Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-1880 State: PUBLISHED Published: 2025-03-03T20:00:07.722Z Last Updated: 2025-03-03T20:33:21.507Z Severity: LOW (CVSS 2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: i-Drive Products: i11, i12 Problem Types: CWE-305, CWE-287 Description: A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been classified as problematic. Affected is an unknown function of the component Device Pairing. The manipulation leads to authentication bypass by primary weakness. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitability is told to be difficult. It was not possible to identify the current maintai
n attack is rather high. The exploitability is told to be difficult. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298194 - https://vuldb.com/?ctiid.298194 - https://vuldb.com/?submit.510951 - https://github.com/geo-chen/i-Drive
CVE ID: CVE-2025-1881 State: PUBLISHED Published: 2025-03-03T20:31:04.041Z Last Updated: 2025-03-04T15:12:01.820Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: i-Drive Products: i11, i12 Problem Types: CWE-284, CWE-266 Description: A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Video Footage/Live Video Stream. The manipulation leads to improper access controls. The attack can be launched remotely. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life. Additiona
ossible to identify the current maintainer of the product. It must be assumed that the product is end-of-life. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298195 - https://vuldb.com/?ctiid.298195 - https://vuldb.com/?submit.510952 - https://github.com/geo-chen/i-Drive
CVE ID: CVE-2025-1882 State: PUBLISHED Published: 2025-03-03T21:00:09.182Z Last Updated: 2025-03-04T15:48:07.904Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: i-Drive Products: i11, i12 Problem Types: CWE-1262, CWE-284 Description: A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been rated as critical. Affected by this issue is some unknown functionality of the component Device Setting Handler. The manipulation leads to improper access control for register interface. The attack needs to be done within the local network. The complexity of an attack is rather high. The exploitation is known to be difficult. It was not possible to ident
ork. The complexity of an attack is rather high. The exploitation is known to be difficult. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298196 - https://vuldb.com/?ctiid.298196 - https://vuldb.com/?submit.510955 - https://github.com/geo-chen/i-Drive
CVE ID: CVE-2025-1883 State: PUBLISHED Published: 2025-05-02T15:03:08.513Z Last Updated: 2025-05-02T15:36:48.859Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dassault Systèmes Products: SOLIDWORKS eDrawings Problem Types: CWE-787 Description: Out-Of-Bounds Write vulnerability exists in the OBJ file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted OBJÂ file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-1884 State: PUBLISHED Published: 2025-05-02T15:03:25.073Z Last Updated: 2025-05-02T15:32:37.751Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dassault Systèmes Products: SOLIDWORKS eDrawings Problem Types: CWE-416 Description: Use-After-Free vulnerability exists in the SLDPRT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-1886 State: PUBLISHED Published: 2025-03-07T10:55:40.416Z Last Updated: 2025-03-07T13:32:27.997Z Vendors: Sage Products: Sage 200 Spain Problem Types: CWE-522 Description: Pass-Back vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to discover stored SMTP credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sage-200-spain
CVE ID: CVE-2025-1887 State: PUBLISHED Published: 2025-03-07T10:56:52.391Z Last Updated: 2025-03-07T13:31:40.805Z Vendors: Sage Products: Sage 200 Spain Problem Types: CWE-294 Description: SMB forced authentication vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to obtain NTLMv2-SSP Hash by changing any of the paths to a UNC path pointing to a server controlled by the attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sage-200-spain
CVE ID: CVE-2025-1888 State: PUBLISHED Published: 2025-03-14T16:11:24.455Z Last Updated: 2025-03-14T17:06:23.438Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Leica BioSystems Products: Aperio Eslide Manager Problem Types: CWE-79 Description: The Leica Web Viewer within the Aperio Eslide Manager Application is vulnerable to reflected cross-site scripting (XSS). An authenticated user can access the slides within a project and injecting malicious JavaScript into the "memo" field. The memo field has a hover over action that will display a Microsoft Tool Tip which a user can use to quickly view the memo associated with the slide and execute the JavaScript. Ad
icrosoft Tool Tip which a user can use to quickly view the memo associated with the slide and execute the JavaScript. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://blog.blacklanternsecurity.com/p/cve-2025-1888reflected-xss-in-aperio
CVE ID: CVE-2025-1889 State: PUBLISHED Published: 2025-03-03T18:38:10.046Z Last Updated: 2025-03-04T11:43:39.089Z Vendors: mmaitre314 Products: picklescan Problem Types: CWE-646 Description: picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft a malicious model that uses Pickle and include a malicious pickle file with a non-standard file extension. Because the malicious pickle file inclusion is not considered as part of the scope of picklescan, the file would pass security checks and appear to be safe, when it could instead prove to be problematic. Additional Analyst Notes: - CISA ADP Vulnrichment: References
to be safe, when it could instead prove to be problematic. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1889 - https://github.com/mmaitre314/picklescan/security/advisories/GHSA-655q-fx9r-782v
CVE ID: CVE-2025-1890 State: PUBLISHED Published: 2025-03-03T23:31:04.985Z Last Updated: 2025-03-04T15:18:54.596Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: shishuocms Problem Types: CWE-434, CWE-284 Description: A vulnerability has been found in shishuocms 1.1 and classified as critical. This vulnerability affects the function handleRequest of the file src/main/java/com/shishuo/cms/action/manage/ManageUpLoadAction.java. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
een disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298408 - https://vuldb.com/?ctiid.298408 - https://vuldb.com/?submit.505736 - https://github.com/caigo8/CVE-md/blob/main/shishuocms/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md
CVE ID: CVE-2025-1891 State: PUBLISHED Published: 2025-03-03T23:31:06.586Z Last Updated: 2025-08-28T14:34:27.295Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: n/a Products: shishuocms Problem Types: CWE-352, CWE-862 Description: A vulnerability was found in shishuocms 1.1 and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298409 - https://vuldb.com/?ctiid.298409 - https://vuldb.com/?submit.505741 - https://github.com/
https://vuldb.com/?id.298409 - https://vuldb.com/?ctiid.298409 - https://vuldb.com/?submit.505741 - https://github.com/caigo8/CVE-md/blob/main/shishuocms/CSRF%E6%B7%BB%E5%8A%A0%E7%AE%A1%E7%90%86%E5%91%98.md
CVE ID: CVE-2025-1892 State: PUBLISHED Published: 2025-03-04T00:00:10.759Z Last Updated: 2025-03-04T16:39:18.587Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: shishuocms Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in shishuocms 1.1. It has been classified as problematic. Affected is an unknown function of the file /manage/folder/add.json of the component Directory Deletion Page. The manipulation of the argument folderName leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298410 - https://vuldb.com/?ctiid.298410 - https://vuldb.com/?submit.505754 - https://github.com/caigo8/CVE-md/blob/main/shishuocms/%E5%AD%98%E5%82%A8%E5%9E%8BXSS.md
CVE ID: CVE-2025-1893 State: PUBLISHED Published: 2025-03-04T00:00:13.888Z Last Updated: 2025-03-04T16:35:55.193Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Open5GS Problem Types: CWE-404 Description: A vulnerability was found in Open5GS up to 2.7.2. It has been declared as problematic. Affected by this vulnerability is the function gmm_state_authentication of the file src/amf/gmm-sm.c of the component AMF. The manipulation leads to denial of service. The attack can be launched remotely. This vulnerability allows a single UE to crash the AMF, resulting in the complete loss of mobility and session management services and causing a network-w
UE to crash the AMF, resulting in the complete loss of mobility and session management services and causing a network-wide outage. All registered UEs will lose connectivity, and new registrations will be blocked until the AMF is restarted, leading to a high availability impact. The exploit has been disclosed to the public and may be used. The patch is named e31e9965f00d9c744a7f728497cb4f3e97744ee8. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298411 - https://vuldb.com/?ctiid.298411 - https://vuldb.com/?submit.505952 - https://github.com/open5gs/open5gs/issues/3707 - https://github.com/open5gs/op
8411 - https://vuldb.com/?submit.505952 - https://github.com/open5gs/open5gs/issues/3707 - https://github.com/open5gs/open5gs/issues/3707#issuecomment-2639620554 - https://github.com/open5gs/open5gs/issues/3707#issue-2833194192 - https://github.com/open5gs/open5gs/commit/e31e9965f00d9c744a7f728497cb4f3e97744ee8
CVE ID: CVE-2025-1894 State: PUBLISHED Published: 2025-03-04T01:00:07.506Z Last Updated: 2025-03-04T14:25:00.572Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Restaurant Table Booking System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search-result.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298412 - https://vuldb.com/?ctiid.298412 - https://vuldb.com/?submit.506592 - https://github.com/Maochuyue/cve/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-1895 State: PUBLISHED Published: 2025-03-04T01:00:11.682Z Last Updated: 2025-03-04T15:18:29.097Z Severity: N/A (CVSS 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C) Vendors: Tenda Products: TX3 Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical has been found in Tenda TX3 16.03.13.11_multi. This affects an unknown part of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298413 - https://vuldb.com/?ctiid.298413
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298413 - https://vuldb.com/?ctiid.298413 - https://vuldb.com/?submit.506601 - https://github.com/2664521593/mycve/blob/main/Tenda/TX3/tenda_tx3_bof_1.pdf - https://www.tenda.com.cn/
CVE ID: CVE-2025-1896 State: PUBLISHED Published: 2025-03-04T01:31:05.653Z Last Updated: 2025-03-04T15:17:10.209Z Severity: N/A (CVSS 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C) Vendors: Tenda Products: TX3 Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical was found in Tenda TX3 16.03.13.11_multi. This vulnerability affects unknown code of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298414 - https://vuldb.com/?ctiid.298414 - https:
st Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298414 - https://vuldb.com/?ctiid.298414 - https://vuldb.com/?submit.506602 - https://github.com/2664521593/mycve/blob/main/Tenda/TX3/tenda_tx3_bof_2.pdf - https://www.tenda.com.cn/
CVE ID: CVE-2025-1897 State: PUBLISHED Published: 2025-03-04T01:31:09.420Z Last Updated: 2025-03-04T14:39:10.471Z Severity: N/A (CVSS 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C) Vendors: Tenda Products: TX3 Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, has been found in Tenda TX3 16.03.13.11_multi. This issue affects some unknown processing of the file /goform/SetNetControlList. The manipulation of the argument list leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298415 - https://vuldb.com/?c
ed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298415 - https://vuldb.com/?ctiid.298415 - https://vuldb.com/?submit.506604 - https://github.com/2664521593/mycve/blob/main/Tenda/TX3/tenda_tx3_bof_3.pdf - https://www.tenda.com.cn/
CVE ID: CVE-2025-1898 State: PUBLISHED Published: 2025-03-04T02:00:08.711Z Last Updated: 2025-03-04T14:38:08.695Z Severity: N/A (CVSS 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C) Vendors: Tenda Products: TX3 Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in Tenda TX3 16.03.13.11_multi. Affected is an unknown function of the file /goform/openSchedWifi. The manipulation of the argument schedStartTime/schedEndTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298416 - https://v
d may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298416 - https://vuldb.com/?ctiid.298416 - https://vuldb.com/?submit.506606 - https://github.com/2664521593/mycve/blob/main/Tenda/TX3/tenda_tx3_bof_4.pdf - https://www.tenda.com.cn/
CVE ID: CVE-2025-1899 State: PUBLISHED Published: 2025-03-04T02:31:06.509Z Last Updated: 2025-03-04T14:35:32.588Z Severity: N/A (CVSS 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C) Vendors: Tenda Products: TX3 Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in Tenda TX3 16.03.13.11_multi and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298417 - https://vuldb.c
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298417 - https://vuldb.com/?ctiid.298417 - https://vuldb.com/?submit.506607 - https://github.com/2664521593/mycve/blob/main/Tenda/TX3/tenda_tx3_bof_5.pdf - https://www.tenda.com.cn/
CVE ID: CVE-2025-1900 State: PUBLISHED Published: 2025-03-04T03:00:09.931Z Last Updated: 2025-03-04T16:31:40.480Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Restaurant Table Booking System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /add-table.php. The manipulation of the argument tableno leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298418 - https://vuldb.com/?ctiid.298418 - https://vuldb.com/?submit.506609 - https://github.com/chenzi-dynasty/CVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-1901 State: PUBLISHED Published: 2025-03-04T03:31:05.344Z Last Updated: 2025-03-04T16:29:01.248Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Restaurant Table Booking System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/check_availability.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298419 - https://vuldb.com/?ctiid.298419 - https://vuldb.com/?submit.506612 - https://github.com/chenzi-dynasty/CVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-1902 State: PUBLISHED Published: 2025-03-04T04:00:07.616Z Last Updated: 2025-03-04T15:20:02.702Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Student Record System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Student Record System 3.2. It has been declared as critical. This vulnerability affects unknown code of the file /password-recovery.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298420 - h
ublic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298420 - https://vuldb.com/?ctiid.298420 - https://vuldb.com/?submit.506623 - https://github.com/panghuanjie/Code-audits/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-1903 State: PUBLISHED Published: 2025-03-04T04:00:09.420Z Last Updated: 2025-03-04T15:18:19.474Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Codezips Products: Online Shopping Website Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Codezips Online Shopping Website 1.0. It has been rated as critical. This issue affects some unknown processing of the file /cart_add.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298421 - https://vuldb.c
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298421 - https://vuldb.com/?ctiid.298421 - https://vuldb.com/?submit.506667 - https://github.com/takakie/CVE/blob/main/cve_3.md
CVE ID: CVE-2025-1904 State: PUBLISHED Published: 2025-03-04T04:31:05.027Z Last Updated: 2025-03-04T15:13:06.984Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Blood Bank System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank System 1.0. Affected by this issue is some unknown functionality of the file /Blood/A+.php. The manipulation of the argument Availibility leads to cross site scripting. The attack may be launched remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298424 - https://vuldb.com/?ctiid.298424 - https://v
Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298424 - https://vuldb.com/?ctiid.298424 - https://vuldb.com/?submit.506868 - https://github.com/lokihardk/cve/blob/main/xss-2_25.md - https://code-projects.org/
CVE ID: CVE-2025-1905 State: PUBLISHED Published: 2025-03-04T04:31:07.354Z Last Updated: 2025-03-04T14:39:06.206Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Employee Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file employee.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA AD
disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298425 - https://vuldb.com/?ctiid.298425 - https://vuldb.com/?submit.508301 - https://github.com/sorcha-l/cve/blob/main/Employee%20Management%20System%20by%20rems%20has%20xss.md - https://www.sourcecodester.com/