Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-13014 State: PUBLISHED Published: 2025-11-11T15:47:12.313Z Last Updated: 2025-11-19T19:08:05.049Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Use-after-free in the Audio/Video component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Firefox ESR < 115.30, Thunderbird < 145, and Thunderbird < 140.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1994241 - https://www.mozilla.org/security/advisories/mfsa2025-87/ - https://www.mozilla.org/security/advisories/mfsa2025-88/ - https://www.mozilla.org/security/advisories/mfsa2025-89/ - https://www.mozilla.org/security/advisor
ories/mfsa2025-88/ - https://www.mozilla.org/security/advisories/mfsa2025-89/ - https://www.mozilla.org/security/advisories/mfsa2025-90/ - https://www.mozilla.org/security/advisories/mfsa2025-91/
CVE ID: CVE-2025-13015 State: PUBLISHED Published: 2025-11-11T15:47:12.707Z Last Updated: 2025-11-19T19:08:06.432Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Spoofing issue in Firefox. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Firefox ESR < 115.30, Thunderbird < 145, and Thunderbird < 140.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1994164 - https://www.mozilla.org/security/advisories/mfsa2025-87/ - https://www.mozilla.org/security/advisories/mfsa2025-88/ - https://www.mozilla.org/security/advisories/mfsa2025-89/ - https://www.mozilla.org/security/advisories/mfsa2025-90/ -
- https://www.mozilla.org/security/advisories/mfsa2025-89/ - https://www.mozilla.org/security/advisories/mfsa2025-90/ - https://www.mozilla.org/security/advisories/mfsa2025-91/
CVE ID: CVE-2025-13016 State: PUBLISHED Published: 2025-11-11T15:47:14.370Z Last Updated: 2025-11-19T19:07:52.086Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Thunderbird < 145, and Thunderbird < 140.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1992130 - https://www.mozilla.org/security/advisories/mfsa2025-87/ - https://www.mozilla.org/security/advisories/mfsa2025-88/ - https://www.mozilla.org/security/advisories/mfsa2025-90/ - https://www.mozilla.org/security/ad
advisories/mfsa2025-88/ - https://www.mozilla.org/security/advisories/mfsa2025-90/ - https://www.mozilla.org/security/advisories/mfsa2025-91/
CVE ID: CVE-2025-13017 State: PUBLISHED Published: 2025-11-11T15:47:16.109Z Last Updated: 2025-11-19T19:07:57.732Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Same-origin policy bypass in the DOM: Notifications component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Thunderbird < 145, and Thunderbird < 140.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1980904 - https://www.mozilla.org/security/advisories/mfsa2025-87/ - https://www.mozilla.org/security/advisories/mfsa2025-88/ - https://www.mozilla.org/security/advisories/mfsa2025-90/ - https://www.mozilla.org/security/advisories/
s/mfsa2025-88/ - https://www.mozilla.org/security/advisories/mfsa2025-90/ - https://www.mozilla.org/security/advisories/mfsa2025-91/
CVE ID: CVE-2025-13018 State: PUBLISHED Published: 2025-11-11T15:47:16.458Z Last Updated: 2025-11-19T19:07:59.216Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Mitigation bypass in the DOM: Security component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Thunderbird < 145, and Thunderbird < 140.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1984940 - https://www.mozilla.org/security/advisories/mfsa2025-87/ - https://www.mozilla.org/security/advisories/mfsa2025-88/ - https://www.mozilla.org/security/advisories/mfsa2025-90/ - https://www.mozilla.org/security/advisories/mfsa2025-91/
CVE ID: CVE-2025-13019 State: PUBLISHED Published: 2025-11-11T15:47:16.759Z Last Updated: 2025-11-19T19:08:00.672Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Same-origin policy bypass in the DOM: Workers component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Thunderbird < 145, and Thunderbird < 140.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1988412 - https://www.mozilla.org/security/advisories/mfsa2025-87/ - https://www.mozilla.org/security/advisories/mfsa2025-88/ - https://www.mozilla.org/security/advisories/mfsa2025-90/ - https://www.mozilla.org/security/advisories/mfsa20
2025-88/ - https://www.mozilla.org/security/advisories/mfsa2025-90/ - https://www.mozilla.org/security/advisories/mfsa2025-91/
CVE ID: CVE-2025-13020 State: PUBLISHED Published: 2025-11-11T15:47:17.203Z Last Updated: 2025-11-19T19:08:03.644Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Use-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Thunderbird < 145, and Thunderbird < 140.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1995686 - https://www.mozilla.org/security/advisories/mfsa2025-87/ - https://www.mozilla.org/security/advisories/mfsa2025-88/ - https://www.mozilla.org/security/advisories/mfsa2025-90/ - https://www.mozilla.org/security/advisories/mfsa2025-9
-88/ - https://www.mozilla.org/security/advisories/mfsa2025-90/ - https://www.mozilla.org/security/advisories/mfsa2025-91/
CVE ID: CVE-2025-13021 State: PUBLISHED Published: 2025-11-11T15:47:13.214Z Last Updated: 2025-11-19T19:07:46.317Z Vendors: Mozilla Products: Firefox, Thunderbird Description: Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox < 145 and Thunderbird < 145. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1986431 - https://www.mozilla.org/security/advisories/mfsa2025-87/ - https://www.mozilla.org/security/advisories/mfsa2025-90/
