Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
d may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295173 - https://vuldb.com/?ctiid.295173 - https://vuldb.com/?submit.497533 - https://github.com/janssensjelle/published-pocs/blob/main/pihomehvac-improper-access-control.md
CVE ID: CVE-2025-1215 State: PUBLISHED Published: 2025-02-12T18:31:06.472Z Last Updated: 2025-03-21T18:03:50.360Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: n/a Products: vim Problem Types: CWE-119 Description: A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is able to address this issue. The patch is identified as c5654b84480822817bb7b69ebc97c174c91185e9. It is recommended to upgrade the affected component. Additiona
s identified as c5654b84480822817bb7b69ebc97c174c91185e9. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.295174 - https://vuldb.com/?ctiid.295174 - https://vuldb.com/?submit.497546 - https://github.com/vim/vim/issues/16606 - https://github.com/vim/vim/commit/c5654b84480822817bb7b69ebc97c174c91185e9 - https://github.com/vim/vim/releases/tag/v9.1.1097
CVE ID: CVE-2025-1216 State: PUBLISHED Published: 2025-02-12T19:00:16.932Z Last Updated: 2025-02-12T19:24:18.529Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: ywoa Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in ywoa up to 2024.07.03. This issue affects the function selectNoticeList of the file com/cloudweb/oa/mapper/xml/OaNoticeMapper.xml. The manipulation of the argument sort leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2024.07.04 is able to address this issue. It is recommended to upgrade the affec
c and may be used. Upgrading to version 2024.07.04 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295175 - https://vuldb.com/?ctiid.295175 - https://gitee.com/r1bbit/yimioa/issues/IBI74K
CVE ID: CVE-2025-1217 State: PUBLISHED Published: 2025-03-29T05:19:33.696Z Last Updated: 2025-11-03T20:57:05.208Z Vendors: PHP Group Products: PHP Problem Types: CWE-20 Description: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obtained from a server, folded headers are parsed incorrectly, which may lead to misinterpreting the response and using incorrect headers, MIME types, etc. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/php/php-src/security/advisories/GHSA-v8xr-gpvj-cx9g
CVE ID: CVE-2025-1219 State: PUBLISHED Published: 2025-03-30T05:33:13.801Z Last Updated: 2025-11-03T20:57:06.601Z Vendors: PHP Group Products: PHP Description: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect. This may cause the resulting document to be parsed incorrectly or bypass validations. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/php/php-src/security/advisories/GHSA-p3x9-6h7p-cgfc
CVE ID: CVE-2025-1220 State: PUBLISHED Published: 2025-07-13T22:18:36.974Z Last Updated: 2025-11-04T21:09:17.792Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: PHP Group Products: PHP Problem Types: CWE-918 Description: In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 some functions like fsockopen() lack validation that the hostname supplied does not contain null characters. This may lead to other functions like parse_url() treat the hostname in different way, thus opening way to security problems if the user code implements access checks before access using such functions. Additional Analyst Notes: - CISA ADP
blems if the user code implements access checks before access using such functions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/php/php-src/security/advisories/GHSA-3cr5-j632-f35r
CVE ID: CVE-2025-1221 State: PUBLISHED Published: 2025-07-30T08:09:19.214Z Last Updated: 2025-07-30T13:40:39.039Z Vendors: silabs.com Products: Zigbee Problem Types: CWE-667 Description: A Zigbee Radio Co-Processor (RCP), which is using SiLabs EmberZNet Zigbee stack, was unable to send messages to the host system (CPCd) due to heavy Zigbee traffic, resulting in a Denial of Service (DoS) attack, Only hard reset will bring the device to normal operation Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-7.4.4.0.pdf - https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-8.0.2.0.p
znet-release-notes-7.4.4.0.pdf - https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-8.0.2.0.pdf - https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-8.1.0.0.pdf - https://community.silabs.com/068Vm00000Sadyn
CVE ID: CVE-2025-1222 State: PUBLISHED Published: 2025-02-20T00:05:23.829Z Last Updated: 2025-02-20T16:27:56.664Z Vendors: Citrix Products: Secure Access Client for Mac Problem Types: cwe-693 Description: An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.citrix.com/s/article/CTX692679-citrix-secure-access-client-for-mac-security-bulletin-for-cve20251222-and-cve20251223?language=en_US
CVE ID: CVE-2025-1223 State: PUBLISHED Published: 2025-02-20T00:07:27.949Z Last Updated: 2025-02-20T16:21:58.811Z Vendors: Citrix Products: Secure Access Client for Mac Problem Types: CWE-427 Description: An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.citrix.com/s/article/CTX692679-citrix-secure-access-client-for-mac-security-bulletin-for-cve20251222-and-cve20251223?language=en_US
CVE ID: CVE-2025-1224 State: PUBLISHED Published: 2025-02-12T19:31:08.718Z Last Updated: 2025-02-13T14:38:28.065Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: ywoa Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in ywoa up to 2024.07.03. This vulnerability affects the function listNameBySql of the file com/cloudweb/oa/mapper/xml/UserMapper.xml. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2024.07.04 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Not
on 2024.07.04 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295210 - https://vuldb.com/?ctiid.295210 - https://gitee.com/r1bbit/yimioa/issues/IBI731
