Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
in the "Edit" section of the CMS, offered an upload functionality for documents. These documents could later be used as displayed content on the page. It was possible to upload SVG files that include malicious JavaScript code that would be executed if a user visited the direct URL of the preview image. Attackers needed at least the role "WebEditor" in order to exploit this issue. Affected products: Version 11.X: EPiServer.CMS.Core (<11.21.4) with EPiServer.CMS.UI (<11.37.5), Version 12.X: EPiServer.CMS.Core (<12.22.1) with EPiServer.CMS.UI (<11.37.3) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://api.nuget.optimizely.com/packages/episerver.
es: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://api.nuget.optimizely.com/packages/episerver.cms.core/11.21.4# - https://api.nuget.optimizely.com/packages/episerver.cms.core/12.22.1# - https://r.sec-consult.com/optimizely
CVE ID: CVE-2025-27802 State: PUBLISHED Published: 2025-07-28T08:47:43.486Z Last Updated: 2025-11-03T19:46:27.417Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Optimizely Products: Episerver Content Management System (CMS) Problem Types: CWE-79 Description: The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities. This allowed an authenticated attacker to execute malicious JavaScript code in the victim's browser. RTE properties (text fields), which could be used in the "Edit" section of the CMS, allowed the input of arbitrary text. It was possible to input malicious JavaScript c
d in the "Edit" section of the CMS, allowed the input of arbitrary text. It was possible to input malicious JavaScript code in these properties that would be executed if a user visits the previewed page. Attackers needed at least the role "WebEditor" in order to exploit this issue. Affected products: Version 11.X: EPiServer.CMS.Core (<11.21.4) with EPiServer.CMS.UI (<11.37.5), Version 12.X: EPiServer.CMS.Core (<12.22.1) with EPiServer.CMS.UI (<11.37.3) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://api.nuget.optimizely.com/packages/episerver.cms.core/11.21.4# - https://api.nuget.optimizely.com/packages/episerver.cms.core/12.22.1# - https://r
packages/episerver.cms.core/11.21.4# - https://api.nuget.optimizely.com/packages/episerver.cms.core/12.22.1# - https://r.sec-consult.com/optimizely
CVE ID: CVE-2025-27803 State: PUBLISHED Published: 2025-05-21T11:29:15.596Z Last Updated: 2025-11-03T19:46:28.780Z Vendors: eCharge Hardy Barth Products: cPH2 / cPP2 charging stations Problem Types: CWE-306 Description: The devices do not implement any authentication for the web interface or the MQTT server. An attacker who has network access to the device immediately gets administrative access to the devices and can perform arbitrary administrative actions and reconfigure the devices or potentially gain access to sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://r.sec-consult.com/echarge
CVE ID: CVE-2025-27804 State: PUBLISHED Published: 2025-05-21T11:35:11.940Z Last Updated: 2025-11-03T19:46:30.147Z Vendors: eCharge Hardy Barth Products: cPH2 / cPP2 charging stations Problem Types: CWE-78 Description: Several OS command injection vulnerabilities exist in the device firmware in the /var/salia/mqtt.php script. By publishing a specially crafted message to a certain MQTT topic arbitrary OS commands can be executed with root permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://r.sec-consult.com/echarge
CVE ID: CVE-2025-27809 State: PUBLISHED Published: 2025-03-25T00:00:00.000Z Last Updated: 2025-03-25T16:49:13.269Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: Mbed Products: mbedtls Problem Types: CWE-1188 Description: Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Mbed-TLS/mbedtls/releases - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-03-1/
CVE ID: CVE-2025-27810 State: PUBLISHED Published: 2025-03-25T00:00:00.000Z Last Updated: 2025-03-25T14:37:14.294Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: Mbed Products: mbedtls Problem Types: CWE-908 Description: Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Mbed-TLS/mbedtls/releases - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-202
/Mbed-TLS/mbedtls/releases - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-03-2/
CVE ID: CVE-2025-27811 State: PUBLISHED Published: 2025-06-04T00:00:00.000Z Last Updated: 2025-06-04T18:20:29.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: A local privilege escalation in the razer_elevation_service.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://app.inspectiv.com/#/submissions/EAEDG9ssRaTWKSJJ5Bbrt9 - https://gist.github.com/leonjza/829a98f6c0954d7cb3f6614d05f87f37
CVE ID: CVE-2025-27812 State: PUBLISHED Published: 2025-04-10T00:00:00.000Z Last Updated: 2025-04-10T14:50:21.050Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: MSI Products: Center Problem Types: CWE-367 Description: MSI Center before 2.0.52.0 allows TOCTOU Local Privilege Escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://csr.msi.com/global/product-security-advisories
