Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-6003 State: PUBLISHED Published: 2025-06-12T08:22:43.767Z Last Updated: 2025-06-12T13:55:38.251Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: cyberlord92 Products: WordPress Single Sign-On (SSO) - Single Site Standard, WordPress Single Sign-On (SSO) - Single Site Premium, WordPress Single Sign-On (SSO) - Multisite Premium, WordPress Single Sign-On (SSO) - Single Site Enterprise, WordPress Single Sign-On (SSO) - Multisite Enterprise, WordPress Single Sign-On (SSO) - Single Site All-Inclusive, WordPress Single Sign-On (SSO) - Multisite All-Inclusive Problem Types: CWE-863 Description: The WordPress Single Sign-On (SSO) plugin for WordPress
) - Multisite All-Inclusive Problem Types: CWE-863 Description: The WordPress Single Sign-On (SSO) plugin for WordPress is vulnerable to unauthorized access due to a misconfigured capability check on a function in all versions up to, and including, the *.5.3 versions of the plugin. This makes it possible for unauthenticated attackers to extract sensitive data including site content that has been restricted to certain users and/or roles. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/51aa5531-e5b3-4c47-8d06-58eac6dd92fb?source=cve - https://plugins.miniorange.com/wordpress-sso
CVE ID: CVE-2025-6004 State: PUBLISHED Published: 2025-08-01T17:56:00.780Z Last Updated: 2025-08-01T19:11:52.729Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: HashiCorp Products: Vault, Vault Enterprise Problem Types: CWE-307 Description: Vault and Vault Enterprise’s (“Vault”) user lockout feature could be bypassed for Userpass and LDAP authentication methods. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2025-16-vault-userpass-and-ldap-user-lockout-bypass/76035
CVE ID: CVE-2025-6005 State: PUBLISHED Published: 2025-06-12T01:00:20.076Z Last Updated: 2025-06-12T13:27:02.348Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: kiCode111 Products: like-girl Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in kiCode111 like-girl 5.2.0. This vulnerability affects unknown code of the file /admin/aboutPost.php. The manipulation of the argument title/aboutimg/info1/info2/info3/btn1/btn2/infox1/infox2/infox3/infox4/infox5/infox6/btnx2/infof1/infof2/infof3/infof4/btnf3/infod1/infod2/infod3/infod4/infod5 leads to sql injection. The attack can be initiated remotely. The exploit has been discl
od1/infod2/infod3/infod4/infod5 leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312328 - https://vuldb.com/?ctiid.312328 - https://vuldb.com/?submit.587540 - https://github.com/adminnerr/cve/issues/6
CVE ID: CVE-2025-6006 State: PUBLISHED Published: 2025-06-12T01:00:23.307Z Last Updated: 2025-06-12T13:18:11.826Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: kiCode111 Products: like-girl Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in kiCode111 like-girl 5.2.0. This issue affects some unknown processing of the file /admin/ImgUpdaPost.php. The manipulation of the argument id/imgText/imgDatd/imgUrl leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in
en disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312329 - https://vuldb.com/?ctiid.312329 - https://vuldb.com/?submit.587551 - https://vuldb.com/?submit.588090 - https://github.com/adminnerr/cve/issues/7 - https://github.com/adminnerr/cve/issues/10
CVE ID: CVE-2025-6007 State: PUBLISHED Published: 2025-06-12T02:00:18.220Z Last Updated: 2025-06-12T13:13:15.751Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: kiCode111 Products: like-girl Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in kiCode111 like-girl 5.2.0. Affected is an unknown function of the file /admin/CopyadminPost.php. The manipulation of the argument icp/Copyright leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additiona
e public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312330 - https://vuldb.com/?ctiid.312330 - https://vuldb.com/?submit.587569 - https://github.com/adminnerr/cve/issues/8
