Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-5068 State: PUBLISHED Published: 2025-06-02T23:36:53.781Z Last Updated: 2025-08-28T19:26:29.780Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/409059706
CVE ID: CVE-2025-5069 State: PUBLISHED Published: 2025-09-26T09:11:09.636Z Last Updated: 2025-09-26T13:12:27.389Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-708 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 17.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated user to gain unauthorized access to confidential issues by creating a project with an identical name to the victim's project. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/544926 - https://hackerone.com/r
s: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/544926 - https://hackerone.com/reports/3019236
CVE ID: CVE-2025-5071 State: PUBLISHED Published: 2025-06-19T09:23:47.875Z Last Updated: 2025-06-20T13:11:34.092Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: tigroumeow Products: AI Engine Problem Types: CWE-863 Description: The AI Engine plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'Meow_MWAI_Labs_MCP::can_access_mcp' function in versions 2.8.0 to 2.8.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to have full access to the MCP and run various commands like 'wp_create_user', 'wp_update_user' and 'wp_update_option', which can
ull access to the MCP and run various commands like 'wp_create_user', 'wp_update_user' and 'wp_update_option', which can be used for privilege escalation, and 'wp_update_post', 'wp_delete_post', 'wp_update_comment' and 'wp_delete_comment', which can be used to edit and delete posts and comments. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0e7654a1-0020-4bf1-86be-bdb238a9fe0d?source=cve - https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.8.1/labs/mcp.php#L43 - https://plugins.trac.wordpress.org/changeset/3313554/ai-engine#file21
CVE ID: CVE-2025-5072 State: PUBLISHED Published: 2025-07-01T08:55:42.458Z Last Updated: 2025-07-01T13:12:09.903Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: ASR Products: Falcon_Linux、Kestrel、Lapwing_Linux Problem Types: CWE-404 Description: Resource leak vulnerability in ASR180x、ASR190x in con_mgr allows Resource Leak Exposure.This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.asrmicro.com/en/goods/psirt?cid=40
CVE ID: CVE-2025-5073 State: PUBLISHED Published: 2025-05-22T11:00:06.755Z Last Updated: 2025-05-22T17:52:26.381Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: FreeFloat Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. This issue affects some unknown processing of the component MKDIR Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309953 - https://vuldb.com/?ctiid.309953
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309953 - https://vuldb.com/?ctiid.309953 - https://vuldb.com/?submit.581288 - https://fitoxs.com/exploit/expoit-bbcf0f842f1c5385430b6992995a8eb068c58dfbaae38ffb7df1d2c69041bc7c.txt
CVE ID: CVE-2025-5074 State: PUBLISHED Published: 2025-05-22T12:00:07.882Z Last Updated: 2025-05-22T17:46:41.838Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: FreeFloat Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component PROMPT Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309954 - https://vuldb.com/?ctiid.309954 - https
yst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309954 - https://vuldb.com/?ctiid.309954 - https://vuldb.com/?submit.581290 - https://fitoxs.com/exploit/exploit-f178a364d6fda9f1ff1b6a3e4a09707f746bbd3c34b087c3871e9dc0e00f28df.txt
CVE ID: CVE-2025-5075 State: PUBLISHED Published: 2025-05-22T12:31:03.906Z Last Updated: 2025-05-22T14:16:01.320Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: FreeFloat Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component DEBUG Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309955 - https://vuldb.com/?ctiid.
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309955 - https://vuldb.com/?ctiid.309955 - https://vuldb.com/?submit.581296 - https://fitoxs.com/exploit/exploit-5c08f30e4ae57f2e4b89fbe5a5d6c540e3c359e1e5b12a00d4a6257b1b9fc935.txt
CVE ID: CVE-2025-5076 State: PUBLISHED Published: 2025-05-22T13:31:04.678Z Last Updated: 2025-05-22T14:49:51.914Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: FreeFloat Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. Affected by this issue is some unknown functionality of the component SEND Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309956 - https://vuldb.com/?ctiid.309956 - htt
alyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309956 - https://vuldb.com/?ctiid.309956 - https://vuldb.com/?submit.581297 - https://fitoxs.com/exploit/exploit-9829d8aeaf006c1a3474f4cbcc27d3dd30b5e2053444fd36b805b785f65b2e3e.txt
CVE ID: CVE-2025-5077 State: PUBLISHED Published: 2025-05-22T14:00:12.639Z Last Updated: 2025-05-22T14:19:37.606Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Online Shopping Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been classified as critical. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the argument Category leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309
o the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309957 - https://vuldb.com/?ctiid.309957 - https://vuldb.com/?submit.581431 - https://github.com/GeniusWang23/CVE/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-5078 State: PUBLISHED Published: 2025-05-22T14:00:14.795Z Last Updated: 2025-09-02T12:55:01.660Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul, Campcodes Products: Online Shopping Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected is an unknown function of the file /admin/subcategory.php. Performing manipulation of the argument Category results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3099
now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309958 - https://vuldb.com/?ctiid.309958 - https://vuldb.com/?submit.581432 - https://vuldb.com/?submit.641751 - https://github.com/GeniusWang23/CVE/issues/2
CVE ID: CVE-2025-5079 State: PUBLISHED Published: 2025-05-22T14:31:04.626Z Last Updated: 2025-09-02T12:54:17.490Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul, Campcodes Products: Online Shopping Portal Problem Types: CWE-89, CWE-74 Description: A flaw has been found in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/updateorder.php. Executing manipulation of the argument remark can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
ploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309959 - https://vuldb.com/?ctiid.309959 - https://vuldb.com/?submit.581439 - https://github.com/dico-Z/CVE/issues/1
CVE ID: CVE-2025-5080 State: PUBLISHED Published: 2025-05-22T15:00:19.001Z Last Updated: 2025-05-22T18:06:30.148Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: FH451 Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function webExcptypemanFilter of the file /goform/webExcptypemanFilter. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309960 - https://vuldb.
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309960 - https://vuldb.com/?ctiid.309960 - https://vuldb.com/?submit.582059 - https://github.com/xubeining/Cve_report/blob/main/Shenzhen%20Jixiang%20Tengda%20Technology%20Co.%2C%20Ltd.%20FH451%20has%20a%20Remote%20Code%20Execution%20vulnerability.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-5081 State: PUBLISHED Published: 2025-05-22T15:31:05.737Z Last Updated: 2025-05-22T15:57:30.154Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Cybercafe Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in Campcodes Cybercafe Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adminprofile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP
isclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309961 - https://vuldb.com/?ctiid.309961 - https://vuldb.com/?submit.582065 - https://github.com/wzylky/CVE/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-5082 State: PUBLISHED Published: 2025-05-28T07:23:57.358Z Last Updated: 2025-05-28T14:37:40.915Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: milmor Products: WP Attachments Problem Types: CWE-79 Description: The WP Attachments plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘attachment_id’ parameter in all versions up to, and including, 5.0.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional
ges that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bdc33ecc-da54-4852-8426-bfafe0dca41b?source=cve - https://wordpress.org/plugins/wp-attachments/#developers - https://plugins.trac.wordpress.org/browser/wp-attachments/tags/5.0.12/inc/html/attachmentEditIframe.php - https://plugins.trac.wordpress.org/browser/wp-attachments/tags/5.0.12/inc/ij-post-attachments.php#L274 - https://plugins.trac.wordpress.org/changeset/3300269/
CVE ID: CVE-2025-5083 State: PUBLISHED Published: 2025-08-31T04:25:48.840Z Last Updated: 2025-09-02T20:45:21.159Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: milmor Products: Amministrazione Trasparente Problem Types: CWE-79 Description: The Amministrazione Trasparente plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Thi
ons and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8741bbdf-ddd9-41f7-8d22-b9350f2cf659?source=cve - https://github.com/WPGov/amministrazione-trasparente/blob/31e69c2ef42f36bca0b66d0550794d18292f5a23/settings.php#L49-L50 - https://github.com/WPGov/amministrazione-trasparente/blob/31e69c2ef42f36bca0b66d0550794d18292f5a23/settings.php#L59-L60 - https://wordpress.org/plugins/amministrazione-trasparente/#devel
f42f36bca0b66d0550794d18292f5a23/settings.php#L59-L60 - https://wordpress.org/plugins/amministrazione-trasparente/#developers - https://plugins.trac.wordpress.org/changeset/3352443/
CVE ID: CVE-2025-5084 State: PUBLISHED Published: 2025-07-24T09:22:15.279Z Last Updated: 2025-07-24T13:15:54.619Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: mdshuvo Products: Post Grid Master – Custom Post Types, Taxonomies & Ajax Filter Everything with Infinite Scroll, Load More, Pagination & Shortcode Builder Problem Types: CWE-79 Description: The Post Grid Master plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘argsArray['read_more_text']’ parameter in all versions up to, and including, 3.4.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra
ufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/08137a9e-6e4d-4ca6-954e-e98a44b0c9be?source=cve - https://github.com/Fr1t0viski/PoCs/blob/main/XSS_GridMaster - https://plugins.trac.wordpress.org/browser/ajax-filter-posts/tags/3.4.13/inc/functions.php - https://wordpress.org/plugins/ajax-filter-posts/#developers
CVE ID: CVE-2025-5086 State: PUBLISHED Published: 2025-06-02T17:42:42.620Z Last Updated: 2025-10-21T22:55:14.039Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Dassault Systèmes Products: DELMIA Apriso Problem Types: CWE-502 Description: A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-5087 State: PUBLISHED Published: 2025-06-24T18:30:40.700Z Last Updated: 2025-06-24T18:46:31.376Z Vendors: Kaleris Products: Navis N4 Problem Types: CWE-319 Description: Kaleris NAVIS N4 ULC (Ultra Light Client) communicates insecurely using zlib-compressed data over HTTP. An attacker capable of observing network traffic between Ultra Light Clients and N4 servers can extract sensitive information, including plaintext credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-01
CVE ID: CVE-2025-5092 State: PUBLISHED Published: 2025-11-20T06:38:41.693Z Last Updated: 2025-11-24T19:45:25.705Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: lightgalleryteam, tplugins, vowelweb, wproyal, wpsofts, famethemes, galaxyweblinks, wpkin Products: LightGallery WP, TP WooCommerce Product Gallery, Ibtana – WordPress Website Builder, Royal Addons for Elementor – Addons and Templates Kit for Elementor, Portfolio, Gallery, Product Catalog – Grid KIT Portfolio, OnePress, Gallery with thumbnail slider, Image Hover Effects Ultimate Problem Types: CWE-79 Description: Multiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Script
oblem Types: CWE-79 Description: Multiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled lightGallery library (<= 2.8.3) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/acaa3142-2bbc-43d3-8ecc-05e8edb931ec?source=cve - https://github.com/sachinchoolur/lightGalle
t-intel/vulnerabilities/id/acaa3142-2bbc-43d3-8ecc-05e8edb931ec?source=cve - https://github.com/sachinchoolur/lightGallery - https://plugins.trac.wordpress.org/changeset/3311382/ - https://plugins.trac.wordpress.org/changeset/3356089/ - https://plugins.trac.wordpress.org/changeset/3372141/ - https://plugins.trac.wordpress.org/changeset/3343557/ - https://themes.trac.wordpress.org/changeset/299860
CVE ID: CVE-2025-5093 State: PUBLISHED Published: 2025-06-27T06:00:08.082Z Last Updated: 2025-06-27T14:30:24.444Z Vendors: Unknown Products: Responsive Lightbox & Gallery Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Responsive Lightbox & Gallery WordPress plugin before 2.5.2 use the Swipebox library which does not validate and escape title attributes before outputting them back in a page/post where used, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1862b4a6-5570-48a4-9b09-f9659eb0e9e3/
CVE ID: CVE-2025-5095 State: PUBLISHED Published: 2025-08-08T17:24:32.553Z Last Updated: 2025-08-08T18:55:32.283Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Burk Technology Products: ARC Solo Problem Types: CWE-306 Description: Burk Technology ARC Solo's password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. A password change request can be sent directly to the device's HTTP endpoint without providing valid credentials. The system does not enforce proper authentication or session validation, allowing the password change to proceed without verifying the request's legitimacy. Add
ntication or session validation, allowing the password change to proceed without verifying the request's legitimacy. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-219-03 - https://www.burk.com/products/Broadcast/ARC-Solo-6
CVE ID: CVE-2025-5096 State: PUBLISHED Published: 2025-05-23T08:23:39.711Z Last Updated: 2025-05-23T12:33:43.637Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: tobiasbg Products: TablePress – Tables in WordPress made easy Problem Types: CWE-79 Description: The TablePress plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the 'data-caption', 'data-s-content-padding', 'data-s-title', and 'data-footer' data-attributes in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary
caping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cd2dfa02-0404-4300-a5ed-6326f9df6d30?source=cve - https://plugins.trac.wordpress.org/browser/tablepress/tags/3.1.2/js/jquery.datatables.min.js - https://github.com/DataTables/DataTablesSrc/blob/29539c40504365bc4be0599e4b0739cf270a2e09/js/core/core.constructor.js#L329 - https://wordpress.org/plugins/tablepress/#developers - https://datatables.net/ - https://github.com/Data
uctor.js#L329 - https://wordpress.org/plugins/tablepress/#developers - https://datatables.net/ - https://github.com/DataTables/DataTablesSrc/commit/d278ed307035cb8740d2fad86b7cbb995380f7bb - https://github.com/DataTables/DataTablesSrc/commit/d558328106bef2d48dfc4cf78581dd106f5c1077 - https://plugins.trac.wordpress.org/changeset/3298453/tablepress - https://tablepress.org/release-announcement-tablepress-3-1-3/
CVE ID: CVE-2025-5097 State: REJECTED Published: N/A Last Updated: 2025-06-07T22:16:26.178Z Description: No description available.
CVE ID: CVE-2025-5098 State: PUBLISHED Published: 2025-05-23T01:06:25.126Z Last Updated: 2025-05-23T15:40:02.026Z Vendors: Mobile Dynamix Products: PrinterShare Mobile Print Problem Types: CWE-200, CWE-313 Description: PrinterShare Android application allows the capture of Gmail authentication tokens that can be reused to access a user's Gmail account without proper authorization. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://korelogic.com/Resources/Advisories/KL-001-2025-003.txt
CVE ID: CVE-2025-5099 State: PUBLISHED Published: 2025-05-23T01:05:53.182Z Last Updated: 2025-05-23T15:40:38.399Z Vendors: Mobile Dynamix Products: PrinterShare Mobile Print Problem Types: CWE-119, CWE-787 Description: An Out of Bounds Write occurs when the native library attempts PDF rendering, which can be exploited to achieve memory corruption and potentially arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://korelogic.com/Resources/Advisories/KL-001-2025-004.txt
CVE ID: CVE-2025-5100 State: PUBLISHED Published: 2025-05-23T01:09:41.306Z Last Updated: 2025-05-27T15:57:12.302Z Vendors: Mobile Dynamix Products: PrinterShare Mobile Print Problem Types: CWE-415, CWE-416 Description: A double-free condition occurs during the cleanup of temporary image files, which can be exploited to achieve memory corruption and potentially arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://korelogic.com/Resources/Advisories/KL-001-2025-005.txt