CVE ID: CVE-2025-27813 State: PUBLISHED Published: 2025-04-10T00:00:00.000Z Last Updated: 2025-04-10T14:49:41.888Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: MSI Products: Center Problem Types: CWE-347 Description: MSI Center before 2.0.52.0 has Missing PE Signature Validation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://csr.msi.com/global/product-security-advisories
CVE ID: CVE-2025-27816 State: PUBLISHED Published: 2025-03-07T00:00:00.000Z Last Updated: 2025-03-07T19:35:44.406Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in the Arctera InfoScale 7.0 through 8.0.2 where a .NET remoting endpoint can be exploited due to the insecure deserialization of potentially untrusted messages. The vulnerability is present in the Windows Plugin_Host service, which runs on all the servers where InfoScale is installed. The service is used only when applications are configured for Disaster Recovery (DR) using the DR wizard. Disabling the Plugin_Host s
s used only when applications are configured for Disaster Recovery (DR) using the DR wizard. Disabling the Plugin_Host service manually will eliminate the vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.veritas.com/content/support/en_US/security/ARC25-002
CVE ID: CVE-2025-27817 State: PUBLISHED Published: 2025-06-10T07:55:14.422Z Last Updated: 2025-06-10T15:15:40.843Z Vendors: Apache Software Foundation Products: Apache Kafka Client Problem Types: Arbitrary file read and SSRF vulnerability Description: A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration data for setting the SASL/OAUTHBEARER connection with the brokers, including "sasl.oauthbearer.token.endpoint.url" and "sasl.oauthbearer.jwks.endpoint.url". Apache Kafka allows clients to read an arbitrary file and return the content in the error log, or sending requests to an unintended location. In applic
read an arbitrary file and return the content in the error log, or sending requests to an unintended location. In applications where Apache Kafka Clients configurations can be specified by an untrusted party, attackers may use the "sasl.oauthbearer.token.endpoint.url" and "sasl.oauthbearer.jwks.endpoint.url" configuratin to read arbitrary contents of the disk and environment variables or make requests to an unintended location. In particular, this flaw may be used in Apache Kafka Connect to escalate from REST API access to filesystem/environment/URL access, which may be undesirable in certain environments, including SaaS products. Since Apache Kafka 3.9.1/4.0.0, we have added a system proper
esirable in certain environments, including SaaS products. Since Apache Kafka 3.9.1/4.0.0, we have added a system property ("-Dorg.apache.kafka.sasl.oauthbearer.allowed.urls") to set the allowed urls in SASL JAAS configuration. In 3.9.1, it accepts all urls by default for backward compatibility. However in 4.0.0 and newer, the default value is empty list and users have to set the allowed urls explicitly. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kafka.apache.org/cve-list
CVE ID: CVE-2025-27818 State: PUBLISHED Published: 2025-06-10T07:52:31.778Z Last Updated: 2025-08-21T03:55:17.864Z Vendors: Apache Software Foundation Products: Apache Kafka Problem Types: CWE-502 Description: A possible security vulnerability has been identified in Apache Kafka. This requires access to a alterConfig to the cluster resource, or Kafka Connect worker, and the ability to create/modify connectors on it with an arbitrary Kafka client SASL JAAS config and a SASL-based security protocol, which has been possible on Kafka clusters since Apache Kafka 2.0.0 (Kafka Connect 2.3.0). When configuring the broker via config file or AlterConfig command, or connector via the Kafka Kafka Connec
nect 2.3.0). When configuring the broker via config file or AlterConfig command, or connector via the Kafka Kafka Connect REST API, an authenticated operator can set the `sasl.jaas.config` property for any of the connector's Kafka clients to "com.sun.security.auth.module.LdapLoginModule", which can be done via the `producer.override.sasl.jaas.config`, `consumer.override.sasl.jaas.config`, or `admin.override.sasl.jaas.config` properties. This will allow the server to connect to the attacker's LDAP server and deserialize the LDAP response, which the attacker can use to execute java deserialization gadget chains on the Kafka connect server. Attacker can cause unrestricted deserialization of unt
e java deserialization gadget chains on the Kafka connect server. Attacker can cause unrestricted deserialization of untrusted data (or) RCE vulnerability when there are gadgets in the classpath. Since Apache Kafka 3.0.0, users are allowed to specify these properties in connector configurations for Kafka Connect clusters running with out-of-the-box configurations. Before Apache Kafka 3.0.0, users may not specify these properties unless the Kafka Connect cluster has been reconfigured with a connector client override policy that permits them. Since Apache Kafka 3.9.1/4.0.0, we have added a system property ("-Dorg.apache.kafka.disallowed.login.modules") to disable the problematic login modules
