Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298093 - https://vuldb.com/?ctiid.298093 - https://vuldb.com/?submit.504478 - https://github.com/caigo8/CVE-md/blob/main/zz/zz_2024_8_SQL%E6%B3%A8%E5%85%A51.md
CVE ID: CVE-2025-1821 State: PUBLISHED Published: 2025-03-02T18:31:04.641Z Last Updated: 2025-03-03T18:50:37.810Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: zj1983 Products: zz Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in zj1983 zz up to 2024-8 and classified as critical. Affected by this issue is the function getUserOrgForUserId of the file src/main/java/com/futvan/z/system/zorg/ZorgAction.java. The manipulation of the argument userID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additio
the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298094 - https://vuldb.com/?ctiid.298094 - https://vuldb.com/?submit.504537 - https://github.com/caigo8/CVE-md/blob/main/zz/ZZ_2024_8%E5%89%8D%E5%8F%B0SQL%E6%B3%A8%E5%85%A5.md
CVE ID: CVE-2025-1826 State: PUBLISHED Published: 2025-10-07T17:50:00.512Z Last Updated: 2025-10-14T18:24:39.313Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Jazz Foundation Problem Types: CWE-79 Description: IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2 to 7.0.2 iFix034, 7.0.3 to 7.0.3 iFix016, and 7.1.0 to 7.1.0 iFix004) is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users on the host network to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analys
ing the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7247292
CVE ID: CVE-2025-1828 State: PUBLISHED Published: 2025-03-10T23:51:33.279Z Last Updated: 2025-09-09T13:56:40.704Z Vendors: perl Products: Crypt::Random Problem Types: CWE-338, CWE-331 Description: Crypt::Random Perl package 1.05 through 1.55 may use rand() function, which is not cryptographically strong, for cryptographic functions. If the Provider is not specified and /dev/urandom or an Entropy Gathering Daemon (egd) service is not available Crypt::Random will default to use the insecure Crypt::Random::rand provider. In particular, Windows versions of perl will encounter this issue by default. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://perldoc.perl.org/function
his issue by default. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://perldoc.perl.org/functions/rand - https://github.com/perl-Crypt-OpenPGP/Crypt-Random/pull/1 - https://github.com/perl-Crypt-OpenPGP/Crypt-Random/commit/1f8b29e9e89d8d083fd025152e76ec918136cc05
CVE ID: CVE-2025-1829 State: PUBLISHED Published: 2025-03-02T19:00:07.619Z Last Updated: 2025-03-03T18:05:43.969Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: TOTOLINK Products: X18 Problem Types: CWE-78, CWE-77 Description: A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been declared as critical. This vulnerability affects the function setMtknatCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mtkhnatEnable leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additiona
e public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298096 - https://vuldb.com/?ctiid.298096 - https://vuldb.com/?submit.504983 - https://github.com/sjwszt/CVE/blob/main/CVE_2.md - https://www.totolink.net/
CVE ID: CVE-2025-1830 State: PUBLISHED Published: 2025-03-02T19:31:03.920Z Last Updated: 2025-03-03T21:26:27.122Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: zj1983 Products: zz Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as problematic. This issue affects some unknown processing of the component Customer Information Handler. The manipulation of the argument Customer Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Not
may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298097 - https://vuldb.com/?ctiid.298097 - https://vuldb.com/?submit.504790 - https://github.com/caigo8/CVE-md/blob/main/zz/zz_xss1.md
CVE ID: CVE-2025-1831 State: PUBLISHED Published: 2025-03-02T20:00:07.785Z Last Updated: 2025-03-03T18:04:59.151Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: zj1983 Products: zz Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is the function GetDBUser of the file src/main/java/com/futvan/z/system/zorg/ZorgAction.java. The manipulation of the argument user_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst N
d may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298098 - https://vuldb.com/?ctiid.298098 - https://vuldb.com/?submit.504806 - https://github.com/caigo8/CVE-md/blob/main/zz/ZZ_2024_8%E5%89%8D%E5%8F%B0SQL%E6%B3%A8%E5%85%A52.md
CVE ID: CVE-2025-1832 State: PUBLISHED Published: 2025-03-02T21:00:08.820Z Last Updated: 2025-03-03T18:04:03.477Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: zj1983 Products: zz Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is the function getUserList of the file src/main/java/com/futvan/z/system/zrole/ZroleAction.java. The manipulation of the argument roleid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additiona
e public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298099 - https://vuldb.com/?ctiid.298099 - https://vuldb.com/?submit.504814 - https://github.com/caigo8/CVE-md/blob/main/zz/zz_2024_8_4%E5%90%8E%E5%8F%B0SQL%E6%B3%A8%E5%85%A5.md
CVE ID: CVE-2025-1833 State: PUBLISHED Published: 2025-03-02T21:31:04.311Z Last Updated: 2025-03-03T17:42:56.733Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: zj1983 Products: zz Problem Types: CWE-918 Description: A vulnerability, which was classified as critical, has been found in zj1983 zz up to 2024-8. Affected by this issue is the function sendNotice of the file src/main/java/com/futvan/z/erp/customer_notice/Customer_noticeAction.java of the component HTTP Request Handler. The manipulation of the argument url leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted ea
tack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298100 - https://vuldb.com/?ctiid.298100 - https://vuldb.com/?submit.504833 - https://github.com/caigo8/CVE-md/blob/main/zz/zz_2024_8%E5%90%8E%E5%8F%B0SSRF.md
CVE ID: CVE-2025-1834 State: PUBLISHED Published: 2025-03-02T22:00:06.192Z Last Updated: 2025-03-03T20:09:51.021Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: zj1983 Products: zz Problem Types: CWE-434, CWE-284 Description: A vulnerability, which was classified as critical, was found in zj1983 zz up to 2024-8. This affects an unknown part of the file /resolve. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
d early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298101 - https://vuldb.com/?ctiid.298101 - https://vuldb.com/?submit.504842 - https://github.com/caigo8/CVE-md/blob/main/zz/zz_resolve%E6%8E%A5%E5%8F%A3%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md
CVE ID: CVE-2025-1835 State: PUBLISHED Published: 2025-03-02T22:31:04.757Z Last Updated: 2025-03-03T20:08:58.014Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: osuuu Products: LightPicture Problem Types: CWE-434, CWE-284 Description: A vulnerability has been found in osuuu LightPicture 1.2.2 and classified as critical. This vulnerability affects the function upload of the file /app/controller/Api.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298102 - https://vuldb.co
e used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298102 - https://vuldb.com/?ctiid.298102 - https://vuldb.com/?submit.505007 - https://github.com/sheratan4/cve/issues/1
CVE ID: CVE-2025-1836 State: PUBLISHED Published: 2025-03-02T23:00:06.059Z Last Updated: 2025-03-03T20:08:11.685Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: n/a Products: Incorta Problem Types: CWE-1236, CWE-74 Description: A vulnerability was found in Incorta 2023.4.3. It has been classified as problematic. Affected is an unknown function of the component Edit Insight Handler. The manipulation of the argument Service Name leads to csv injection. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
sclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298104 - https://vuldb.com/?ctiid.298104 - https://vuldb.com/?submit.503070
CVE ID: CVE-2025-1838 State: PUBLISHED Published: 2025-05-03T18:23:26.127Z Last Updated: 2025-08-28T14:28:40.693Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Cloud Pak for Business Automation Problem Types: CWE-602 Description: IBM Cloud Pak for Business Automation 24.0.0 and 24.0.1 through 24.0.1 IF001 Authoring allows an authenticated user to bypass client-side data validation in an authoring user interface which could cause a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7232429
CVE ID: CVE-2025-1840 State: PUBLISHED Published: 2025-03-02T23:31:04.737Z Last Updated: 2025-03-03T20:07:54.768Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: ESAFENET Products: CDG Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been rated as critical. Affected by this issue is some unknown functionality of the file /CDGServer3/workflowE/useractivate/updateorg.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298106
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298106 - https://vuldb.com/?ctiid.298106 - https://vuldb.com/?submit.504384 - https://github.com/Rain1er/report/blob/main/CDG/dXBkYXRlb3JnLmpzcA%3D%3D.md
CVE ID: CVE-2025-1841 State: PUBLISHED Published: 2025-03-03T00:00:08.714Z Last Updated: 2025-03-03T20:06:30.831Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: ESAFENET Products: CDG Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in ESAFENET CDG 5.6.3.154.205. This affects an unknown part of the file /CDGServer3/logManagement/ClientSortLog.jsp. The manipulation of the argument startDate/endDate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298107 - https:/
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298107 - https://vuldb.com/?ctiid.298107 - https://vuldb.com/?submit.504385 - https://github.com/Rain1er/report/blob/main/CDG/Q2xpZW50U29ydExvZy5qc3A%3D.md
CVE ID: CVE-2025-1842 State: PUBLISHED Published: 2025-03-03T00:31:04.662Z Last Updated: 2025-03-03T21:25:38.853Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: FITSTATS Technologies Products: AthleteMonitoring Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. A
ed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298108 - https://vuldb.com/?ctiid.298108 - https://vuldb.com/?submit.504603
CVE ID: CVE-2025-1843 State: PUBLISHED Published: 2025-03-03T01:00:09.082Z Last Updated: 2025-03-03T17:40:09.979Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: Mini-Tmall Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20250211. This issue affects the function select of the file com/xq/tmall/dao/ProductMapper.java. The manipulation of the argument orderBy leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Note
ay be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298109 - https://vuldb.com/?ctiid.298109 - https://vuldb.com/?submit.504958 - https://github.com/qkdjksfkeg/cve_article/blob/main/Tmall_demo/SQL%20injection.md
CVE ID: CVE-2025-1844 State: PUBLISHED Published: 2025-03-03T01:31:04.149Z Last Updated: 2025-03-03T17:38:44.763Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: ESAFENET Products: CDG Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. Affected is an unknown function of the file /CDGServer3/logManagement/backupLogDetail.jsp. The manipulation of the argument logTaskId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additio
the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298110 - https://vuldb.com/?ctiid.298110 - https://vuldb.com/?submit.505008 - https://github.com/666lail/report/blob/main/tmp/1.md
CVE ID: CVE-2025-1845 State: PUBLISHED Published: 2025-03-03T02:00:07.748Z Last Updated: 2025-03-03T17:33:24.173Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: ESAFENET Products: DSM Problem Types: CWE-77, CWE-74 Description: A vulnerability has been found in ESAFENET DSM 3.1.2 and classified as critical. Affected by this vulnerability is the function examExportPDF of the file /admin/plan/examExportPDF. The manipulation of the argument s leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CIS
ed. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298111 - https://vuldb.com/?ctiid.298111 - https://vuldb.com/?submit.505009 - https://github.com/666lail/report/blob/main/tmp/2.md
CVE ID: CVE-2025-1846 State: PUBLISHED Published: 2025-03-03T02:31:04.750Z Last Updated: 2025-03-03T17:32:35.153Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P) Vendors: zj1983 Products: zz Problem Types: CWE-404 Description: A vulnerability was found in zj1983 zz up to 2024-8. It has been declared as problematic. This vulnerability affects the function deleteLocalFile of the file src/main/java/com/futvan/z/system/zfile/ZfileAction.java of the component File Handler. The manipulation of the argument zids leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but
The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298114 - https://vuldb.com/?ctiid.298114 - https://vuldb.com/?submit.505097 - https://github.com/caigo8/CVE-md/blob/main/zz/zz_2024_8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%88%A0%E9%99%A4.md
CVE ID: CVE-2025-1847 State: PUBLISHED Published: 2025-03-03T03:00:08.622Z Last Updated: 2025-03-03T17:31:51.406Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: zj1983 Products: zz Problem Types: CWE-285, CWE-266 Description: A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298115 - h
ot respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298115 - https://vuldb.com/?ctiid.298115 - https://vuldb.com/?submit.505303 - https://github.com/caigo8/CVE-md/blob/main/zz/ZZ_2024_8%E5%9E%82%E7%9B%B4%E8%B6%8A%E6%9D%83.md
CVE ID: CVE-2025-1848 State: PUBLISHED Published: 2025-03-03T03:31:04.563Z Last Updated: 2025-03-03T17:22:35.499Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: zj1983 Products: zz Problem Types: CWE-918 Description: A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is an unknown function of the file /import_data_check. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
ted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298116 - https://vuldb.com/?ctiid.298116 - https://vuldb.com/?submit.505345 - https://github.com/caigo8/CVE-md/blob/main/zz/zz_import_data_check_SSRF.md
CVE ID: CVE-2025-1849 State: PUBLISHED Published: 2025-03-03T04:00:09.157Z Last Updated: 2025-03-03T17:20:51.596Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: zj1983 Products: zz Problem Types: CWE-918 Description: A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is an unknown functionality of the file /import_data_todb. The manipulation of the argument url leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnric
r was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298117 - https://vuldb.com/?ctiid.298117 - https://vuldb.com/?submit.505346 - https://github.com/caigo8/CVE-md/blob/main/zz/zz_import_data_todb_SSRF.md
CVE ID: CVE-2025-1850 State: PUBLISHED Published: 2025-03-03T04:31:04.196Z Last Updated: 2025-03-03T17:20:18.049Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Codezips Products: College Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in Codezips College Management System 1.0. Affected by this issue is some unknown functionality of the file /university.php. The manipulation of the argument book_name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298118 - https://vuldb.com/?ctiid.298118 - https://vuldb.com/?submit.511626 - https://github.com/WHOAMI-xiaoyu/CVE/blob/main/CVE_2.md
CVE ID: CVE-2025-1851 State: PUBLISHED Published: 2025-03-03T05:00:07.574Z Last Updated: 2025-03-03T17:19:41.764Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: AC7 Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, was found in Tenda AC7 up to 15.03.06.44. This affects the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298119 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298119 - https://vuldb.com/?ctiid.298119 - https://vuldb.com/?submit.505271 - https://github.com/Raining-101/IOT_cve/blob/main/ac7_V15.03.06.44_SetFirewallCfg.md - https://www.tenda.com.cn/