Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
l access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fde110ae-c559-4d45-91c0-a3dd5ff05c4d?source=cve - https://plugins.trac.wordpress.org/browser/inactive-logout/trunk/core/Controllers/AdminController.php#L32 - https://plugins.trac.wordpress.org/browser/inactive-logout/trunk/core/Controllers/Admin/StoreController.php#L84 - https://plugins.trac.wordpress.org/browser/inactive-logout/trunk/views/tabs/tpl-inactive-logout-advanced.php#L99 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&r
k/views/tabs/tpl-inactive-logout-advanced.php#L99 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3385001%40inactive-logout%2Ftrunk&old=3362978%40inactive-logout%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2025-11923 State: PUBLISHED Published: 2025-11-13T03:27:39.431Z Last Updated: 2025-11-13T14:34:06.521Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: chrisbadgett Products: LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes Problem Types: CWE-269 Description: The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to privilege escalation. This is due to the plugin not properly validating a user's identity prior to allowing them to modify their own role via the REST API. The permission check in the update_item_permissions_check() function returns true when a user updates their own account without
ission check in the update_item_permissions_check() function returns true when a user updates their own account without verifying the role changes. This makes it possible for authenticated attackers, with student-level access and above, to escalate their privileges to administrator by updating their own roles array via a crafted REST API request. Another endpoint intended for instructors also provides an attack vector. Affected version ranges are 3.5.3-3.41.2, 4.0.0-4.21.3, 5.0.0-5.10.0, 6.0.0-6.11.0, 7.0.0-7.8.7, 8.0.0-8.0.7, 9.0.0-9.0.7, 9.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cc13d13c-6b79-4bf1-8e77-
CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cc13d13c-6b79-4bf1-8e77-c8cb836dc0c5?source=cve - https://plugins.trac.wordpress.org/browser/lifterlms/trunk/libraries/lifterlms-rest/includes/server/class-llms-rest-students-controller.php#L386 - https://plugins.trac.wordpress.org/browser/lifterlms/trunk/libraries/lifterlms-rest/includes/abstracts/class-llms-rest-users-controller.php#L721 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3393703%40lifterlms%2Ftrunk&old=3388956%40lifterlms%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2025-11925 State: PUBLISHED Published: 2025-10-17T19:56:14.177Z Last Updated: 2025-10-17T20:25:34.271Z Vendors: Azure Access Technology Products: BLU-IC2, BLU-IC4 Problem Types: CWE-754 Description: Incorrect Content-Type header in one of the APIs (`text/html` instead of `application/json`) replies may potentially allow injection of HTML/JavaScript into reply.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://azure-access.com/security-advisories
CVE ID: CVE-2025-11926 State: PUBLISHED Published: 2025-10-18T09:25:31.949Z Last Updated: 2025-10-20T16:55:27.944Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: wpdreams Products: Related Posts Lite Problem Types: CWE-79 Description: The Related Posts Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects
to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5dadd49c-33b2-43d8-a6a9-64a3c37c4b52?source=cve - https://plugins.trac.wordpress.org/browser/related-posts-lite/tags/1.12/ - https://wordpress.org/plugins/related-posts-lite/?utm_source=chatgpt.com - https://github.com/prabhatverma47/Wordpress-Related-Posts-Lite-plugin-XSS-PoC?utm_source=chatgpt.com
CVE ID: CVE-2025-11927 State: PUBLISHED Published: 2025-11-01T04:27:42.551Z Last Updated: 2025-11-03T13:31:33.027Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: gijo Products: Flying Images: Optimize and Lazy Load Images for Faster Page Speed Problem Types: CWE-79 Description: The Flying Images: Optimize and Lazy Load Images for Faster Page Speed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.4.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web s
makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c41b6c52-4da8-427b-8f5d-6a3339dad3cd?source=cve - https://plugins.svn.wordpress.org/nazy-load/tags/2.4.14/settings/lazyload.php - https://plugins.svn.wordpress.org/nazy-load/tags/2.4.14/inject-js.php - https://plugins.svn.wordpress.org/nazy-load/tags/2.4.14/settings/index.php -
s.org/nazy-load/tags/2.4.14/inject-js.php - https://plugins.svn.wordpress.org/nazy-load/tags/2.4.14/settings/index.php - https://plugins.trac.wordpress.org/changeset/3386814/nazy-load
CVE ID: CVE-2025-11928 State: PUBLISHED Published: 2025-11-01T03:34:36.948Z Last Updated: 2025-11-03T14:59:13.017Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: wipeoutmedia Products: CSS & JavaScript Toolbox Problem Types: CWE-79 Description: The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 12.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
issions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a26c71d6-9840-450e-90cd-c20de53f5cb5?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3385887%40css-javascript-toolbox&new=3385887%40css-javascript-toolbox&sfp_email=&sfph_mail=
CVE ID: CVE-2025-11931 State: PUBLISHED Published: 2025-11-21T22:57:32.802Z Last Updated: 2025-11-24T15:42:29.485Z Vendors: wolfSSL Products: wolfSSL Problem Types: CWE-191 Description: Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt. This issue is hit specifically with a call to the function wc_XChaCha20Poly1305_Decrypt() which is not used with TLS connections, only from direct calls from an application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wolfSSL/wolfssl/pull/9223
CVE ID: CVE-2025-11932 State: PUBLISHED Published: 2025-11-21T23:01:03.321Z Last Updated: 2025-11-24T17:57:58.160Z Vendors: wolfSSL Products: wolfSSL Problem Types: CWE-203 Description: The server previously verified the TLS 1.3 PSK binder using a non-constant time method which could potentially leak information about the PSK binder Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wolfSSL/wolfssl/pull/9223
CVE ID: CVE-2025-11933 State: PUBLISHED Published: 2025-11-21T22:19:08.654Z Last Updated: 2025-11-24T17:59:45.393Z Vendors: wofSSL Products: wolfSSL Problem Types: CWE-20 Description: Improper Input Validation in the TLS 1.3 CKS extension parsing in wolfSSL 5.8.2 and earlier on multiple platforms allows a remote unauthenticated attacker to potentially cause a denial-of-service via a crafted ClientHello message with duplicate CKS extensions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wolfSSL/wolfssl - https://github.com/wolfSSL/wolfssl/pull/9132
CVE ID: CVE-2025-11934 State: PUBLISHED Published: 2025-11-21T22:12:37.868Z Last Updated: 2025-11-24T18:00:04.527Z Vendors: wolfSSL Products: wolfSSL Problem Types: CWE-20 Description: Improper input validation in the TLS 1.3 CertificateVerify signature algorithm negotiation in wolfSSL 5.8.2 and earlier on multiple platforms allows for downgrading the signature algorithm used. For example when a client sends ECDSA P521 as the supported signature algorithm the server previously could respond as ECDSA P256 being the accepted signature algorithm and the connection would continue with using ECDSA P256, if the client supports ECDSA P256. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
ue with using ECDSA P256, if the client supports ECDSA P256. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wolfSSL/wolfssl - https://github.com/wolfSSL/wolfssl/pull/9113
CVE ID: CVE-2025-11935 State: PUBLISHED Published: 2025-11-21T22:04:52.335Z Last Updated: 2025-11-21T22:04:52.335Z Vendors: wolfSSL Products: wolfSSL Problem Types: CWE-326 Description: With TLS 1.3 pre-shared key (PSK) a malicious or faulty server could ignore the request for PFS (perfect forward secrecy) and the client would continue on with the connection using PSK without PFS. This happened when a server responded to a ClientHello containing psk_dhe_ke without a key_share extension. The re-use of an authenticated PSK connection that on the clients side unexpectedly did not have PFS, reduces the security of the connection. References: - https://github.com/wolfSSL/wolfssl - https://github.
