Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-24285 State: PUBLISHED Published: 2025-08-21T00:01:24.227Z Last Updated: 2025-08-22T03:55:39.919Z Vendors: Ubiquiti Inc Products: UniFi Connect EV Station Lite Description: Multiple Improper Input Validation vulnerabilities in UniFi Connect EV Station Lite may allow a Command Injection by a malicious actor with network access to the UniFi Connect EV Station Lite. Affected Products: UniFi Connect EV Station Lite (Version 1.5.1 and earlier) Mitigation: Update UniFi Connect EV Station Lite to Version 1.5.2 or later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-052-052/ac1251ee-5bb5-4cdf-8a71-68acd17
ment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-052-052/ac1251ee-5bb5-4cdf-8a71-68acd1775bb6
CVE ID: CVE-2025-24286 State: PUBLISHED Published: 2025-06-18T23:30:51.882Z Last Updated: 2025-06-23T16:05:15.947Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Veeam Products: Backup and Recovery Description: A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.veeam.com/kb4743
CVE ID: CVE-2025-24287 State: PUBLISHED Published: 2025-06-18T23:30:47.508Z Last Updated: 2025-06-23T16:05:55.893Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L) Vendors: Veeam Products: Backup for Microsoft Windows Description: A vulnerability allowing local system users to modify directory contents, allowing for arbitrary code execution on the local system with elevated permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.veeam.com/kb4743
CVE ID: CVE-2025-24288 State: PUBLISHED Published: 2025-06-18T23:30:55.344Z Last Updated: 2025-06-23T16:04:43.712Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Versa Products: Director Description: The Versa Director software exposes a number of services by default and allow attackers an easy foothold due to default credentials and multiple accounts (most with sudo access) that utilize the same default credentials. By default, Versa director exposes ssh and postgres to the internet, alongside a host of other services. Versa Networks is not aware of any reported instance where this vulnerability was exploited. Proof of concept for this vulnerability has
not aware of any reported instance where this vulnerability was exploited. Proof of concept for this vulnerability has been disclosed by third party security researchers. Workarounds or Mitigation: Versa recommends the following security controls: 1) Change default passwords to complex passwords 2) Passwords must be complex with at least 8 characters that comprise of upper case, and lower case alphabets, as well as at at least one digit, and one special character 3) Passwords must be changed at least every 90 days 4) Password change history is checked to ensure that the at least the last 5 passwords must be used when changing password. 5) Review and audit logs for all authentication attempt
least the last 5 passwords must be used when changing password. 5) Review and audit logs for all authentication attempts to check for unauthorized/suspicious login attempts and enforce remediation steps. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-portal.versa-networks.com/emailbulletins/68526d12dc94d6b9f2faf719 - https://support.versa-networks.com/support/solutions/articles/23000026708-release-22-1-4
CVE ID: CVE-2025-24289 State: PUBLISHED Published: 2025-06-29T19:25:06.254Z Last Updated: 2025-06-30T15:29:38.066Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Ubiquiti Inc Products: UCRM Client Signup Plugin Description: A Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability in the UCRM Client Signup Plugin (v1.3.4 and earlier) could allow privilege escalation if an Administrator is tricked into visiting a crafted malicious page. The plugin is disabled by default. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-048-048/af007d99-bb6d-4368-a12f-75e8
ichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-048-048/af007d99-bb6d-4368-a12f-75e84de19e8d
CVE ID: CVE-2025-24290 State: PUBLISHED Published: 2025-06-29T19:25:07.152Z Last Updated: 2025-06-30T14:52:45.919Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Ubiquiti Inc Products: UISP Application Description: Multiple Authenticated SQL Injection vulnerabilities found in UISP Application (Version 2.4.206 and earlier) could allow a malicious actor with low privileges to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-048-048/af007d99-bb6d-4368-a12f-75e84de19e8d
CVE ID: CVE-2025-24291 State: PUBLISHED Published: 2025-06-18T23:30:54.681Z Last Updated: 2025-06-23T16:04:49.558Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: Versa Products: Director Description: The Versa Director SD-WAN orchestration platform provides functionality to upload various types of files. However, the Java code handling file uploads contains an argument injection vulnerability. By appending additional arguments to the file name, an attacker can bypass MIME type validation, allowing the upload of arbitrary file types. This flaw can be exploited to place a malicious file on disk. Versa Networks is not aware of any reported instance where this
law can be exploited to place a malicious file on disk. Versa Networks is not aware of any reported instance where this vulnerability was exploited. Proof of concept for this vulnerability has been disclosed by third party security researchers. There are no workarounds to disable the GUI option. Versa recommends that Director be upgraded to one of the remediated software versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-portal.versa-networks.com/emailbulletins/68526fc6dc94d6b9f2faf71d - https://support.versa-networks.com/support/solutions/articles/23000026708-release-22-1-4 - https://support.versa-networks.com/support/solutions/articles/23000026033-r