CVE ID: CVE-2025-1225 State: PUBLISHED Published: 2025-02-12T20:00:19.103Z Last Updated: 2025-02-12T20:59:38.132Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: ywoa Problem Types: CWE-611, CWE-610 Description: A vulnerability, which was classified as problematic, has been found in ywoa up to 2024.07.03. This issue affects the function extract of the file c-main/src/main/java/com/redmoon/weixin/aes/XMLParse.java of the component WXCallBack Interface. The manipulation leads to xml external entity reference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2024.07.04 is able to address this issu
e exploit has been disclosed to the public and may be used. Upgrading to version 2024.07.04 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295211 - https://vuldb.com/?ctiid.295211 - https://gitee.com/r1bbit/yimioa/issues/IBI81R
CVE ID: CVE-2025-1226 State: PUBLISHED Published: 2025-02-12T20:31:08.502Z Last Updated: 2025-02-12T20:55:20.636Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: ywoa Problem Types: CWE-285, CWE-266 Description: A vulnerability was found in ywoa up to 2024.07.03. It has been declared as critical. This vulnerability affects unknown code of the file /oa/setup/setup.jsp. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2024.07.04 is able to address this issue. It is recommended to upgrade the affected component. Additional Anal
o version 2024.07.04 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295216 - https://vuldb.com/?ctiid.295216 - https://gitee.com/r1bbit/yimioa/issues/IBI7PG
CVE ID: CVE-2025-1227 State: PUBLISHED Published: 2025-02-12T21:00:15.693Z Last Updated: 2025-02-12T21:16:58.566Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: ywoa Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in ywoa up to 2024.07.03. It has been rated as critical. This issue affects the function selectList of the file com/cloudweb/oa/mapper/xml/AddressDao.xml. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2024.07.04 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes:
2024.07.04 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295217 - https://vuldb.com/?ctiid.295217 - https://gitee.com/r1bbit/yimioa/issues/IBI7XH
CVE ID: CVE-2025-1228 State: PUBLISHED Published: 2025-02-12T21:31:09.612Z Last Updated: 2025-02-13T15:17:42.213Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: olajowon Products: Loggrove Problem Types: CWE-22 Description: A vulnerability classified as problematic has been found in olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378ddd6. Affected is an unknown function of the file /read/?page=1&logfile=LOG_Monitor of the component Logfile Update Handler. The manipulation of the argument path leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Continious delivery with
e to launch the attack remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295218 - https://vuldb.com/?ctiid.295218 - https://gitee.com/olajowon/loggrove/issues/IBJSXS
CVE ID: CVE-2025-1229 State: PUBLISHED Published: 2025-02-12T22:00:16.776Z Last Updated: 2025-02-13T15:09:48.760Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: olajowon Products: Loggrove Problem Types: CWE-78, CWE-77 Description: A vulnerability classified as critical was found in olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378ddd6. Affected by this vulnerability is an unknown functionality of the file /read/?page=1&logfile=eee&match=. The manipulation of the argument path leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information a
xploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295219 - https://vuldb.com/?ctiid.295219 - https://gitee.com/olajowon/loggrove/issues/IBJT1K
CVE ID: CVE-2025-1230 State: PUBLISHED Published: 2025-02-12T10:38:08.379Z Last Updated: 2025-02-12T16:07:33.164Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Prestashop Products: Prestashop Problem Types: CWE-79 Description: Stored Cross-Site Scripting (XSS) vulnerability in Prestashop 8.1.7, due to the lack of proper validation of user input through ‘/<admin_directory>/index.php’, affecting the ‘link’ parameter. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal their cookie session details. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert
e session details. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-vulnerability-prestashop
CVE ID: CVE-2025-1231 State: PUBLISHED Published: 2025-02-11T14:05:38.399Z Last Updated: 2025-02-11T14:56:16.812Z Vendors: Devolutions Products: Server Problem Types: CWE-287 Description: Improper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an authenticated user to reuse the oracle user password after check-in due to crash in the password reset functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2025-0002/
CVE ID: CVE-2025-1232 State: PUBLISHED Published: 2025-03-19T06:00:02.199Z Last Updated: 2025-03-19T14:36:35.550Z Vendors: Unknown Products: Site Reviews Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Site Reviews WordPress plugin before 7.2.5 does not properly sanitise and escape some of its Review fields, which could allow unauthenticated users to perform Stored XSS attacks Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c4ea8357-ddd7-48ac-80c9-15b924715b14/
CVE ID: CVE-2025-1233 State: PUBLISHED Published: 2025-04-05T05:32:13.838Z Last Updated: 2025-04-07T14:11:43.301Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: AlThemist Products: Lafka Plugin Problem Types: CWE-862 Description: The Lafka Plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'lafka_options_upload' AJAX function in all versions up to, and including, 7.1.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to update the theme option that overrides the site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-in
overrides the site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/865b87a8-ab8a-4054-9e18-50693023cb96?source=cve - https://themeforest.net/item/lafka-fast-food-restaurant-woocommerce-theme/23969682
CVE ID: CVE-2025-1234 State: REJECTED Published: N/A Last Updated: 2025-07-05T22:16:37.136Z Description: No description available.
