Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-60710 State: PUBLISHED Published: 2025-11-11T17:59:25.479Z Last Updated: 2025-11-21T19:06:46.643Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 11 Version 25H2 Problem Types: CWE-59 Description: Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60710
CVE ID: CVE-2025-60711 State: PUBLISHED Published: 2025-10-31T19:29:01.444Z Last Updated: 2025-11-22T04:09:59.346Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: CWE-693 Description: Protection mechanism failure in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60711
CVE ID: CVE-2025-60713 State: PUBLISHED Published: 2025-11-11T17:59:36.265Z Last Updated: 2025-11-21T19:06:59.388Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2025 (Server Core installation), Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-822 Description: Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. Add
nce in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60713
CVE ID: CVE-2025-60714 State: PUBLISHED Published: 2025-11-11T17:59:36.834Z Last Updated: 2025-11-21T19:06:59.972Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), W
Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-122 Description: Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60714
CVE ID: CVE-2025-60715 State: PUBLISHED Published: 2025-11-11T17:59:37.399Z Last Updated: 2025-11-21T19:07:00.520Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 Version 25H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Cor
dows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-122 Description: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. Additional Analyst Notes: - CISA ADP Vu
ess Service (RRAS) allows an authorized attacker to execute code over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60715
CVE ID: CVE-2025-60716 State: PUBLISHED Published: 2025-11-11T17:59:37.998Z Last Updated: 2025-11-21T19:07:01.067Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 Version 25H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025 Problem Types: CWE-416 Description: Use after free in Windows DirectX allows a
dows 11 Version 24H2, Windows Server 2025 Problem Types: CWE-416 Description: Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60716
CVE ID: CVE-2025-60717 State: PUBLISHED Published: 2025-11-11T17:59:38.592Z Last Updated: 2025-11-21T19:07:01.697Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 Version 25H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025 Problem Types: CWE-416 Description: Use after free in Windows Broadcast DVR User Service allows an
Windows Server 2025 Problem Types: CWE-416 Description: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60717
CVE ID: CVE-2025-60718 State: PUBLISHED Published: 2025-11-11T17:59:39.236Z Last Updated: 2025-11-21T19:07:02.262Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 11 Version 24H2, Windows 11 Version 25H2 Problem Types: CWE-426 Description: Untrusted search path in Windows Administrator Protection allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60718
CVE ID: CVE-2025-60719 State: PUBLISHED Published: 2025-11-11T17:59:29.947Z Last Updated: 2025-11-21T19:06:51.437Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 Version 25H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Cor
dows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-822 Description: Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vul
Driver for WinSock allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60719
CVE ID: CVE-2025-60720 State: PUBLISHED Published: 2025-11-11T17:59:39.877Z Last Updated: 2025-11-21T19:07:02.796Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 Version 25H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server C
indows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-126 Description: Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.mic
ttacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60720
CVE ID: CVE-2025-60721 State: PUBLISHED Published: 2025-11-11T17:59:50.261Z Last Updated: 2025-11-21T19:07:12.506Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:T/RC:C) Vendors: Microsoft Products: Windows 11 Version 25H2, Windows 11 Version 24H2 Problem Types: CWE-270 Description: Privilege context switching error in Windows Administrator Protection allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60721
CVE ID: CVE-2025-60722 State: PUBLISHED Published: 2025-11-11T17:59:30.528Z Last Updated: 2025-11-21T19:06:52.053Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: OneDrive for Android Problem Types: CWE-22 Description: Improper limitation of a pathname to a restricted directory ('path traversal') in OneDrive for Android allows an authorized attacker to elevate privileges over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60722
CVE ID: CVE-2025-60723 State: PUBLISHED Published: 2025-11-11T17:59:40.522Z Last Updated: 2025-11-21T19:07:03.420Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 Version 25H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025 Problem Types: CWE-362, CWE-416 Description: Concurrent execution using sh
Windows 11 Version 24H2, Windows Server 2025 Problem Types: CWE-362, CWE-416 Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to deny service over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60723
CVE ID: CVE-2025-60724 State: PUBLISHED Published: 2025-11-11T17:59:41.177Z Last Updated: 2025-11-21T19:07:03.967Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office LTSC for Mac 2021, Microsoft Office for Android, Microsoft Office LTSC for Mac 2024, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 Version 25H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Vers
11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-122 Description: Heap-based buffer overflow in Microsoft Graphics Component allows an una
stallation) Problem Types: CWE-122 Description: Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60724
CVE ID: CVE-2025-60726 State: PUBLISHED Published: 2025-11-11T17:59:26.052Z Last Updated: 2025-11-21T19:06:47.161Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Office Online Server, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft Excel 2016 Problem Types: CWE-125 Description: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/upda
se information locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60726
