Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
criber-level permissions and above, to log in as any existing user on the site, such as an administrator, if they have access to the user id. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8f5722b0-0d54-4c44-b168-a886da1077cb?source=cve - https://plugins.trac.wordpress.org/browser/browse-as/tags/0.2/browse-as.php#L115 - https://plugins.trac.wordpress.org/browser/browse-as/tags/0.2/browse-as.php#L92
CVE ID: CVE-2025-5191 State: PUBLISHED Published: 2025-08-25T08:01:11.035Z Last Updated: 2025-08-25T13:48:09.418Z Vendors: Moxa Products: Utility for DRP-A100 Series, Utility for DRP-C100 Series Problem Types: CWE-428 Description: An Unquoted Search Path vulnerability has been identified in the utility for Moxa’s industrial computers (Windows). Due to the unquoted path configuration in the SerialInterfaceService.exe utility, a local attacker with limited privileges could place a malicious executable in a higher-priority directory within the search path. When the Serial Interface service starts, the malicious executable could be run with SYSTEM privileges. Successful exploitation could allow
rface service starts, the malicious executable could be run with SYSTEM privileges. Successful exploitation could allow privilege escalation or enable an attacker to maintain persistence on the affected system. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality, integrity, or availability within any subsequent systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-256421-cve-2025-5191-unquoted-search-path-vulnerability-in-the-utility-for-industrial-computers-(windows)
CVE ID: CVE-2025-5192 State: PUBLISHED Published: 2025-06-06T09:15:17.081Z Last Updated: 2025-06-06T13:59:48.427Z Vendors: Soar Cloud System CO., LTD. Products: HRD Human Resource Management System Problem Types: CWE-306 Description: A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and access application functions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://zuso.ai/advisory/za-2025-04
CVE ID: CVE-2025-5194 State: PUBLISHED Published: 2025-06-27T06:00:10.599Z Last Updated: 2025-07-01T19:19:58.297Z Vendors: Unknown Products: WP Map Block Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Map Block WordPress plugin before 2.0.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f90b7ad6-e2a2-4833-a390-a78c64dc2382/
CVE ID: CVE-2025-5195 State: PUBLISHED Published: 2025-06-12T10:31:00.372Z Last Updated: 2025-06-12T13:25:45.847Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-639 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. It was possible for authenticated users to access arbitrary compliance frameworks, leading to unauthorized data disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/534960
CVE ID: CVE-2025-5196 State: PUBLISHED Published: 2025-05-26T13:31:05.016Z Last Updated: 2025-05-28T17:35:14.955Z Severity: N/A (CVSS 6.8 AV:N/AC:H/Au:M/C:C/I:C/A:C) Vendors: Wing Products: FTP Server Problem Types: CWE-250 Description: A vulnerability has been found in Wing FTP Server up to 7.4.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Lua Admin Console. The manipulation leads to execution with unnecessary privileges. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 7.4.4 is able to address this issue. It is recommended to upgrade the
tion appears to be difficult. Upgrading to version 7.4.4 is able to address this issue. It is recommended to upgrade the affected component. The vendor explains: "[W]e do not consider it as a security vulnerability, because the system admin in WingFTP has full permissions [...], but you can suggest the user run WingFTP service as Normal User rather than SYSTEM/Root, it will be safer." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310279 - https://vuldb.com/?ctiid.310279 - https://vuldb.com/?submit.584253 - https://github.com/Nouvexr/Wing-FTP-Server-7.4.4-RCE-Authenticated/blob/main/poc.txt - https://www.wftpserver.com/serverhistory.htm
CVE ID: CVE-2025-5197 State: PUBLISHED Published: 2025-08-06T11:53:37.232Z Last Updated: 2025-08-06T13:03:10.518Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: huggingface Products: huggingface/transformers Problem Types: CWE-1333 Description: A Regular Expression Denial of Service (ReDoS) vulnerability exists in the Hugging Face Transformers library, specifically in the `convert_tf_weight_name_to_pt_weight_name()` function. This function, responsible for converting TensorFlow weight names to PyTorch format, uses a regex pattern `/[^/]*___([^/]*)/` that can be exploited to cause excessive CPU consumption through crafted input strings due to catastrophic ba
_([^/]*)/` that can be exploited to cause excessive CPU consumption through crafted input strings due to catastrophic backtracking. The vulnerability affects versions up to 4.51.3 and is fixed in version 4.53.0. This issue can lead to service disruption, resource exhaustion, and potential API service vulnerabilities, impacting model conversion processes between TensorFlow and PyTorch formats. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/3f8b3fd0-166b-46e7-b60f-60dd9d2678bf - https://github.com/huggingface/transformers/commit/944b56000be5e9b61af8301aa340838770ad8a0b
CVE ID: CVE-2025-5198 State: PUBLISHED Published: 2025-05-27T20:51:34.287Z Last Updated: 2025-11-20T21:09:55.052Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Red Hat Products: Red Hat Advanced Cluster Security 4 Problem Types: CWE-79 Description: A flaw was found in Stackrox, where it is vulnerable to Cross-site scripting (XSS) if the script code is included in a small subset of table cells. The only known potential exploit is if the script is included in the name of a Kubernetes “Role” object* that is applied to a secured cluster. This object can be used by a user with access to the cluster or through a compromised third-party product. Additional Analyst