e have added a system property ("-Dorg.apache.kafka.disallowed.login.modules") to disable the problematic login modules usage in SASL JAAS configuration. Also by default "com.sun.security.auth.module.JndiLoginModule,com.sun.security.auth.module.LdapLoginModule" are disabled in Apache Kafka Connect 3.9.1/4.0.0. We advise the Kafka users to validate connector configurations and only allow trusted LDAP configurations. Also examine connector dependencies for vulnerable versions and either upgrade their connectors, upgrading that specific dependency, or removing the connectors as options for remediation. Finally, in addition to leveraging the "org.apache.kafka.disallowed.login.modules" system pro
s options for remediation. Finally, in addition to leveraging the "org.apache.kafka.disallowed.login.modules" system property, Kafka Connect users can also implement their own connector client config override policy, which can be used to control which Kafka client properties can be overridden directly in a connector config and which cannot. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kafka.apache.org/cve-list
CVE ID: CVE-2025-27819 State: PUBLISHED Published: 2025-06-10T07:54:41.896Z Last Updated: 2025-06-10T15:15:58.031Z Vendors: Apache Software Foundation Products: Apache Kafka Problem Types: CWE-502 Description: In CVE-2023-25194, we announced the RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration in Kafka Connect API. But not only Kafka Connect API is vulnerable to this attack, the Apache Kafka brokers also have this vulnerability. To exploit this vulnerability, the attacker needs to be able to connect to the Kafka cluster and have the AlterConfigs permission on the cluster resource. Since Apache Kafka 3.4.0, we have added a system property ("-Dorg.apache.kafka.disallowe
ission on the cluster resource. Since Apache Kafka 3.4.0, we have added a system property ("-Dorg.apache.kafka.disallowed.login.modules") to disable the problematic login modules usage in SASL JAAS configuration. Also by default "com.sun.security.auth.module.JndiLoginModule" is disabled in Apache Kafka 3.4.0, and "com.sun.security.auth.module.JndiLoginModule,com.sun.security.auth.module.LdapLoginModule" is disabled by default in in Apache Kafka 3.9.1/4.0.0 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://kafka.apache.org/cve-list
CVE ID: CVE-2025-27820 State: PUBLISHED Published: 2025-04-24T11:44:25.986Z Last Updated: 2025-06-04T11:20:12.764Z Vendors: Apache Software Foundation Products: Apache HttpComponents Problem Types: PSL Validation Bypass in Apache HttpClient 5.4.x Description: A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/apache/httpcomponents-client/pull/574 - https://github.com/apache/httpcomponents-client/pull/621 - https://hc.apache.org/http
e/httpcomponents-client/pull/574 - https://github.com/apache/httpcomponents-client/pull/621 - https://hc.apache.org/httpcomponents-client-5.4.x/index.html - https://lists.apache.org/thread/55xhs40ncqv97qvoocok44995xp5kqn8
CVE ID: CVE-2025-27822 State: PUBLISHED Published: 2025-03-07T00:00:00.000Z Last Updated: 2025-03-07T22:29:21.287Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: backdropcms Products: Masquerade Problem Types: CWE-863 Description: An issue was discovered in the Masquerade module before 1.x-1.0.1 for Backdrop CMS. It allows people to temporarily switch to another user account. The module provides a "Masquerade as admin" permission to restrict people (who can masquerade) from switching to an account with administrative privileges. This permission is not always honored and may allow non-administrative users to masquerade as an administrator. This vulnerability i
ion is not always honored and may allow non-administrative users to masquerade as an administrator. This vulnerability is mitigated by the fact that an attacker must have a role with the "Masquerade as user" permission. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://backdropcms.org/security/backdrop-sa-contrib-2025-006
CVE ID: CVE-2025-27823 State: PUBLISHED Published: 2025-03-07T00:00:00.000Z Last Updated: 2025-03-07T22:30:42.387Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: backdropcms Products: Mail Disguise Problem Types: CWE-79 Description: An issue was discovered in the Mail Disguise module before 1.x-1.0.5 for Backdrop CMS. It enables a website to obfuscate email addresses, and should prevent spambots from collecting them. The module doesn't sufficiently validate the data attribute value on links, potentially leading to a Cross Site Scripting (XSS) vulnerability. This is mitigated by the fact an attacker must be able to insert link (<a>) HTML elements containing