CVE ID: CVE-2025-1235 State: PUBLISHED Published: 2025-06-02T06:23:19.261Z Last Updated: 2025-06-02T17:03:08.740Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: WAGO Products: Fully Managed Switches 0852-0303, Fully Managed Switches 0852-1305, Fully Managed Switches 0852-1305/0000-0001, Fully Managed Switches 0852-1505, Fully Managed Switches 0852-1505/0000-0001, Lean Managed Switches 0852-1812, Lean Managed Switches 0852-1812/0010-0000, Lean Managed Switches 0852-1813, Lean Managed Switches 0852-1813/0000-0001, Lean Managed Switches 0852-1813/0010-0000, Lean Managed Switches 0852-1813/0010-0001, Lean Managed Switches 0852-1816, Lean Managed Switches 0852-1
1813/0010-0000, Lean Managed Switches 0852-1813/0010-0001, Lean Managed Switches 0852-1816, Lean Managed Switches 0852-1816/0010-0000 Problem Types: CWE-190 Description: A low privileged attacker can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes the date of the switch to be set back to January 1st, 1970. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2025-020
CVE ID: CVE-2025-1239 State: PUBLISHED Published: 2025-02-14T13:21:09.213Z Last Updated: 2025-02-14T14:03:04.820Z Vendors: WatchGuard Products: Fireware OS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the Blocked Sites list. This vulnerability requires an authenticated administrator session to a locally managed Firebox.This issue affects Fireware OS: from 12.0 through 12.5.12+701324, from 12.6 through 12.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00002
CVE ID: CVE-2025-1240 State: PUBLISHED Published: 2025-02-11T21:53:22.559Z Last Updated: 2025-02-12T15:36:55.660Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: WinZip Computing Products: WinZip Problem Types: CWE-787 Description: WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of WinZip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 7Z files. The issue results from the lack of proper validation of user-
. The specific flaw exists within the parsing of 7Z files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24986. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-047/
CVE ID: CVE-2025-1243 State: PUBLISHED Published: 2025-02-12T00:09:59.647Z Last Updated: 2025-02-12T15:29:47.069Z Vendors: Temporal Technologies, Inc. Products: api-go library Problem Types: CWE-311 Description: The Temporal api-go library prior to version 1.44.1 did not send `update response` information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the `update response` field not having Data Converter transformations (e.g. encryption) applied. This is an issue only when using the UpdateWorkflowExecution APIs (released on 13th January 2025) with a proxy leveraging the api-go lib
only when using the UpdateWorkflowExecution APIs (released on 13th January 2025) with a proxy leveraging the api-go library before version 1.44.1. Other data fields were correctly sent to Data Converter. This issue does not impact the Data Converter server. Data was encrypted in transit. Temporal Cloud services are not impacted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/temporalio/api-go/releases/tag/v1.44.1 - https://temporal.io/blog/announcing-a-new-operation-workflow-update
CVE ID: CVE-2025-1244 State: PUBLISHED Published: 2025-02-12T14:27:45.707Z Last Updated: 2025-11-24T19:53:23.676Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterpris
anced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Builds for Red Hat OpenShift 1.3.1, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 Problem Types: CWE-78 Description: A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a
nd in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:1915 - https://access.redhat.com/errata/RHSA-2025:1917 - https://access.redhat.com/errata/RHSA-2025:1961 - https://access.redhat.com/errata/RHSA-2025:1962 - https://access.redhat.com/errata/RHSA-2025:1963 - https://access.redhat.com/errata/RHSA-2025:1964 - https://access.redhat.com/errata/RHSA-2025:2022 - http
HSA-2025:1963 - https://access.redhat.com/errata/RHSA-2025:1964 - https://access.redhat.com/errata/RHSA-2025:2022 - https://access.redhat.com/errata/RHSA-2025:2130 - https://access.redhat.com/errata/RHSA-2025:2157 - https://access.redhat.com/errata/RHSA-2025:2195 - https://access.redhat.com/errata/RHSA-2025:2754 - https://access.redhat.com/security/cve/CVE-2025-1244 - https://bugzilla.redhat.com/show_bug.cgi?id=2345150
CVE ID: CVE-2025-1245 State: PUBLISHED Published: 2025-05-16T06:08:03.008Z Last Updated: 2025-05-16T15:40:39.287Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Hitachi Products: Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer Problem Types: CWE-348 Description: Bypass Connection Restriction vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics component), Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component).This issue affects Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.4-00. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
or:; Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.4-00. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2025-116/index.html
CVE ID: CVE-2025-1246 State: PUBLISHED Published: 2025-06-02T11:06:07.697Z Last Updated: 2025-06-02T13:44:32.140Z Vendors: Arm Ltd Products: Bifrost GPU Userspace Driver, Valhall GPU Userspace Driver, Arm 5th Gen GPU Architecture Userspace Driver Problem Types: CWE-119 Description: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access outside of buffer bounds.This issue affects Bifrost GPU Userspace Driver: fr