bject can be used by a user with access to the cluster or through a compromised third-party product. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-5198 - https://bugzilla.redhat.com/show_bug.cgi?id=2368568 - https://github.com/stackrox/stackrox/pull/13336
CVE ID: CVE-2025-5199 State: PUBLISHED Published: 2025-07-11T23:21:30.996Z Last Updated: 2025-07-14T20:12:58.921Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Canonical Products: Multipass Problem Types: CWE-276 Description: In Canonical Multipass up to and including version 1.15.1 on macOS, incorrect default permissions allow a local attacker to escalate privileges by modifying files executed with administrative privileges by a Launch Daemon during system startup. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/canonical/multipass/security/advisories/GHSA-2j82-p5cq-62p3 - https://github.com/canonical/multipass/pull/4115
CVE ID: CVE-2025-5200 State: PUBLISHED Published: 2025-05-26T18:31:06.626Z Last Updated: 2025-05-28T17:35:08.578Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Open Asset Import Library Products: Assimp Problem Types: CWE-125, CWE-119 Description: A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDLImporter::InternReadFile_Quake1 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation leads to out-of-bounds read. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuz
on the local host. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310289 - https://vuldb.com/?ctiid.310289 - https://vuldb.com/?submit.578005 - https://github.com/assimp/assimp/issues/6172 - https://github.com/assimp/assimp/issues/6128 - https://github.com/user-attachments/files/20208985/line-452-reproducer.zip
CVE ID: CVE-2025-5201 State: PUBLISHED Published: 2025-05-26T19:00:09.982Z Last Updated: 2025-05-28T17:35:01.372Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Open Asset Import Library Products: Assimp Problem Types: CWE-125, CWE-119 Description: A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function LWOImporter::CountVertsAndFacesLWO2 of the file assimp/code/AssetLib/LWO/LWOLoader.cpp. The manipulation leads to out-of-bounds read. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs
d locally. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310290 - https://vuldb.com/?ctiid.310290 - https://vuldb.com/?submit.578006 - https://github.com/assimp/assimp/issues/6173 - https://github.com/assimp/assimp/issues/6128 - https://github.com/user-attachments/files/20209125/line-832-reproducer.zip
CVE ID: CVE-2025-5202 State: PUBLISHED Published: 2025-05-26T19:31:06.228Z Last Updated: 2025-05-28T17:34:55.692Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Open Asset Import Library Products: Assimp Problem Types: CWE-125, CWE-119 Description: A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as problematic. Affected by this vulnerability is the function HL1MDLLoader::validate_header of the file assimp/code/AssetLib/MDL/HalfLife/HL1MDLLoader.cpp. The manipulation leads to out-of-bounds read. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The project decided to c
ack has to be approached locally. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310291 - https://vuldb.com/?ctiid.310291 - https://vuldb.com/?submit.578007 - https://github.com/assimp/assimp/issues/6174 - https://github.com/assimp/assimp/issues/6128 - https://github.com/user-attachments/files/20209236/reproducer.zip
CVE ID: CVE-2025-5203 State: PUBLISHED Published: 2025-05-26T20:00:09.448Z Last Updated: 2025-05-28T17:34:50.134Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Open Asset Import Library Products: Assimp Problem Types: CWE-125, CWE-119 Description: A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function SkipSpaces in the library assimp/include/assimp/ParsingUtils.h. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a mai
k. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310292 - https://vuldb.com/?ctiid.310292 - https://vuldb.com/?submit.578012 - https://github.com/assimp/assimp/issues/6175 - https://github.com/assimp/assimp/issues/6128 - https://github.com/user-attachments/files/20209469/reproducer.zip
CVE ID: CVE-2025-5204 State: PUBLISHED Published: 2025-05-26T20:31:06.524Z Last Updated: 2025-05-28T17:34:44.012Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Open Asset Import Library Products: Assimp Problem Types: CWE-125, CWE-119 Description: A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::ParseSkinLump_3DGS_MDL7 of the file assimp/code/AssetLib/MDL/MDLMaterialLoader.cpp. The manipulation leads to out-of-bounds read. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a
ment. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310293 - https://vuldb.com/?ctiid.310293 - https://vuldb.com/?submit.578013 - https://github.com/assimp/assimp/issues/6176 - https://github.com/assimp/assimp/issues/6128 - https://github.com/user-attachments/files/20209911/ParseSkinLump-reproducer.zip
CVE ID: CVE-2025-5205 State: PUBLISHED Published: 2025-05-26T21:00:10.820Z Last Updated: 2025-05-28T17:34:38.564Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 1000 Projects Products: Daily College Class Work Report Book Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in 1000 Projects Daily College Class Work Report Book 1.0. Affected is an unknown function of the file /dcwr_entry.php. The manipulation of the argument Date leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310302 - https://vuldb.com/?ctiid.310302 - https://vuldb.com/?submit.582110 - https://github.com/Jackie1732/CVE/issues/1 - https://1000projects.org/