CVE ID: CVE-2025-6008 State: PUBLISHED Published: 2025-06-12T02:00:19.862Z Last Updated: 2025-06-12T13:12:21.145Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: kiCode111 Products: like-girl Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in kiCode111 like-girl 5.2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ImgAddPost.php. The manipulation of the argument imgDatd/imgText/imgUrl leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond
been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312331 - https://vuldb.com/?ctiid.312331 - https://vuldb.com/?submit.588088 - https://github.com/adminnerr/cve/issues/9
CVE ID: CVE-2025-6009 State: PUBLISHED Published: 2025-06-12T02:31:05.302Z Last Updated: 2025-06-12T13:09:09.063Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: kiCode111 Products: like-girl Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in kiCode111 like-girl 5.2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/ipAddPost.php. The manipulation of the argument bz/ipdz leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Anal
ic and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312332 - https://vuldb.com/?ctiid.312332 - https://vuldb.com/?submit.588092 - https://github.com/adminnerr/cve/issues/11
CVE ID: CVE-2025-6011 State: PUBLISHED Published: 2025-08-01T18:00:24.528Z Last Updated: 2025-08-01T19:06:58.251Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: HashiCorp Products: Vault, Vault Enterprise Problem Types: CWE-203 Description: A timing side channel in Vault and Vault Enterprise’s (“Vault”) userpass auth method allowed an attacker to distinguish between existing and non-existing users, and potentially enumerate valid usernames for Vault’s Userpass auth method. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.
.19.7, 1.18.12, and 1.16.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2025-15-timing-side-channel-in-vault-s-userpass-auth-method/76034
CVE ID: CVE-2025-6012 State: PUBLISHED Published: 2025-06-13T07:23:46.262Z Last Updated: 2025-06-13T15:14:27.795Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: kaisercrazy Products: Auto Attachments Problem Types: CWE-79 Description: The Auto Attachments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.8.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects
to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/978c13e5-d30c-4caa-ab6d-256f2517fd79?source=cve - https://plugins.svn.wordpress.org/auto-attachments/trunk/auto-attachments.php
CVE ID: CVE-2025-6013 State: PUBLISHED Published: 2025-08-06T10:06:55.668Z Last Updated: 2025-08-07T03:55:18.996Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: HashiCorp Products: Vault, Vault Enterprise Problem Types: CWE-156 Description: Vault and Vault Enterprise’s (“Vault”) ldap auth method may not have correctly enforced MFA if username_as_alias was set to true and a user had multiple CNs that are equal but with leading or trailing spaces. Fixed in Vault Community Edition 1.20.2 and Vault Enterprise 1.20.2, 1.19.8, 1.18.13, and 1.16.24. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2025-20-vault
24. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2025-20-vault-ldap-mfa-enforcement-bypass-when-using-username-as-alias/76092
CVE ID: CVE-2025-6014 State: PUBLISHED Published: 2025-08-01T17:50:09.308Z Last Updated: 2025-08-01T18:05:37.553Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: HashiCorp Products: Vault, Vault Enterprise Problem Types: CWE-156 Description: Vault and Vault Enterprise’s (“Vault”) TOTP Secrets Engine code validation endpoint is susceptible to code reuse within its validity period. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2025-17-vault-totp-secrets-engine-code-reuse/76036
CVE ID: CVE-2025-6015 State: PUBLISHED Published: 2025-08-01T18:03:53.214Z Last Updated: 2025-08-01T18:35:17.893Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: HashiCorp Products: Vault, Vault Enterprise Problem Types: CWE-307 Description: Vault and Vault Enterprise’s (“Vault”) login MFA rate limits could be bypassed and TOTP tokens could be reused. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2025-19-vault-login-mfa-bypass-of-rate-limiting-and-totp-token-reuse/76038