not have PFS, reduces the security of the connection. References: - https://github.com/wolfSSL/wolfssl - https://github.com/wolfSSL/wolfssl/pull/9112
CVE ID: CVE-2025-11936 State: PUBLISHED Published: 2025-11-21T22:24:27.443Z Last Updated: 2025-11-24T17:59:03.202Z Vendors: wolfSSL Products: wolfSSL Problem Types: CWE-20 Description: Improper input validation in the TLS 1.3 KeyShareEntry parsing in wolfSSL v5.8.2 on multiple platforms allows a remote unauthenticated attacker to cause a denial-of-service by sending a crafted ClientHello message containing duplicate KeyShareEntry values for the same supported group, leading to excessive CPU and memory consumption during ClientHello processing. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wolfSSL/wolfssl - https://github.com/wolfSSL/wolfssl/pull/9117
CVE ID: CVE-2025-11937 State: PUBLISHED Published: 2025-10-18T05:14:56.314Z Last Updated: 2025-10-20T16:03:42.588Z Vendors: The Wikimedia Foundation Products: Mediawiki - SecurePoll Extension Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - SecurePoll Extension allows Stored XSS.This issue affects Mediawiki - SecurePoll Extension: master. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/SecurePoll/+/1189186 - https://phabricator.wikimedia.org/T402076
CVE ID: CVE-2025-11938 State: PUBLISHED Published: 2025-10-19T07:32:05.836Z Last Updated: 2025-10-20T19:03:38.434Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: n/a Products: ChurchCRM Problem Types: CWE-502, CWE-20 Description: A vulnerability was found in ChurchCRM up to 5.18.0. This vulnerability affects unknown code of the file setup/routes/setup.php. Performing manipulation of the argument DB_PASSWORD/ROOT_PATH/URL results in deserialization. The attack may be initiated remotely. The attack's complexity is rated as high. It is stated that the exploitability is difficult. The exploit has been made public and could be used. The vendor was
. It is stated that the exploitability is difficult. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329014 - https://vuldb.com/?ctiid.329014 - https://vuldb.com/?submit.671083 - https://github.com/uartu0/advisories/blob/main/churchcrm-setup-rce-2025.md
CVE ID: CVE-2025-11939 State: PUBLISHED Published: 2025-10-19T08:02:05.503Z Last Updated: 2025-10-20T16:24:56.622Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: ChurchCRM Problem Types: CWE-22 Description: A vulnerability was determined in ChurchCRM up to 5.18.0. This issue affects some unknown processing of the file src/ChurchCRM/Backup/RestoreJob.php of the component Backup Restore Handler. Executing manipulation of the argument restoreFile can lead to path traversal. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any
publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329015 - https://vuldb.com/?ctiid.329015 - https://vuldb.com/?submit.671101 - https://github.com/uartu0/advisories/blob/main/churchcrm-path-traversal-rce-2025.md
CVE ID: CVE-2025-11940 State: PUBLISHED Published: 2025-10-19T08:32:06.681Z Last Updated: 2025-10-20T16:22:57.075Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:X/RL:O/RC:C) Vendors: n/a Products: LibreWolf Problem Types: CWE-427, CWE-426 Description: A security vulnerability has been detected in LibreWolf up to 143.0.4-1 on Windows. This affects an unknown function of the file assets/setup.nsi of the component Installer. Such manipulation leads to uncontrolled search path. The attack must be carried out locally. Attacks of this nature are highly complex. The exploitability is reported as difficult. Upgrading to version 144.0-1 mitigates this issue. The name of the pa
plex. The exploitability is reported as difficult. Upgrading to version 144.0-1 mitigates this issue. The name of the patch is dd10e31dd873e9cb309fad8aed921d45bf905a55. It is suggested to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329019 - https://vuldb.com/?ctiid.329019 - https://vuldb.com/?submit.671575 - https://github.com/Cyber-Wo0dy/report/blob/main/librewolf/143.0.4-1/librewolf_installer_exe_hijacking.md - https://codeberg.org/librewolf/bsys6/commit/dd10e31dd873e9cb309fad8aed921d45bf905a55 - https://codeberg.org/librewolf/bsys6/releases/tag/144.0-1
CVE ID: CVE-2025-11941 State: PUBLISHED Published: 2025-10-19T15:32:10.388Z Last Updated: 2025-10-20T19:04:24.380Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: e107 Products: CMS Problem Types: CWE-22 Description: A vulnerability was detected in e107 CMS up to 2.3.3. This impacts an unknown function of the file /e107_admin/image.php?mode=main&action=avatar of the component Avatar Handler. Performing manipulation of the argument multiaction[] results in path traversal. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analys
and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329020 - https://vuldb.com/?ctiid.329020 - https://vuldb.com/?submit.671867 - https://note-hxlab.wetolink.com/share/igdVbDCk2IkD - https://note-hxlab.wetolink.com/share/igdVbDCk2IkD#proof-of-concept-