CVE ID: CVE-2025-5206 State: PUBLISHED Published: 2025-05-26T21:31:04.541Z Last Updated: 2025-05-27T14:01:37.871Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: Pixelimity Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in Pixelimity 1.0. Affected by this vulnerability is an unknown functionality of the file /install/index.php of the component Installation. The manipulation of the argument site_description leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310303 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310303 - https://vuldb.com/?ctiid.310303 - https://vuldb.com/?submit.582221 - https://github.com/be2398/aaa/issues/4
CVE ID: CVE-2025-5207 State: PUBLISHED Published: 2025-05-26T22:00:10.119Z Last Updated: 2025-05-27T13:59:13.707Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Client Database Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unknown functionality of the file /superadmin_update_profile.php. The manipulation of the argument nickname/email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA
may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310304 - https://vuldb.com/?ctiid.310304 - https://vuldb.com/?submit.582253 - https://github.com/RS7325/cve/issues/1 - https://www.sourcecodester.com/
CVE ID: CVE-2025-5208 State: PUBLISHED Published: 2025-05-26T22:31:04.978Z Last Updated: 2025-05-27T13:56:12.740Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Hospital Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in SourceCodester Online Hospital Management System 1.0. This affects an unknown part of the file /admin/check_availability.php. The manipulation of the argument emailid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310305 - https://vuldb.com/?ctiid.310305 - https://vuldb.com/?submit.582279 - https://github.com/snkercyber/CVE/issues/4 - https://www.sourcecodester.com/
CVE ID: CVE-2025-5209 State: PUBLISHED Published: 2025-06-17T06:00:04.975Z Last Updated: 2025-06-17T13:35:43.941Z Vendors: Unknown Products: Ivory Search Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Ivory Search WordPress plugin before 5.5.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8b51dc46-62c8-45b5-96ce-fb774b430388/
CVE ID: CVE-2025-5210 State: PUBLISHED Published: 2025-05-26T22:31:07.745Z Last Updated: 2025-05-27T13:54:32.613Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Employee Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This vulnerability affects unknown code of the file /loginerms.php. The manipulation of the argument Email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310306 - https://vuldb.com/?ctiid.310306 - https://vuldb.com/?submit.582802 - https://github.com/ting-06a/myCVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-5211 State: PUBLISHED Published: 2025-05-26T23:00:12.084Z Last Updated: 2025-05-27T13:52:50.638Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Employee Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This issue affects some unknown processing of the file /myprofile.php. The manipulation of the argument EmpCode leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310307 - https://vuldb.com/?ctiid.310307 - https://vuldb.com/?submit.582809 - https://github.com/ting-06a/myCVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-5212 State: PUBLISHED Published: 2025-05-26T23:00:15.228Z Last Updated: 2025-05-27T13:51:53.899Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Employee Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Employee Record Management System 1.3. It has been classified as critical. Affected is an unknown function of the file /admin/editempexp.php. The manipulation of the argument emp1name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
as been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310308 - https://vuldb.com/?ctiid.310308 - https://vuldb.com/?submit.582812 - https://github.com/ting-06a/myCVE/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-5213 State: PUBLISHED Published: 2025-05-26T23:31:04.510Z Last Updated: 2025-05-27T13:49:09.881Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: projectworlds Products: Responsive E-Learning System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in projectworlds Responsive E-Learning System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/delete_file.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310309 - https://vuldb.com/?ctiid.310309 - https://vuldb.com/?submit.582909 - https://github.com/xinpengccc/cve-/issues/1
CVE ID: CVE-2025-5214 State: PUBLISHED Published: 2025-05-26T23:31:06.405Z Last Updated: 2025-05-27T13:47:07.630Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Kashipara Products: Responsive Online Learing Platform Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Kashipara Responsive Online Learing Platform 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /courses/course_detail_user_new.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The name of the affected product appears to have a typo
. The exploit has been disclosed to the public and may be used. The name of the affected product appears to have a typo in it. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310310 - https://vuldb.com/?ctiid.310310 - https://vuldb.com/?submit.582929 - https://github.com/ShenHao5201314/cve/issues/1
CVE ID: CVE-2025-5215 State: PUBLISHED Published: 2025-05-27T00:00:07.257Z Last Updated: 2025-05-28T17:34:32.426Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: D-Link Products: DCS-5020L Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical has been found in D-Link DCS-5020L 1.01_B2. This affects the function websReadEvent of the file /rame/ptdc.cgi. The manipulation of the argument Authorization leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst N