.com/?ctiid.303014 - https://vuldb.com/?submit.525101 - https://github.com/WonderCMS/wondercms/issues/330 - https://github.com/WonderCMS/wondercms/issues/330#issuecomment-2745347770 - https://github.com/WonderCMS/wondercms/issues/330#issue-2940381112
CVE ID: CVE-2025-3124 State: PUBLISHED Published: 2025-04-17T22:50:14.017Z Last Updated: 2025-04-18T12:02:10.223Z Vendors: GitHub Products: Enterprise Server Problem Types: CWE-862 Description: A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a user to see the names of private repositories that they wouldn't otherwise have access to in the Security Overview in GitHub Advanced Security. The Security Overview was required to be filtered only using the `archived:` filter and all other access controls were functioning normally. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.17 and was fixed in versions 3.13.14, 3.14.11
vulnerability affected all versions of GitHub Enterprise Server prior to 3.17 and was fixed in versions 3.13.14, 3.14.11, 3.15.6, and 3.16.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.14 - https://docs.github.com/en/enterprise-server@3.14/admin/release-notes#3.14.11 - https://docs.github.com/en/enterprise-server@3.15/admin/release-notes#3.15.6 - https://docs.github.com/en/enterprise-server@3.16/admin/release-notes#3.16.2
CVE ID: CVE-2025-3125 State: PUBLISHED Published: 2025-11-05T14:49:44.597Z Last Updated: 2025-11-05T18:59:01.426Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L) Vendors: WSO2 Products: WSO2 Identity Server, WSO2 Enterprise Integrator, WSO2 Open Banking IAM, WSO2 Identity Server as Key Manager, WSO2 API Manager, WSO2 API Control Plane, WSO2 Universal Gateway, WSO2 Traffic Manager, org.wso2.carbon.commons:org.wso2.carbon.application.upload Problem Types: CWE-434 Description: An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper input validation in the CarbonAppUploader admin service endpoint. An authenticated attacker with appropriate
to improper input validation in the CarbonAppUploader admin service endpoint. An authenticated attacker with appropriate privileges can upload a malicious file to a user-controlled location on the server, potentially leading to remote code execution (RCE). This functionality is restricted by default to admin users; therefore, successful exploitation requires valid credentials with administrative permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-3961/
CVE ID: CVE-2025-3128 State: PUBLISHED Published: 2025-08-21T19:37:28.430Z Last Updated: 2025-08-22T15:50:28.090Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Mitsubishi Electric Europe Products: smartRTU Problem Types: CWE-78 Description: A remote unauthenticated attacker who has bypassed authentication could execute arbitrary OS commands to disclose, tamper with, destroy or delete information in Mitsubishi Electric smartRTU, or cause a denial-of service condition on the product. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://emea.mitsubishielectric.com/fa/products/quality/quality-news-information - https://www.cisa.gov/news-e
rences: - https://emea.mitsubishielectric.com/fa/products/quality/quality-news-information - https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-09
CVE ID: CVE-2025-3129 State: PUBLISHED Published: 2025-04-02T21:10:22.236Z Last Updated: 2025-04-15T14:11:12.235Z Vendors: Drupal Products: Access code Problem Types: CWE-307 Description: Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-028
CVE ID: CVE-2025-3130 State: PUBLISHED Published: 2025-04-02T21:10:46.804Z Last Updated: 2025-04-03T13:18:28.164Z Vendors: Drupal Products: Obfuscate Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Obfuscate allows Stored XSS.This issue affects Obfuscate: from 0.0.0 before 2.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-029
CVE ID: CVE-2025-3131 State: PUBLISHED Published: 2025-04-09T17:47:34.125Z Last Updated: 2025-04-09T18:33:14.969Z Vendors: Drupal Products: ECA: Event - Condition - Action Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Drupal ECA: Event - Condition - Action allows Cross Site Request Forgery.This issue affects ECA: Event - Condition - Action: from 0.0.0 before 1.1.12, from 2.0.0 before 2.0.16, from 2.1.0 before 2.1.7, from 0.0.0 before 1.2.*. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-031
CVE ID: CVE-2025-3134 State: PUBLISHED Published: 2025-04-03T01:31:04.817Z Last Updated: 2025-04-03T13:55:20.733Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Payroll Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Payroll Management System 1.0. This affects an unknown part of the file /add_overtime.php. The manipulation of the argument rate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303039 - ht
blic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303039 - https://vuldb.com/?ctiid.303039 - https://vuldb.com/?submit.525102 - https://github.com/Brauchitsch-Wang/cve/blob/main/cve.md - https://code-projects.org/
CVE ID: CVE-2025-3135 State: PUBLISHED Published: 2025-04-03T01:31:09.657Z Last Updated: 2025-04-03T13:39:14.599Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: fcba_zzm Products: ics-park Smart Park Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in fcba_zzm ics-park Smart Park Management System 2.1. This vulnerability affects unknown code of the file /api/system/dept/update. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303040 - https:/
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303040 - https://vuldb.com/?ctiid.303040 - https://vuldb.com/?submit.525136 - https://www.yuque.com/yuqueyonghuveuwuh/aveeid/yvtgf3ynsi949ve3?singleDoc
CVE ID: CVE-2025-3136 State: PUBLISHED Published: 2025-04-03T03:31:05.598Z Last Updated: 2025-04-03T13:31:31.510Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: PyTorch Problem Types: CWE-119 Description: A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0. This issue affects the function torch.cuda.memory.caching_allocator_delete of the file c10/cuda/CUDACachingAllocator.cpp. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303041
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303041 - https://vuldb.com/?ctiid.303041 - https://vuldb.com/?submit.525252 - https://github.com/pytorch/pytorch/issues/149821 - https://github.com/pytorch/pytorch/issues/149821#issuecomment-2765311086 - https://github.com/pytorch/pytorch/issues/149821#issue-2940838975
CVE ID: CVE-2025-3137 State: PUBLISHED Published: 2025-04-03T03:31:08.651Z Last Updated: 2025-04-03T13:29:33.862Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Security Guards Hiring System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Online Security Guards Hiring System 1.0. Affected is an unknown function of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303042 - https://vuldb.com/?ctiid.303042 - https://vuldb.com/?submit.525264 - https://github.com/ARPANET-cybersecurity/vuldb/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-3138 State: PUBLISHED Published: 2025-04-03T04:00:18.633Z Last Updated: 2025-04-03T13:21:02.312Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Security Guards Hiring System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Online Security Guards Hiring System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit-guard-detail.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichm
d remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303043 - https://vuldb.com/?ctiid.303043 - https://vuldb.com/?submit.525265 - https://github.com/ARPANET-cybersecurity/vuldb/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-3139 State: PUBLISHED Published: 2025-04-03T04:00:20.465Z Last Updated: 2025-04-03T13:14:32.456Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Bus Reservation System Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in code-projects Bus Reservation System 1.0 and classified as critical. Affected by this issue is the function Login of the component Login Form. The manipulation of the argument Str1 leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
he exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303044 - https://vuldb.com/?ctiid.303044 - https://vuldb.com/?submit.525305 - https://github.com/LxxxtSec/CVE/blob/main/CVE-Lxxxt.md - https://code-projects.org/
CVE ID: CVE-2025-3140 State: PUBLISHED Published: 2025-04-03T04:31:05.693Z Last Updated: 2025-04-06T05:30:29.683Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Medicine Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /view_category.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303045 - https://vuldb.com/?ctiid.303045 - https://vuldb.com/?submit.525308 - https://github.com/Lena-lyy/SQL/blob/main/SQL1.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-3141 State: PUBLISHED Published: 2025-04-03T05:00:16.544Z Last Updated: 2025-04-06T05:30:51.791Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Medicine Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /manage_category.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303046 - https://vuldb.com/?ctiid.303046 - https://vuldb.com/?submit.525309 - https://github.com/Lena-lyy/SQL/blob/main/SQL2.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-3142 State: PUBLISHED Published: 2025-04-03T05:31:05.298Z Last Updated: 2025-04-06T05:31:07.768Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Apartment Visitor Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /add-apartment.php. The manipulation of the argument buildingno leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected. Additional Analyst Note
exploit has been disclosed to the public and may be used. Multiple parameters might be affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303047 - https://vuldb.com/?ctiid.303047 - https://vuldb.com/?submit.525320 - https://github.com/Lena-lyy/SQL/blob/main/SQL3.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-3143 State: PUBLISHED Published: 2025-04-03T06:00:12.442Z Last Updated: 2025-04-06T05:31:21.737Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Apartment Visitor Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in SourceCodester Apartment Visitor Management System 1.0. Affected is an unknown function of the file /visitor-entry.php. The manipulation of the argument visname/address leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected. Additional Analyst Notes
xploit has been disclosed to the public and may be used. Multiple parameters might be affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303048 - https://vuldb.com/?ctiid.303048 - https://vuldb.com/?submit.525321 - https://github.com/Lena-lyy/SQL/blob/main/SQL4.md - https://github.com/Lena-lyy/SQL/blob/main/SQL5.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-3144 State: PUBLISHED Published: 2025-04-03T06:00:19.126Z Last Updated: 2025-04-03T13:46:06.667Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: MindSpore Problem Types: CWE-119 Description: A vulnerability classified as problematic was found in MindSpore 2.5.0. Affected by this vulnerability is the function mindspore.numpy.fft.hfftn. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303049 - https://vuldb.com/?ctiid.303049 - https://v
Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303049 - https://vuldb.com/?ctiid.303049 - https://vuldb.com/?submit.525333 - https://gitee.com/mindspore/mindspore/issues/IBVKM8
CVE ID: CVE-2025-3145 State: PUBLISHED Published: 2025-04-03T06:31:11.782Z Last Updated: 2025-04-03T19:13:01.851Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: MindSpore Problem Types: CWE-119 Description: A vulnerability, which was classified as problematic, has been found in MindSpore 2.5.0. Affected by this issue is the function mindspore.numpy.fft.rfft2. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303050 - https://vuldb.com/?ctiid.303050 - https://gite
es: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303050 - https://vuldb.com/?ctiid.303050 - https://gitee.com/mindspore/mindspore/issues/IBVKM8
CVE ID: CVE-2025-3146 State: PUBLISHED Published: 2025-04-03T06:31:14.559Z Last Updated: 2025-11-11T18:14:01.314Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Bus Pass Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Bus Pass Management System 1.0. This affects an unknown part of the file /view-pass-detail.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: -
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.303051 - https://vuldb.com/?ctiid.303051 - https://vuldb.com/?submit.525340 - https://github.com/nabiland/cve/issues/1 - https://phpgurukul.com/