CVE ID: CVE-2025-11942 State: PUBLISHED Published: 2025-10-19T16:02:07.412Z Last Updated: 2025-10-20T19:05:53.153Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:W/RC:UR) Vendors: 70mai Products: X200 Problem Types: CWE-306, CWE-287 Description: A flaw has been found in 70mai X200 up to 20251010. Affected is an unknown function of the component Pairing. Executing manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329021
id not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329021 - https://vuldb.com/?ctiid.329021 - https://vuldb.com/?submit.672520 - https://github.com/geo-chen/70mai/blob/main/README.md#finding-9-bypass-device-pairing-of-70mai-dashcam-omni-x200
CVE ID: CVE-2025-11943 State: PUBLISHED Published: 2025-10-19T19:32:05.817Z Last Updated: 2025-10-20T19:06:32.308Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:W/RC:UR) Vendors: 70mai Products: X200 Problem Types: CWE-1392 Description: A vulnerability has been found in 70mai X200 up to 20251010. Affected by this vulnerability is an unknown functionality of the component HTTP Web Server. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
ted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329022 - https://vuldb.com/?ctiid.329022 - https://vuldb.com/?submit.672521 - https://github.com/geo-chen/70mai/blob/main/README.md#finding-10-exposed-root-password-via-unauthenticated-http-server
CVE ID: CVE-2025-11944 State: PUBLISHED Published: 2025-10-19T20:02:06.771Z Last Updated: 2025-10-20T16:05:39.358Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:OF/RC:C) Vendors: givanz Products: Vvveb Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in givanz Vvveb up to 1.0.7.3. This affects the function Import of the file admin/controller/tools/import.php of the component Raw SQL Handler. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 52204b4a106b2fb02d16eee06a88a1f2697f9b35. It is recommended to apply a patch to fix this issue. Additional Analyst
ame: 52204b4a106b2fb02d16eee06a88a1f2697f9b35. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329024 - https://vuldb.com/?ctiid.329024 - https://vuldb.com/?submit.673129 - https://github.com/givanz/Vvveb/issues/332 - https://github.com/givanz/Vvveb/issues/332#issue-3505043543 - https://github.com/givanz/Vvveb/commit/52204b4a106b2fb02d16eee06a88a1f2697f9b35
CVE ID: CVE-2025-11945 State: PUBLISHED Published: 2025-10-19T21:02:06.115Z Last Updated: 2025-10-22T20:35:41.136Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: toeverything Products: AFFiNE Problem Types: CWE-79, CWE-94 Description: A vulnerability was identified in toeverything AFFiNE up to 0.24.1. This vulnerability affects unknown code of the component Avatar Upload Image Endpoint. Such manipulation leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
ted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329025 - https://vuldb.com/?ctiid.329025 - https://vuldb.com/?submit.670888 - https://drive.google.com/file/d/1L6gX0GY8cE9rS6o50oJzuMRPVMerFQNS
CVE ID: CVE-2025-11946 State: PUBLISHED Published: 2025-10-19T21:32:06.214Z Last Updated: 2025-10-20T18:03:53.761Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: LogicalDOC Products: Community Edition Problem Types: CWE-79, CWE-94 Description: A security flaw has been discovered in LogicalDOC Community Edition up to 9.2.1. This issue affects some unknown processing of the file /frontend.jsp of the component Add Contact Page. Performing manipulation of the argument First Name/Last Name/Company/Address/Phone/Mobile results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. The v
. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329026 - https://vuldb.com/?ctiid.329026 - https://vuldb.com/?submit.671389 - https://gist.github.com/thezeekhan/231d87163fbb84f94c9c94f13b88db90 - https://gist.github.com/thezeekhan/231d87163fbb84f94c9c94f13b88db90#steps-to-reproduce
CVE ID: CVE-2025-11947 State: PUBLISHED Published: 2025-10-19T22:02:08.502Z Last Updated: 2025-10-20T18:04:29.574Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: n/a Products: bftpd Problem Types: CWE-122, CWE-119 Description: A weakness has been identified in bftpd up to 6.2. Impacted is the function expand_groups of the file options.c of the component Configuration File Handler. Executing manipulation can lead to heap-based buffer overflow. It is possible to launch the attack on the local host. Attacks of this nature are highly complex. The exploitability is considered difficult. The exploit has been made available to the public and could be
ghly complex. The exploitability is considered difficult. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329027 - https://vuldb.com/?ctiid.329027 - https://vuldb.com/?submit.673133 - https://shimo.im/docs/rp3OMVMZZXc9lvkm/
CVE ID: CVE-2025-11948 State: PUBLISHED Published: 2025-10-20T03:28:14.341Z Last Updated: 2025-11-12T17:08:25.357Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Excellent Infotek Products: Document Management System Problem Types: CWE-434 Description: Document Management System developed by Excellent Infotek has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-10452-72cb6-1.html - https://www.twcert.
ent: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-10452-72cb6-1.html - https://www.twcert.org.tw/en/cp-139-10453-43e63-2.html