Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-64515 State: PUBLISHED Published: 2025-11-18T22:39:48.150Z Last Updated: 2025-11-19T17:01:01.839Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: open-formulieren Products: open-forms Problem Types: CWE-20 Description: Open Forms allows users create and publish smart forms. Prior to versions 3.2.7 and 3.3.3, forms where the prefill data fields are dynamically set to readonly/disabled can be modified by malicious users deliberately trying to modify data they're not supposed to. For regular users, the form fields are marked as readonly and cannot be modified through the user interface. This issue has been patched in versions 3.2.7 and 3.3.3. A
s readonly and cannot be modified through the user interface. This issue has been patched in versions 3.2.7 and 3.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/open-formulieren/open-forms/security/advisories/GHSA-cp63-63mq-5wvf - https://github.com/open-formulieren/open-forms/blob/bcf2dc54c695fb7c8c58712627d82c4b766248b6/CHANGELOG.rst#327-2025-11-18 - https://github.com/open-formulieren/open-forms/blob/bcf2dc54c695fb7c8c58712627d82c4b766248b6/CHANGELOG.rst#333-2025-11-18
CVE ID: CVE-2025-64517 State: PUBLISHED Published: 2025-11-12T22:08:29.422Z Last Updated: 2025-11-13T15:40:14.813Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: trifectatechfoundation Products: sudo-rs Problem Types: CWE-287 Description: sudo-rs is a memory safe implementation of sudo and su written in Rust. With `Defaults targetpw` (or `Defaults rootpw`) enabled, the password of the target account (or root account) instead of the invoking user is used for authentication. sudo-rs starting in version 0.2.5 and prior to version 0.2.10 incorrectly recorded the invoking user’s UID instead of the authenticated-as user's UID in the authentication timestamp. Any
rectly recorded the invoking user’s UID instead of the authenticated-as user's UID in the authentication timestamp. Any later `sudo` invocation on the same terminal while the timestamp was still valid would use that timestamp, potentially bypassing new authentication even if the policy would have required it. A highly-privileged user (able to run commands as other users, or as root, through sudo) who knows one password of an account they are allowed to run commands as, would be able to run commands as any other account the policy permits them to run commands for, even if they don't know the password for those accounts. A common instance of this would be that a user can still use their own pa
ey don't know the password for those accounts. A common instance of this would be that a user can still use their own password to run commands as root (the default behaviour of `sudo`), effectively negating the intended behaviour of the `targetpw` or `rootpw` options. Version 0.2.10 contains a patch for the issue. Versions prior to 0.2.5 are not affected, since they do not offer `Defaults targetpw` or `Defaults rootpw`. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/trifectatechfoundation/sudo-rs/security/advisories/GHSA-q428-6v73-fc4q - https://github.com/trifectatechfoundation/sudo-rs/releases/tag/v0.2.10
CVE ID: CVE-2025-64518 State: PUBLISHED Published: 2025-11-10T22:08:06.229Z Last Updated: 2025-11-12T20:13:21.105Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: CycloneDX Products: cyclonedx-core-java Problem Types: CWE-611 Description: The CycloneDX core module provides a model representation of the SBOM along with utilities to assist in creating, validating, and parsing SBOMs. Starting in version 2.1.0 and prior to version 11.0.1, the XML `Validator` used by cyclonedx-core-java was not configured securely, making the library vulnerable to XML External Entity (XXE) injection. The fix for GHSA-683x-4444-jxh8 / CVE-2024-38374 was incomplete in that it only fi
XML External Entity (XXE) injection. The fix for GHSA-683x-4444-jxh8 / CVE-2024-38374 was incomplete in that it only fixed parsing of XML BOMs, but not validation. The vulnerability has been fixed in cyclonedx-core-java version 11.0.1. As a workaround, applications can reject XML documents before handing them to cyclonedx-core-java for validation. This may be an option if incoming CycloneDX BOMs are known to be in JSON format. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/CycloneDX/cyclonedx-core-java/security/advisories/GHSA-6fhj-vr9j-g45r - https://github.com/CycloneDX/cyclonedx-core-java/pull/737 - https://github.com/CycloneDX/cyclonedx-core-java/com
-g45r - https://github.com/CycloneDX/cyclonedx-core-java/pull/737 - https://github.com/CycloneDX/cyclonedx-core-java/commit/162aa594f347b3f612fe0a45071693c3cd398ce9 - https://github.com/CycloneDX/cyclonedx-core-java/commit/af0ec75c93c03f93733a070c5132554490af5314 - https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html#schemafactory
CVE ID: CVE-2025-64519 State: PUBLISHED Published: 2025-11-10T22:17:31.083Z Last Updated: 2025-11-12T20:13:03.908Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: torrentpier Products: torrentpier Problem Types: CWE-89 Description: TorrentPier is an open source BitTorrent Public/Private tracker engine, written in php. In versions up to and including 2.8.8, an authenticated SQL injection vulnerability exists in the moderator control panel (`modcp.php`). Users with moderator permissions can exploit this vulnerability by supplying a malicious `topic_id` (`t`) parameter. This allows an authenticated moderator to execute arbitrary SQL queries, leading to the potent
opic_id` (`t`) parameter. This allows an authenticated moderator to execute arbitrary SQL queries, leading to the potential disclosure, modification, or deletion of any data in the database. Although it requires moderator privileges, it is still severe. A malicious or compromised moderator account can leverage this vulnerability to read, modify, or delete data. A patch is available at commit 6a0f6499d89fa5d6e2afa8ee53802a1ad11ece80. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/torrentpier/torrentpier/security/advisories/GHSA-4rwr-8c3m-55f6 - https://github.com/torrentpier/torrentpier/commit/6a0f6499d89fa5d6e2afa8ee53802a1ad11ece80
CVE ID: CVE-2025-64521 State: PUBLISHED Published: 2025-11-19T17:03:19.703Z Last Updated: 2025-11-19T21:09:40.560Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: goauthentik Products: authentik Problem Types: CWE-289 Description: authentik is an open-source Identity Provider. Prior to versions 2025.8.5 and 2025.10.2, when authenticating with client_id and client_secret to an OAuth provider, authentik creates a service account for the provider. In previous authentik versions, authentication for this account was possible even when the account was deactivated. Other permissions are correctly applied and federation with other providers still take assigned polic
t was deactivated. Other permissions are correctly applied and federation with other providers still take assigned policies correctly into account. authentik versions 2025.8.5 and 2025.10.2 fix this issue. A workaround involves adding a policy to the application that explicitly checks if the service account is still valid, and deny access if not. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/goauthentik/authentik/security/advisories/GHSA-xr73-jq5p-ch8r - https://github.com/goauthentik/authentik/commit/9dbdfc3f1be0f1be36f8efce2442897b2a54a71c
CVE ID: CVE-2025-64522 State: PUBLISHED Published: 2025-11-10T22:11:18.863Z Last Updated: 2025-11-12T20:13:12.894Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: charmbracelet Products: soft-serve Problem Types: CWE-918 Description: Soft Serve is a self-hostable Git server for the command line. Versions prior to 0.11.1 have a SSRF vulnerability where webhook URLs are not validated, allowing repository administrators to create webhooks targeting internal services, private networks, and cloud metadata endpoints. Version 0.11.1 fixes the vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/charmbracelet/soft-serv
lnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/charmbracelet/soft-serve/security/advisories/GHSA-vwq2-jx9q-9h9f - https://github.com/charmbracelet/soft-serve/commit/bb73b9a0eea0d902da4811420535842a4f9aae3b - https://github.com/charmbracelet/soft-serve/releases/tag/v0.11.1
CVE ID: CVE-2025-64523 State: PUBLISHED Published: 2025-11-12T22:11:36.433Z Last Updated: 2025-11-13T14:35:31.239Z Vendors: filebrowser Products: filebrowser Problem Types: CWE-285, CWE-639 Description: File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Versions prior to 2.45.1 have an Insecure Direct Object Reference (IDOR) vulnerability in the FileBrowser application's share deletion functionality. This vulnerability allows any authenticated user with share permissions to delete other users' shared links without authorization checks. The impact is significant as malicious actors can disrupt busi
e other users' shared links without authorization checks. The impact is significant as malicious actors can disrupt business operations by systematically removing shared files and links. This leads to denial of service for legitimate users, potential data loss in collaborative environments, and breach of data confidentiality agreements. In organizational settings, this could affect critical file sharing for projects, presentations, or document collaboration. Version 2.45.1 contains a fix for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/filebrowser/filebrowser/security/advisories/GHSA-6cqf-cfhv-659g - https://github.com/filebrowser/filebrowser
/github.com/filebrowser/filebrowser/security/advisories/GHSA-6cqf-cfhv-659g - https://github.com/filebrowser/filebrowser/commit/291223b3cefe1e50fae8f73d70464b1dc25351a4
CVE ID: CVE-2025-64524 State: PUBLISHED Published: 2025-11-20T18:05:06.236Z Last Updated: 2025-11-21T16:06:49.862Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenPrinting Products: cups-filters Problem Types: CWE-122 Description: cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary
liciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-rq44-2q5p-x3hv - https://github.com/OpenPrinting/cups-filters/commit/956283c74a34ae924266a2a63f8e5f529a1abd06
CVE ID: CVE-2025-64525 State: PUBLISHED Published: 2025-11-13T15:58:16.797Z Last Updated: 2025-11-13T16:15:18.417Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: withastro Products: astro Problem Types: CWE-918 Description: Astro is a web framework. In Astro versions 2.16.0 up to but excluding 5.15.5 which utilizeon-demand rendering, request headers `x-forwarded-proto` and `x-forwarded-port` are insecurely used, without sanitization, to build the URL. This has several consequences, the most important of which are: middleware-based protected route bypass (only via `x-forwarded-proto`), DoS via cache poisoning (if a CDN is present), SSRF (only via `x-forwarde
d route bypass (only via `x-forwarded-proto`), DoS via cache poisoning (if a CDN is present), SSRF (only via `x-forwarded-proto`), URL pollution (potential SXSS, if a CDN is present), and WAF bypass. Version 5.15.5 contains a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/withastro/astro/security/advisories/GHSA-hr2q-hp5q-x767 - https://github.com/withastro/astro/commit/dafbb1ba29912099c4faff1440033edc768af8b4 - https://github.com/withastro/astro/blob/970ac0f51172e1e6bff4440516a851e725ac3097/packages/astro/src/core/app/node.ts#L121 - https://github.com/withastro/astro/blob/970ac0f51172e1e6bff4440516a851e725ac3097/packages/astro/src/core/app/node.ts
1 - https://github.com/withastro/astro/blob/970ac0f51172e1e6bff4440516a851e725ac3097/packages/astro/src/core/app/node.ts#L97
CVE ID: CVE-2025-64529 State: PUBLISHED Published: 2025-11-10T22:28:51.589Z Last Updated: 2025-11-12T20:12:52.552Z Vendors: authzed Products: spicedb Problem Types: CWE-770 Description: SpiceDB is an open source database system for creating and managing security-critical application permissions. In versions prior to 1.45.2, users who use the exclusion operator somewhere in their authorization schema; have configured their SpiceDB server such that `--write-relationships-max-updates-per-call` is bigger than 6500; and issue calls to WriteRelationships with a large enough number of updates that cause the payload to be bigger than what their datastore allows; will receive a successful response fr
r of updates that cause the payload to be bigger than what their datastore allows; will receive a successful response from their `WriteRelationships` call, when in reality that call failed, and receive incorrect permission check results, if those relationships had to be read to resolve the relation involving the exclusion. Version 1.45.2 contains a patch for the issue. As a workaround, set `--write-relationships-max-updates-per-call` to `1000`. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/authzed/spicedb/security/advisories/GHSA-pm3x-jrhh-qcr7
CVE ID: CVE-2025-64530 State: PUBLISHED Published: 2025-11-13T23:02:45.740Z Last Updated: 2025-11-14T15:57:42.013Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: apollographql Products: federation Problem Types: CWE-288 Description: Apollo Federation is an architecture for declaratively composing APIs into a unified graph. A vulnerability in versions of Apollo Federation's composition logic prior to 2.9.5, 2.10.4, 2.11.5, and 2.12.1 allowed some queries to Apollo Router to improperly bypass access controls on types/fields. Apollo Federation incorrectly allowed user-defined access control directives on interface types/fields, which could be bypassed by instead
incorrectly allowed user-defined access control directives on interface types/fields, which could be bypassed by instead querying the implementing object types/fields in Apollo Router via inline fragments, for example. A fix to versions 2.9.5, 2.10.4, 2.11.5, and 2.12.1 of composition logic in Federation now disallows interfaces types and fields to contain user-defined access control directives. Some workarounds are available. Users of Apollo Rover with an unpatched composition version or are using the Apollo Studio build pipeline with Federation version 2.8 or below should manually copy the access control requirements on interface types/fields to each implementing object type/field where ap
manually copy the access control requirements on interface types/fields to each implementing object type/field where appropriate. Do not remove those access control requirements from the interface types/fields, as unpatched Apollo Composition will not automatically generate them in the supergraph schema. Customers not using Apollo Router access control features (`@authenticated`, `@requiresScopes`, or `@policy` directives) or not specifying access control requirements on interface types/fields are not affected and do not need to take action. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/apollographql/federation/security/advisories/GHSA-mx7m-j9xf-62hw
