Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-2356 State: PUBLISHED Published: 2025-03-17T01:00:07.179Z Last Updated: 2025-03-17T13:37:54.918Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: BlackVue Products: App Problem Types: CWE-598 Description: A vulnerability was found in BlackVue App 3.65 on Android. It has been classified as problematic. This affects the function deviceDelete of the component API Handler. The manipulation leads to use of get request method with sensitive query strings. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. T
rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299823 - https://vuldb.com/?ctiid.299823 - https://github.com/geo-chen/BlackVue/blob/main/README.md#finding-2-hardcoded-secrets-exposed-in-plaintext--client-secrets-sent-via-get
CVE ID: CVE-2025-2357 State: PUBLISHED Published: 2025-03-17T01:31:04.874Z Last Updated: 2025-11-03T19:43:06.629Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: n/a Products: DCMTK Problem Types: CWE-119 Description: A vulnerability was found in DCMTK 3.6.9. It has been declared as critical. This vulnerability affects unknown code of the component dcmjpls JPEG-LS Decoder. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 3239a7915. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container:
mmended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.299824 - https://vuldb.com/?ctiid.299824 - https://vuldb.com/?submit.513692 - https://support.dcmtk.org/redmine/issues/1155 - https://support.dcmtk.org/redmine/issues/1155?tab=history#note-1
CVE ID: CVE-2025-2358 State: PUBLISHED Published: 2025-03-17T03:00:12.128Z Last Updated: 2025-03-17T13:11:43.240Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Shenzhen Mingyuan Cloud Technology Products: Mingyuan Real Estate ERP System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Shenzhen Mingyuan Cloud Technology Mingyuan Real Estate ERP System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /Kfxt/Service.asmx of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and m
ded-For leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299825 - https://vuldb.com/?ctiid.299825 - https://vuldb.com/?submit.513708 - https://flowus.cn/share/fa5b99da-2e88-4efd-9266-ae8582782eaa?code=HC3R4E
CVE ID: CVE-2025-2359 State: PUBLISHED Published: 2025-03-17T03:31:06.967Z Last Updated: 2025-03-17T13:06:21.206Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: D-Link Products: DIR-823G Problem Types: CWE-285, CWE-266 Description: A vulnerability classified as critical has been found in D-Link DIR-823G 1.0.2B05_20181207. Affected is the function SetDDNSSettings of the file /HNAP1/ of the component DDNS Service. The manipulation of the argument SOAPAction leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintain
sed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299826 - https://vuldb.com/?ctiid.299826 - https://vuldb.com/?submit.513750 - https://lavender-bicycle-a5a.notion.site/D-Link-DIR-823G-SetDDNSSettings-1ac53a41781f80d98649dd3cbe106e9b?pvs=4 - https://www.dlink.com/
CVE ID: CVE-2025-2360 State: PUBLISHED Published: 2025-03-17T04:00:06.904Z Last Updated: 2025-03-17T14:46:31.913Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: D-Link Products: DIR-823G Problem Types: CWE-285, CWE-266 Description: A vulnerability classified as critical was found in D-Link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is the function SetUpnpSettings of the file /HNAP1/ of the component UPnP Service. The manipulation of the argument SOAPAction leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the
n disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299827 - https://vuldb.com/?ctiid.299827 - https://vuldb.com/?submit.513751 - https://lavender-bicycle-a5a.notion.site/D-Link-DIR-823G-SetUpnpSettings-1ac53a41781f80d1a290c8d5da3e795e?pvs=4 - https://www.dlink.com/
CVE ID: CVE-2025-2361 State: PUBLISHED Published: 2025-03-17T04:31:03.639Z Last Updated: 2025-03-27T21:02:46.983Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Mercurial Products: SCM Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Mercurial SCM 4.5.3/71.19.145.211. It has been declared as problematic. This vulnerability affects unknown code of the component Web Interface. The manipulation of the argument cmd leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA A
The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.299860 - https://vuldb.com/?ctiid.299860 - https://vuldb.com/?submit.514024
CVE ID: CVE-2025-2362 State: PUBLISHED Published: 2025-03-17T05:00:07.889Z Last Updated: 2025-03-17T13:01:02.535Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Pre-School Enrollment System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/contact-us.php. The manipulation of the argument mobnum leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vuln
sed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299861 - https://vuldb.com/?ctiid.299861 - https://vuldb.com/?submit.514464 - https://github.com/12T40910/CVE/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-2363 State: PUBLISHED Published: 2025-03-17T05:31:06.394Z Last Updated: 2025-03-17T12:59:55.885Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: lenve Products: VBlog Problem Types: CWE-22 Description: A vulnerability classified as critical has been found in lenve VBlog up to 1.0.0. Affected is the function uploadImg of the file blogserver/src/main/java/org/sang/controller/ArticleController.java. The manipulation of the argument filename leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional
public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299862 - https://vuldb.com/?ctiid.299862 - https://vuldb.com/?submit.514721 - https://www.notion.so/Arbitrary-File-Upload-Vulnerability-in-VBlog-1-0-0-1adc693918ed8067b19ed9c61381024b
CVE ID: CVE-2025-2364 State: PUBLISHED Published: 2025-03-17T06:00:08.959Z Last Updated: 2025-03-17T14:44:51.416Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: lenve Products: VBlog Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function addNewArticle of the file blogserver/src/main/java/org/sang/service/ArticleService.java. The manipulation of the argument mdContent/htmlContent leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did
exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299863 - https://vuldb.com/?ctiid.299863 - https://vuldb.com/?submit.514763 - https://magnificent-dill-351.notion.site/Stored-XSS-Vulnerability-in-VBlog-1-0-0-1adc693918ed80d9bd08e03df0ed7a98
CVE ID: CVE-2025-2365 State: PUBLISHED Published: 2025-03-17T06:31:04.154Z Last Updated: 2025-03-17T14:41:38.830Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: crmeb_java Problem Types: CWE-611, CWE-610 Description: A vulnerability, which was classified as problematic, has been found in crmeb_java up to 1.3.4. Affected by this issue is the function webHook of the file WeChatMessageController.java. The manipulation leads to xml external entity reference. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299864 - https://vuldb.com/
used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299864 - https://vuldb.com/?ctiid.299864 - https://vuldb.com/?submit.513285 - https://github.com/jmx0hxq/Vulnerability-learning/blob/main/crmeb-java-xxe1.md
CVE ID: CVE-2025-2366 State: PUBLISHED Published: 2025-03-17T07:00:06.216Z Last Updated: 2025-03-17T14:33:34.122Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: gougucms Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in gougucms 4.08.18. This affects the function add of the file /admin/department/add of the component Add Department Page. The manipulation of the argument title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additio
the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299865 - https://vuldb.com/?ctiid.299865 - https://vuldb.com/?submit.515044 - https://github.com/caigo8/CVE-md/blob/main/gougucms/gougucms_v4.08.18_XSS.md
CVE ID: CVE-2025-2367 State: PUBLISHED Published: 2025-03-17T07:31:03.916Z Last Updated: 2025-03-17T14:28:33.312Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Oiwtech Products: OIW-2431APGN-HP Problem Types: CWE-78, CWE-77 Description: A vulnerability has been found in Oiwtech OIW-2431APGN-HP 2.5.3-B20131128 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formScript of the component Personal Script Submenu. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
sed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299866 - https://vuldb.com/?ctiid.299866 - https://vuldb.com/?submit.515126
CVE ID: CVE-2025-2368 State: PUBLISHED Published: 2025-03-17T08:00:05.922Z Last Updated: 2025-03-17T16:25:00.678Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: WebAssembly Products: wabt Problem Types: CWE-122, CWE-119 Description: A vulnerability was found in WebAssembly wabt 1.0.36 and classified as critical. This issue affects the function wabt::interp::(anonymous namespace)::BinaryReaderInterp::OnExport of the file wabt/src/interp/binary-reader-interp.cc of the component Malformed File Handler. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply
ack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299867 - https://vuldb.com/?ctiid.299867 - https://vuldb.com/?submit.515327 - https://github.com/WebAssembly/wabt/issues/2556 - https://github.com/WebAssembly/wabt/issues/2537 - https://github.com/WebAssembly/wabt/issues/2556#issue-2899598349 - https://github.com/WebAssembly/wabt/pull/2541
CVE ID: CVE-2025-2369 State: PUBLISHED Published: 2025-03-17T08:31:07.147Z Last Updated: 2025-03-17T16:22:33.739Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TOTOLINK Products: EX1800T Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been classified as critical. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument admpass leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299868 - https://vuldb.com/?ctiid.299868 - https://vuldb.com/?submit.515328 - https://github.com/kn0sky/cve/blob/main/TOTOLINK%20EX1800T/Stack-based%20Buffer%20Overflow%2002%20setPasswordCfg-_admpass.md - https://www.totolink.net/
CVE ID: CVE-2025-2370 State: PUBLISHED Published: 2025-03-17T09:00:09.912Z Last Updated: 2025-03-17T16:08:06.591Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TOTOLINK Products: EX1800T Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been declared as critical. Affected by this vulnerability is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliSsid leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299869 - https://vuldb.com/?ctiid.299869 - https://vuldb.com/?submit.515329 - https://github.com/kn0sky/cve/blob/main/TOTOLINK%20EX1800T/Stack-based%20Buffer%20Overflow%2003%20setWiFiExtenderConfig-_apcliSsid.md - https://www.totolink.net/
CVE ID: CVE-2025-2371 State: PUBLISHED Published: 2025-03-17T09:31:05.459Z Last Updated: 2025-03-17T12:31:09.897Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Human Metapneumovirus Testing Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /registered-user-testing.php of the component Registered Mobile Number Search. The manipulation of the argument regmobilenumber leads to cross site scripting. The attack may be launched remotely. The exploit has been disclo
argument regmobilenumber leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299870 - https://vuldb.com/?ctiid.299870 - https://vuldb.com/?submit.515347 - https://github.com/sorcha-l/cve/blob/main/Human%20Metapneumovirus%20(HMPV)%20%E2%80%93%20Testing%20Management%20System%20%20XSS%20in%20registered-user-testing.php.md - https://phpgurukul.com/
CVE ID: CVE-2025-2372 State: PUBLISHED Published: 2025-03-17T10:00:12.484Z Last Updated: 2025-03-17T12:29:26.444Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Human Metapneumovirus Testing Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This affects an unknown part of the file /password-recovery.php of the component Password Recovery Page. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional
t is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299871 - https://vuldb.com/?ctiid.299871 - https://vuldb.com/?submit.515389 - https://github.com/SECWG/cve/issues/5 - https://phpgurukul.com/
CVE ID: CVE-2025-2373 State: PUBLISHED Published: 2025-03-17T10:31:05.429Z Last Updated: 2025-03-17T12:07:44.253Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Human Metapneumovirus Testing Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This vulnerability affects unknown code of the file /check_availability.php. The manipulation of the argument mobnumber/employeeid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnr
iated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299872 - https://vuldb.com/?ctiid.299872 - https://vuldb.com/?submit.515408 - https://github.com/SECWG/cve/issues/6 - https://phpgurukul.com/
CVE ID: CVE-2025-2374 State: PUBLISHED Published: 2025-03-17T11:00:18.566Z Last Updated: 2025-03-17T12:06:05.126Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Human Metapneumovirus Testing Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument aid/adminname/mobilenumber/email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst No
he attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299873 - https://vuldb.com/?ctiid.299873 - https://vuldb.com/?submit.515429 - https://github.com/SECWG/cve/issues/7 - https://phpgurukul.com/
CVE ID: CVE-2025-2375 State: PUBLISHED Published: 2025-03-17T11:31:06.000Z Last Updated: 2025-03-17T16:06:21.510Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Human Metapneumovirus Testing Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. Affected is an unknown function of the file /profile.php of the component Admin Profile Page. The manipulation of the argument email leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional A
It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299874 - https://vuldb.com/?ctiid.299874 - https://vuldb.com/?submit.515444 - https://github.com/SECWG/cve/issues/8 - https://phpgurukul.com/
CVE ID: CVE-2025-2376 State: PUBLISHED Published: 2025-03-17T12:00:07.802Z Last Updated: 2025-03-17T15:57:02.289Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: viames Products: Pair Framework Problem Types: CWE-502, CWE-20 Description: A vulnerability has been found in viames Pair Framework up to 1.9.11 and classified as critical. Affected by this vulnerability is the function getCookieContent of the file /src/UserRemember.php of the component PHP Object Handler. The manipulation of the argument cookieName leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299875 - https://vuldb.com/?ctiid.299875 - https://vuldb.com/?submit.515735 - https://gist.github.com/mcdruid/1997e10026833d2d1f3e359d75b5912a
CVE ID: CVE-2025-2377 State: PUBLISHED Published: 2025-03-17T12:31:04.713Z Last Updated: 2025-03-17T15:52:26.866Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Vehicle Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in SourceCodester Vehicle Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /confirmbooking.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions contradicting product names. Additi
en disclosed to the public and may be used. The initial researcher advisory mentions contradicting product names. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299876 - https://vuldb.com/?ctiid.299876 - https://vuldb.com/?submit.515797 - https://github.com/Keyand/Multi-Restaurant-Table-Reservation-System-Search/blob/main/Vehicle%20Management%20System%20confirmbooking.php%20has%20Cross-site%20Scripting%20(XSS).pdf - https://www.sourcecodester.com/
CVE ID: CVE-2025-2378 State: PUBLISHED Published: 2025-03-17T13:00:07.987Z Last Updated: 2025-03-17T13:54:59.723Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Medical Card Generation System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Medical Card Generation System 1.0. It has been classified as critical. This affects an unknown part of the file /download-medical-cards.php. The manipulation of the argument searchdata leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https