utions/articles/23000026708-release-22-1-4 - https://support.versa-networks.com/support/solutions/articles/23000026033-release-22-1-3 - https://support.versa-networks.com/support/solutions/articles/23000025680-release-22-1-2 - https://support.versa-networks.com/support/solutions/articles/23000024323-release-21-2-3
CVE ID: CVE-2025-24292 State: PUBLISHED Published: 2025-06-29T19:25:08.070Z Last Updated: 2025-06-30T13:32:09.786Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Ubiquiti Inc Products: UniFi Network Application Description: A misconfigured query in UniFi Network (v9.1.120 and earlier) could allow users to authenticate to Enterprise WiFi or VPN Server (l2tp and OpenVPN) using a device’s MAC address from 802.1X or MAC Authentication, if both services are enabled and share the same RADIUS profile. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-049-049/7a019b27-6c77-4500-bec8-596cd87
ment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-049-049/7a019b27-6c77-4500-bec8-596cd87c9292
CVE ID: CVE-2025-24294 State: PUBLISHED Published: 2025-07-12T03:30:40.226Z Last Updated: 2025-07-16T13:37:43.395Z Vendors: Ruby Products: resolv Description: The attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses such a packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name. This resource consumption can cause the application thread to become unresponsive, resulting
ulting length of the name. This resource consumption can cause the application thread to become unresponsive, resulting in a Denial of Service condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/
CVE ID: CVE-2025-24296 State: PUBLISHED Published: 2025-08-12T16:58:45.757Z Last Updated: 2025-08-13T20:17:55.332Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: firmware for the Intel(R) E810 Ethernet Problem Types: Denial of Service, CWE-20 Description: Improper input validation in some firmware for the Intel(R) E810 Ethernet before version 4.6 may allow a privileged user to enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01257.html
CVE ID: CVE-2025-24297 State: PUBLISHED Published: 2025-04-15T21:39:24.102Z Last Updated: 2025-04-16T14:41:36.761Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Growatt Products: Cloud portal Problem Types: CWE-79 Description: Due to lack of server-side input validation, attackers can inject malicious JavaScript code into users personal spaces of the web portal. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04
CVE ID: CVE-2025-24298 State: PUBLISHED Published: 2025-08-11T02:55:01.139Z Last Updated: 2025-08-11T20:39:28.859Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-416 Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-07.md
CVE ID: CVE-2025-24299 State: PUBLISHED Published: 2025-11-11T16:49:40.532Z Last Updated: 2025-11-13T04:55:20.669Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) CIP software Problem Types: Escalation of Privilege, CWE-20 Description: Improper input validation for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via network access when attack requirements are not present without special int
ilege. This result may potentially occur via network access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html
CVE ID: CVE-2025-24301 State: PUBLISHED Published: 2025-03-04T03:44:52.124Z Last Updated: 2025-03-11T16:09:21.278Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-416 Description: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md
CVE ID: CVE-2025-24302 State: PUBLISHED Published: 2025-08-12T16:58:47.439Z Last Updated: 2025-08-13T20:17:48.268Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: TinyCBOR libraries maintained by Intel(R) Problem Types: Escalation of Privilege, CWE-674 Description: Uncontrolled recursion for some TinyCBOR libraries maintained by Intel(R) before version 0.6.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01326.html
CVE ID: CVE-2025-24303 State: PUBLISHED Published: 2025-08-12T16:58:49.185Z Last Updated: 2025-08-14T03:55:52.955Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) 800 Series Ethernet Problem Types: Escalation of Privilege, CWE-754 Description: Improper check for unusual or exceptional conditions in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01296.html
CVE ID: CVE-2025-24304 State: PUBLISHED Published: 2025-04-07T02:35:43.825Z Last Updated: 2025-04-07T15:29:22.640Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-787 Description: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds write. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-04.md
CVE ID: CVE-2025-24305 State: PUBLISHED Published: 2025-08-12T16:58:50.813Z Last Updated: 2025-11-03T17:32:20.023Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) Xeon(R) processors Problem Types: Escalation of Privilege, CWE-691 Description: Insufficient control flow management in the Alias Checking Trusted Module (ACTM) firmware for some Intel(R) Xeon(R) processors may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01313.html
CVE ID: CVE-2025-24306 State: PUBLISHED Published: 2025-03-18T08:25:58.924Z Last Updated: 2025-03-18T13:58:20.674Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: FUJI SOFT INCORPORATED Products: +F FS010M Problem Types: CWE-78 Description: Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in +F FS010M versions prior to V2.0.0_1101. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote authenticated attacker with an administrative privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fsi-plusf.jp/news/25031701.html - https://jvn.jp/en/jp/JVN112