CVE ID: CVE-2025-64531 State: PUBLISHED Published: 2025-11-11T20:43:29.956Z Last Updated: 2025-11-12T04:57:51.549Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Substance3D - Stager Problem Types: CWE-416 Description: Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_stager/apsb25-113.html
CVE ID: CVE-2025-64655 State: PUBLISHED Published: 2025-11-20T22:18:36.195Z Last Updated: 2025-11-25T04:55:32.061Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Dynamics OmniChannel SDK Storage Containers Problem Types: CWE-285 Description: Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64655
CVE ID: CVE-2025-64660 State: PUBLISHED Published: 2025-11-20T22:18:57.308Z Last Updated: 2025-11-22T04:55:17.367Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Visual Studio Code Problem Types: CWE-284 Description: Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64660
CVE ID: CVE-2025-64681 State: PUBLISHED Published: 2025-11-10T13:27:54.552Z Last Updated: 2025-11-10T14:39:10.302Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: JetBrains Products: Hub Problem Types: CWE-862 Description: In JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via invitations Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2025-64682 State: PUBLISHED Published: 2025-11-10T13:27:55.389Z Last Updated: 2025-11-10T14:36:21.010Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: JetBrains Products: Hub Problem Types: CWE-362 Description: In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2025-64683 State: PUBLISHED Published: 2025-11-10T13:27:56.565Z Last Updated: 2025-11-10T14:58:21.648Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: JetBrains Products: Hub Problem Types: CWE-362 Description: In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users API Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2025-64684 State: PUBLISHED Published: 2025-11-10T13:27:57.428Z Last Updated: 2025-11-10T14:50:23.510Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: JetBrains Products: YouTrack Problem Types: CWE-862 Description: In JetBrains YouTrack before 2025.3.104432 information disclosure was possible via the feedback form Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2025-64685 State: PUBLISHED Published: 2025-11-10T13:27:58.093Z Last Updated: 2025-11-11T04:55:36.447Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: JetBrains Products: YouTrack Problem Types: CWE-295 Description: In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2025-64686 State: PUBLISHED Published: 2025-11-10T13:27:58.836Z Last Updated: 2025-11-10T14:48:52.124Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: JetBrains Products: YouTrack Problem Types: CWE-672 Description: In JetBrains YouTrack before 2025.3.104432 missing user principal cleanup led to reuse of incorrect authorization context Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2025-64687 State: PUBLISHED Published: 2025-11-10T13:27:59.372Z Last Updated: 2025-11-10T14:48:22.916Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: YouTrack Problem Types: CWE-862 Description: In JetBrains YouTrack before 2025.3.104432 improper access control allowed modify MCP tool logic Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2025-64688 State: PUBLISHED Published: 2025-11-10T13:27:59.902Z Last Updated: 2025-11-10T14:47:36.307Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: JetBrains Products: YouTrack Problem Types: CWE-639 Description: In JetBrains YouTrack before 2025.3.104432 missing VCS URL validation allowed delegation to unauthorized repositories from the Junie widget Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2025-64689 State: PUBLISHED Published: 2025-11-10T13:28:01.039Z Last Updated: 2025-11-11T04:55:37.165Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: JetBrains Products: YouTrack Problem Types: CWE-522 Description: In JetBrains YouTrack before 2025.3.104432 misconfiguration in the Junie could lead to exposure of the global Junie token Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2025-64690 State: PUBLISHED Published: 2025-11-10T13:28:02.290Z Last Updated: 2025-11-10T14:26:07.263Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: YouTrack Problem Types: CWE-862 Description: In JetBrains YouTrack before 2025.3.104432 insecure Junie configuration could lead to data exposure and unauthorized changes Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2025-64693 State: PUBLISHED Published: 2025-11-25T07:21:10.593Z Last Updated: 2025-11-25T07:21:10.593Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Intercom, Inc. Products: Security Point (Windows) of MaLion, Security Point (Windows) of MaLionCloud Problem Types: CWE-122 Description: Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length. Receiving a specially crafted request from a remote unauthenticated attacker could lead to arbitrary code execution with SYSTEM privilege. References: - https://www.intercom.co.jp/information/2025/1125.html - https://jvn.jp/en/jp/J
tion with SYSTEM privilege. References: - https://www.intercom.co.jp/information/2025/1125.html - https://jvn.jp/en/jp/JVN76298784/