CVE ID: CVE-2025-6017 State: PUBLISHED Published: 2025-07-02T06:36:47.171Z Last Updated: 2025-11-20T21:07:40.898Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Advanced Cluster Management for Kubernetes 2 Problem Types: CWE-359 Description: A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2.12, before 2.12.4. This vulnerability allows an unprivileged user to view confidential managed cluster credentials through the UI. This information should only be accessible to authorized users and may result in the loss of confidentiality of administrative information, which
nly be accessible to authorized users and may result in the loss of confidentiality of administrative information, which could be leaked to unauthorized actors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-6017 - https://bugzilla.redhat.com/show_bug.cgi?id=2372362
CVE ID: CVE-2025-6018 State: PUBLISHED Published: 2025-07-23T14:58:59.750Z Last Updated: 2025-11-06T21:10:28.564Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-863 Description: A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local attacker (for example, a user logged in via SSH) to obtain the elevated privileges normally reserved for a physically present, "allow_active" user. The highest risk is that the attacker can then
ivileges normally reserved for a physically present, "allow_active" user. The highest risk is that the attacker can then perform all allow_active yes Polkit actions, which are typically restricted to console users, potentially gaining unauthorized control over system configurations, services, or other sensitive operations. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2025-6018 - https://bugzilla.redhat.com/show_bug.cgi?id=2372693 - https://bugzilla.suse.com/show_bug.cgi?id=1243226 - https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt
CVE ID: CVE-2025-6019 State: PUBLISHED Published: 2025-06-19T11:55:57.380Z Last Updated: 2025-11-11T10:11:29.536Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Update Services for SAP S
, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support Problem Types: CWE-250 Description: A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Generally, the "allow_active" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate
e. Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root privileges on the target host. Normally, udisks mounts user-provided filesystem images with security flags like nosuid and nodev to prevent privilege escalation. However, a local attacker can create a specially crafted XFS image containing a SUID-root shell, then trick udisks into resizing it. This mounts their malicious filesystem with root privileges, allowing them to execute their SUID-root shell and gain complete control of the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:10796 - https://access.redhat.com/errata/RHSA-2025:9320 - https://access.redhat.com/errata/RHSA-2025:9321 - https://access.redhat.com/errata/RHSA-2025:9322 - https://access.redhat.com/errata/RHSA-2025:9323 - https://access.redhat.com/errata/RHSA-2025:9324 - https://access.redhat.com/errata/RHSA-2025:9325 - https://access.redhat.com/errata/RHSA-2025:9326 - https://access.redhat.com/errata/RHSA-2025:9327 - https://access.redhat.com/errata/RHSA-2025:9328 - https://access.redhat.com/errata/RHSA-2025:9878 - https://access.redhat.com/security/cve/CVE-2025-6019 - https:/
:9328 - https://access.redhat.com/errata/RHSA-2025:9878 - https://access.redhat.com/security/cve/CVE-2025-6019 - https://bugzilla.redhat.com/show_bug.cgi?id=2370051 - https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt
CVE ID: CVE-2025-6020 State: PUBLISHED Published: 2025-06-17T12:44:08.646Z Last Updated: 2025-11-25T10:09:57.404Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solution
at Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Web Terminal 1.11 on RHEL 9, Red Hat Web Terminal 1.12 on RHEL 9, RHEL-8 based Middleware Containers, cert-manager operator for Red Hat OpenShift 1.16, Compliance Operator 1, Red Hat Discovery 2, Red Hat Insights proxy 1.5, Red Hat
ger operator for Red Hat OpenShift 1.16, Compliance Operator 1, Red Hat Discovery 2, Red Hat Insights proxy 1.5, Red Hat OpenShift distributed tracing 3.6.1, Red Hat OpenShift sandboxed containers 1.1 Problem Types: CWE-22 Description: A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:10024 - https://access.redhat.com/errata/RHSA-2025:10027 - https://access.redhat.com/errata/RHSA-2025:10
rrata/RHSA-2025:10024 - https://access.redhat.com/errata/RHSA-2025:10027 - https://access.redhat.com/errata/RHSA-2025:10180 - https://access.redhat.com/errata/RHSA-2025:10354 - https://access.redhat.com/errata/RHSA-2025:10357 - https://access.redhat.com/errata/RHSA-2025:10358 - https://access.redhat.com/errata/RHSA-2025:10359 - https://access.redhat.com/errata/RHSA-2025:10361 - https://access.redhat.com/errata/RHSA-2025:10362 - https://access.redhat.com/errata/RHSA-2025:10735 - https://access.redhat.com/errata/RHSA-2025:10823 - https://access.redhat.com/errata/RHSA-2025:11386 - https://access.redhat.com/errata/RHSA-2025:11487 - https://access.redhat.com/errata/RHSA-2025:14557 - https://acces
86 - https://access.redhat.com/errata/RHSA-2025:11487 - https://access.redhat.com/errata/RHSA-2025:14557 - https://access.redhat.com/errata/RHSA-2025:15099 - https://access.redhat.com/errata/RHSA-2025:15709 - https://access.redhat.com/errata/RHSA-2025:15827 - https://access.redhat.com/errata/RHSA-2025:15828 - https://access.redhat.com/errata/RHSA-2025:16524 - https://access.redhat.com/errata/RHSA-2025:17181 - https://access.redhat.com/errata/RHSA-2025:18219 - https://access.redhat.com/errata/RHSA-2025:20181 - https://access.redhat.com/errata/RHSA-2025:21885 - https://access.redhat.com/errata/RHSA-2025:22019 - https://access.redhat.com/errata/RHSA-2025:9526 - https://access.redhat.com/securit
.redhat.com/errata/RHSA-2025:22019 - https://access.redhat.com/errata/RHSA-2025:9526 - https://access.redhat.com/security/cve/CVE-2025-6020 - https://bugzilla.redhat.com/show_bug.cgi?id=2372512
CVE ID: CVE-2025-6021 State: PUBLISHED Published: 2025-06-12T12:49:16.157Z Last Updated: 2025-11-07T18:40:21.180Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services
e Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat JBoss Core Services 2.4.62.SP2, Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat Ope
ntainer Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat OpenShift Container Platform 4.16, Red Hat OpenShift Container Platform 4.17, Red Hat OpenShift Container Platform 4.18, Red Hat Discovery 2, Red Hat Insights proxy 1.5, Red Hat Enterprise Linux 6 Problem Types: CWE-121 Description: A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access
crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:10630 - https://access.redhat.com/errata/RHSA-2025:10698 - https://access.redhat.com/errata/RHSA-2025:10699 - https://access.redhat.com/errata/RHSA-2025:11580 - https://access.redhat.com/errata/RHSA-2025:12098 - https://access.redhat.com/errata/RHSA-2025:12099 - https://access.redhat.com/errata/RHSA-2025:12199 - https://access.redhat.com/errata/RHSA-2025:12237 - https://access.redhat.com/errata/RHSA-2025:12239 - https://access.redhat.com/errata/RHSA-2025:12240 - https://access.redhat.com/errata/RHSA-2025:12241 - https://access.redhat.com/errata/
redhat.com/errata/RHSA-2025:12240 - https://access.redhat.com/errata/RHSA-2025:12241 - https://access.redhat.com/errata/RHSA-2025:13267 - https://access.redhat.com/errata/RHSA-2025:13289 - https://access.redhat.com/errata/RHSA-2025:13325 - https://access.redhat.com/errata/RHSA-2025:13335 - https://access.redhat.com/errata/RHSA-2025:13336 - https://access.redhat.com/errata/RHSA-2025:14059 - https://access.redhat.com/errata/RHSA-2025:14396 - https://access.redhat.com/errata/RHSA-2025:15308 - https://access.redhat.com/errata/RHSA-2025:15672 - https://access.redhat.com/errata/RHSA-2025:19020 - https://access.redhat.com/security/cve/CVE-2025-6021 - https://bugzilla.redhat.com/show_bug.cgi?id=2372
HSA-2025:19020 - https://access.redhat.com/security/cve/CVE-2025-6021 - https://bugzilla.redhat.com/show_bug.cgi?id=2372406