lyst Notes: - CISA ADP Vulnrichment: References: - https://fsi-plusf.jp/news/25031701.html - https://jvn.jp/en/jp/JVN11230428/
CVE ID: CVE-2025-24307 State: PUBLISHED Published: 2025-11-11T16:49:42.183Z Last Updated: 2025-11-14T04:55:27.264Z Severity: LOW (CVSS 2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) CIP software Problem Types: Escalation of Privilege, CWE-269 Description: Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable data manipulation. This result may potentially occur via network access when attack requirements are present without special internal k
on. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html
CVE ID: CVE-2025-24308 State: PUBLISHED Published: 2025-05-13T21:02:49.975Z Last Updated: 2025-05-16T03:55:45.814Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Server D50DNP and M50FCP Problem Types: Escalation of Privilege, CWE-20 Description: Improper input validation in the UEFI firmware error handler for the Intel(R) Server D50DNP and M50FCP may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01269.html
CVE ID: CVE-2025-24309 State: PUBLISHED Published: 2025-03-04T03:44:53.216Z Last Updated: 2025-03-11T16:09:14.964Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-787 Description: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md
CVE ID: CVE-2025-24310 State: PUBLISHED Published: 2025-04-04T02:09:41.821Z Last Updated: 2025-04-04T14:21:59.425Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: JTEKT ELECTRONICS CORPORATION Products: HMI ViewJet C-more series Problem Types: CWE-1021 Description: Improper restriction of rendered UI layers or frames issue exists in HMI ViewJet C-more series, which may allow a remote unauthenticated attacker to trick the product user to perform operations on the product's web pages. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/topics/202503207271/ - https://jvn.jp/en/jp/JVN17260367/
CVE ID: CVE-2025-24311 State: PUBLISHED Published: 2025-06-13T20:42:18.769Z Last Updated: 2025-11-03T19:44:45.759Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H) Vendors: Broadcom, Dell Products: BCM5820X, ControlVault3, ControlVault3 Plus Problem Types: CWE-125 Description: An out-of-bounds read vulnerability exists in the cv_send_blockdata functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call can lead to an information leak. An attacker can issue an API call to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References:
to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000276106/dsa-2025-053
CVE ID: CVE-2025-24312 State: PUBLISHED Published: 2025-02-05T17:31:04.659Z Last Updated: 2025-02-12T20:51:33.854Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP, BIG-IP Next CNF Problem Types: CWE-770 Description: When BIG-IP AFM is provisioned with IPS module enabled and protocol inspection profile is configured on a virtual server or firewall rule or policy, undisclosed traffic can cause an increase in CPU resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000141380
CVE ID: CVE-2025-24313 State: PUBLISHED Published: 2025-08-12T16:58:52.388Z Last Updated: 2025-08-13T20:17:28.821Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Device Plugins for Kubernetes software maintained by Intel Problem Types: Denial of Service, CWE-284 Description: Improper access control for some Device Plugins for Kubernetes software maintained by Intel before version 0.32.0 may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01329.html
CVE ID: CVE-2025-24314 State: PUBLISHED Published: 2025-11-11T16:49:43.935Z Last Updated: 2025-11-12T20:01:43.176Z Severity: LOW (CVSS 2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) CIP software Problem Types: Information Disclosure, CWE-284 Description: Improper access control for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are present without special internal knowledge and req
may potentially occur via network access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html
CVE ID: CVE-2025-24315 State: PUBLISHED Published: 2025-04-15T21:57:28.059Z Last Updated: 2025-04-16T14:39:26.986Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Growatt Products: Cloud portal Problem Types: CWE-639 Description: Unauthenticated attackers can add devices of other users to their scenes (or arbitrary scenes of other arbitrary users). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04
CVE ID: CVE-2025-24316 State: PUBLISHED Published: 2025-02-28T17:11:56.571Z Last Updated: 2025-02-28T18:17:46.143Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Dario Health Products: Dario Application Database and Internet-based Server Infrastructure Problem Types: CWE-213 Description: The Dario Health Internet-based server infrastructure is vulnerable due to exposure of development environment details, which could lead to unsafe functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-058-01 - https://www.dariohealth.com/contact/
CVE ID: CVE-2025-24317 State: PUBLISHED Published: 2025-04-04T02:09:58.316Z Last Updated: 2025-04-04T14:21:28.397Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: JTEKT ELECTRONICS CORPORATION Products: HMI ViewJet C-more series, HMI GC-A2 series Problem Types: CWE-770 Description: Allocation of resources without limits or throttling issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to cause a denial-of-service (DoS) condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/topics/202503207271/ - https://www.electronics.jtekt.co.jp/en/topi
References: - https://www.electronics.jtekt.co.jp/en/topics/202503207271/ - https://www.electronics.jtekt.co.jp/en/topics/202503207269/ - https://jvn.jp/en/jp/JVN17260367/