CVE ID: CVE-2025-60727 State: PUBLISHED Published: 2025-11-11T17:59:26.677Z Last Updated: 2025-11-21T19:06:47.619Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Office Online Server, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft Excel 2016 Problem Types: CWE-125 Description: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide
e code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60727
CVE ID: CVE-2025-60728 State: PUBLISHED Published: 2025-11-11T17:59:27.234Z Last Updated: 2025-11-21T19:06:48.456Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024 Problem Types: CWE-822, CWE-125 Description: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60728
CVE ID: CVE-2025-60729 State: PUBLISHED Published: 2025-10-24T00:00:00.000Z Last Updated: 2025-10-24T20:10:54.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://perfreeblog.com - https://github.com/dengxmenglihua/cve/blob/main/PerfreeBlog/File%20Read/Arbitrary%20File%20Read%20Vulnerability%20in%20PerfreeBlog%20System.md - https://perfree.org.cn/
CVE ID: CVE-2025-60730 State: PUBLISHED Published: 2025-10-24T00:00:00.000Z Last Updated: 2025-10-24T18:35:34.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://perfreeblog.com - https://perfree.org.cn/ - https://github.com/dengxmenglihua/cve/blob/main/PerfreeBlog/File%20Deletion/Arbitrary%20File%20Deletion%20Vulnerability%20in%20PerfreeBlog%20System.md
CVE ID: CVE-2025-60731 State: PUBLISHED Published: 2025-10-24T00:00:00.000Z Last Updated: 2025-10-24T19:52:29.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://perfreeblog.com - https://perfree.org.cn/ - https://github.com/dengxmenglihua/cve/blob/main/PerfreeBlog/File%20Upload/Arbitrary%20File%20Upload%20Vulnerability%20in%20PerfreeBlog%20System.md
CVE ID: CVE-2025-60735 State: PUBLISHED Published: 2025-10-24T00:00:00.000Z Last Updated: 2025-10-24T19:44:08.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://perfreeblog.com - https://perfree.org.cn/ - https://github.com/dengxmenglihua/cve/blob/main/PerfreeBlog/File%20Upload%202/Arbitrary%20File%20Upload%20Vulnerability%20in%20PerfreeBlog%20System.md
CVE ID: CVE-2025-60737 State: PUBLISHED Published: 2025-11-20T00:00:00.000Z Last Updated: 2025-11-21T16:05:13.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Ilevia EVE X1 Server Firmware Version<= 4.7.18.0.eden:Logic Version<=6.00 - 2025_07_21 allows a remote attacker to execute arbitrary code via the /index.php component Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/iSee857/ilevia-EVE-X1-Server-CSRF
CVE ID: CVE-2025-60738 State: PUBLISHED Published: 2025-11-20T00:00:00.000Z Last Updated: 2025-11-21T15:35:29.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before Logic Version v6.00 - 2025_07_21 and before allows a remote attacker to execute arbitrary code via the ping.php component does not perform secure filtering on IP parameters Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/iSee857/ilevia-EVE-X1-Server
CVE ID: CVE-2025-60749 State: PUBLISHED Published: 2025-10-31T00:00:00.000Z Last Updated: 2025-10-31T15:14:28.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchup_webhelper.exe. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://sketchup.com - https://help.sketchup.com/zh-CN/downloading-sketchup - https://yawataa.github.io/2025/10/23/CVE-2025-60749/
CVE ID: CVE-2025-60751 State: PUBLISHED Published: 2025-10-21T00:00:00.000Z Last Updated: 2025-11-04T00:12:06.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/geographiclib/geographiclib/issues/43 - https://github.com/zer0matt/CVE-2025-60751
CVE ID: CVE-2025-60753 State: PUBLISHED Published: 2025-11-05T00:00:00.000Z Last Updated: 2025-11-05T15:44:31.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service (Out-of-Memory crash). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libarchive/libarchive/issues/2725 - https://github.com/Papya-j/CVE/tree/main/CVE-2025-60753
CVE ID: CVE-2025-60772 State: PUBLISHED Published: 2025-10-21T00:00:00.000Z Last Updated: 2025-10-22T14:56:44.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper authentication in the web-based management interface of NETLINK HG322G V1.0.00-231017, allows a remote unauthenticated attacker to escalate privileges and lock out the legitimate administrator via crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://netlinkict.com/shop/gpon-ont/gpon-ont-hg322g/ - https://github.com/navy-birds-MRS/vuln-reports/blob/main/vendors/netlink/CVE-2025-60772/advisory.md
CVE ID: CVE-2025-60781 State: PUBLISHED Published: 2025-10-20T00:00:00.000Z Last Updated: 2025-10-20T20:43:47.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Education Manager v1.0 is vulnerable to Cross Site Scripting (XSS) in the worksheet.php file via the participant_name parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gold-textbook-8ff.notion.site/php-education-management-Stored-XSS-Vulnerability-25985e97f35380018b9af0f4b678002c?pvs=73
CVE ID: CVE-2025-60782 State: PUBLISHED Published: 2025-10-02T00:00:00.000Z Last Updated: 2025-10-03T19:06:06.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Education Manager v1.0 is vulnerable to Cross Site Scripting (XSS) stored Cross-Site Scripting (XSS) vulnerability in the topics management module (topics.php). Attackers can inject malicious JavaScript payloads into the Titlefield during topic creation or updates. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gold-textbook-8ff.notion.site/php-education-management-Background-storage-xss-25985e97f35380db9d38e7d0fbb408d6?pvs=73
CVE ID: CVE-2025-60783 State: PUBLISHED Published: 2025-10-20T00:00:00.000Z Last Updated: 2025-10-20T20:41:13.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a SQL injection vulnerability in Restaurant Management System DBMS Project v1.0 via login.php. The vulnerability allows attackers to manipulate the application's database through specially crafted SQL query strings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gold-textbook-8ff.notion.site/Restaurant-Management-System-DBMS-project-SQL-injection-25985e97f35380b2922ad4ebe8c47639?pvs=73 - https://gold-textbook-8ff.notion.site/Restaurant-Management-System-DBMS-project-SQL-injection-25985e
ebe8c47639?pvs=73 - https://gold-textbook-8ff.notion.site/Restaurant-Management-System-DBMS-project-SQL-injection-25985e97f35380b2922ad4ebe8c47639