SS) vulnerability. This is mitigated by the fact an attacker must be able to insert link (<a>) HTML elements containing data attributes into the page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://backdropcms.org/security/backdrop-sa-contrib-2025-007
CVE ID: CVE-2025-27824 State: PUBLISHED Published: 2025-03-07T00:00:00.000Z Last Updated: 2025-03-07T22:30:26.688Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: backdropcms Products: Link iframe formatter Problem Types: CWE-79 Description: An XSS issue was discovered in the Link iframe formatter module before 1.x-1.1.1 for Backdrop CMS. It doesn't sufficiently sanitize input before displaying results to the screen. This vulnerability is mitigated by the fact that an attacker must have the ability to create content containing an iFrame field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://backdropcms.org/security/backdrop-sa-contri
ld. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://backdropcms.org/security/backdrop-sa-contrib-2025-003
CVE ID: CVE-2025-27825 State: PUBLISHED Published: 2025-03-07T00:00:00.000Z Last Updated: 2025-03-07T22:30:03.942Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: backdropcms Products: Bootstrap 5 Lite theme Problem Types: CWE-79 Description: An XSS issue was discovered in the Bootstrap 5 Lite theme before 1.x-1.0.3 for Backdrop CMS. It doesn't sufficiently sanitize certain class names. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://backdropcms.org/security/backdrop-sa-contrib-2025-004
CVE ID: CVE-2025-27826 State: PUBLISHED Published: 2025-03-07T00:00:00.000Z Last Updated: 2025-03-07T22:29:40.914Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: backdropcms Products: Bootstrap Lite theme Problem Types: CWE-79 Description: An XSS issue was discovered in the Bootstrap Lite theme before 1.x-1.4.5 for Backdrop CMS. It doesn't sufficiently sanitize certain class names. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://backdropcms.org/security/backdrop-sa-core-2025-005
CVE ID: CVE-2025-27827 State: PUBLISHED Published: 2025-06-24T00:00:00.000Z Last Updated: 2025-06-24T14:17:10.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.2.0.3 could allow an unauthenticated attacker to conduct an information disclosure attack due to improper handling of session data. A successful exploit requires user interaction and could allow an attacker to access sensitive information, leading to unauthorized access to active chat rooms, reading chat data, and sending messages during an active chat session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
sending messages during an active chat session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2025-0002-0
CVE ID: CVE-2025-27828 State: PUBLISHED Published: 2025-06-24T00:00:00.000Z Last Updated: 2025-06-24T14:41:18.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4, 10.1.0.0 through 10.1.0.5, and 10.2.0.0 through 10.2.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient input validation. A successful exploit requires user interaction and could allow an attacker to execute arbitrary scripts with a limited impact on the confidentiality and the integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
ed impact on the confidentiality and the integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2025-0003
CVE ID: CVE-2025-27829 State: PUBLISHED Published: 2025-04-01T00:00:00.000Z Last Updated: 2025-04-14T17:25:32.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.35. If multicast streams are enabled on different interfaces, it may be possible to interrupt multicast traffic on some of these interfaces. That could result in a denial of the multicast routing service on the firewall. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://advisories.stormshield.eu/2025-002/
CVE ID: CVE-2025-27830 State: PUBLISHED Published: 2025-03-25T00:00:00.000Z Last Updated: 2025-11-03T19:46:31.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=708241
CVE ID: CVE-2025-27831 State: PUBLISHED Published: 2025-03-25T00:00:00.000Z Last Updated: 2025-11-03T19:46:32.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=708132
CVE ID: CVE-2025-27832 State: PUBLISHED Published: 2025-03-25T00:00:00.000Z Last Updated: 2025-11-03T19:46:34.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=708133
CVE ID: CVE-2025-27833 State: PUBLISHED Published: 2025-03-25T00:00:00.000Z Last Updated: 2025-03-26T13:43:43.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdf_fmap.c. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugs.ghostscript.com/show_bug.cgi?id=708259
CVE ID: CVE-2025-27834 State: PUBLISHED Published: 2025-03-25T00:00:00.000Z Last Updated: 2025-03-26T13:48:14.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdf_func.c. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugs.ghostscript.com/show_bug.cgi?id=708253
CVE ID: CVE-2025-27835 State: PUBLISHED Published: 2025-03-25T00:00:00.000Z Last Updated: 2025-11-03T19:46:35.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=708131