CVE ID: CVE-2025-13022 State: PUBLISHED Published: 2025-11-11T15:47:13.605Z Last Updated: 2025-11-19T19:07:47.769Z Vendors: Mozilla Products: Firefox, Thunderbird Description: Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox < 145 and Thunderbird < 145. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1988488 - https://www.mozilla.org/security/advisories/mfsa2025-87/ - https://www.mozilla.org/security/advisories/mfsa2025-90/
CVE ID: CVE-2025-13023 State: PUBLISHED Published: 2025-11-11T15:47:13.943Z Last Updated: 2025-11-19T19:07:50.674Z Vendors: Mozilla Products: Firefox, Thunderbird Description: Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox < 145 and Thunderbird < 145. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1992032 - https://www.mozilla.org/security/advisories/mfsa2025-87/ - https://www.mozilla.org/security/advisories/mfsa2025-90/
CVE ID: CVE-2025-13024 State: PUBLISHED Published: 2025-11-11T15:47:14.756Z Last Updated: 2025-11-19T19:07:53.505Z Vendors: Mozilla Products: Firefox, Thunderbird Description: JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox < 145 and Thunderbird < 145. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1992902 - https://www.mozilla.org/security/advisories/mfsa2025-87/ - https://www.mozilla.org/security/advisories/mfsa2025-90/
CVE ID: CVE-2025-13025 State: PUBLISHED Published: 2025-11-11T15:47:15.246Z Last Updated: 2025-11-19T19:07:54.936Z Vendors: Mozilla Products: Firefox, Thunderbird Description: Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox < 145 and Thunderbird < 145. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1994022 - https://www.mozilla.org/security/advisories/mfsa2025-87/ - https://www.mozilla.org/security/advisories/mfsa2025-90/
CVE ID: CVE-2025-13026 State: PUBLISHED Published: 2025-11-11T15:47:15.695Z Last Updated: 2025-11-19T19:07:56.331Z Vendors: Mozilla Products: Firefox, Thunderbird Description: Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox < 145 and Thunderbird < 145. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1994441 - https://www.mozilla.org/security/advisories/mfsa2025-87/ - https://www.mozilla.org/security/advisories/mfsa2025-90/
CVE ID: CVE-2025-13027 State: PUBLISHED Published: 2025-11-11T15:47:17.570Z Last Updated: 2025-11-19T19:08:07.854Z Vendors: Mozilla Products: Firefox, Thunderbird Description: Memory safety bugs present in Firefox 144 and Thunderbird 144. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 145 and Thunderbird < 145. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1987237%2C1990079%2C1991715%2C1994994 - https://www.mozilla.org/security/advisories/mfsa2025-87/ - https://www.mozilla.org/sec
7%2C1990079%2C1991715%2C1994994 - https://www.mozilla.org/security/advisories/mfsa2025-87/ - https://www.mozilla.org/security/advisories/mfsa2025-90/
CVE ID: CVE-2025-13032 State: PUBLISHED Published: 2025-11-11T16:16:33.666Z Last Updated: 2025-11-14T19:27:08.451Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Avast, Avsat, AVG Products: (Free/Premiium/Ultimeat) Antivirus, One, (Free/Inernet Security/Ultimate) Antivirus Problem Types: CWE-367 Description: Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows local attacker to escalate privelages via pool overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gendigital.com/us/en/contact-us/security-advisories/
CVE ID: CVE-2025-13033 State: PUBLISHED Published: 2025-11-14T19:37:08.224Z Last Updated: 2025-11-14T20:00:51.936Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat Ceph Storage 8, Red Hat Developer Hub Problem Types: CWE-436 Description: A vulnerability was identified in the email parsing library due to improper handling of specially formatted recipient email addresses. An attacker can exploit this flaw by crafting a recipient address that embeds an external address within quotes. This causes the application to misdirect the email to the attacker's external address instead of the in
s within quotes. This causes the application to misdirect the email to the attacker's external address instead of the intended internal recipient. This could lead to a significant data leak of sensitive information and allow an attacker to bypass security filters and access controls. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-13033 - https://bugzilla.redhat.com/show_bug.cgi?id=2402179 - https://github.com/nodemailer/nodemailer - https://github.com/nodemailer/nodemailer/commit/1150d99fba77280df2cfb1885c43df23109a8626 - https://github.com/nodemailer/nodemailer/security/advisories/GHSA-mm7p-fcc7-pg87
CVE ID: CVE-2025-13035 State: PUBLISHED Published: 2025-11-19T07:46:08.602Z Last Updated: 2025-11-19T17:21:07.364Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: codesnippetspro Products: Code Snippets Problem Types: CWE-94 Description: The Code Snippets plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 3.9.1. This is due to the plugin's use of extract() on attacker-controlled shortcode attributes within the `evaluate_shortcode_from_flat_file` method, which can be used to overwrite the `$filepath` variable and subsequently passed to require_once. This makes it possible for authenticated attackers, with Contributor-le
ariable and subsequently passed to require_once. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute arbitrary PHP code on the server via the `[code_snippet]` shortcode using PHP filter chains granted they can trick an administrator into enabling the "Enable file-based execution" setting and creating at least one active Content snippet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c7c7247c-2fc3-46ff-858e-2242b7211476?source=cve - https://plugins.trac.wordpress.org/browser/code-snippets/tags/3.8.1/php/front-end/class-front-end.php#L295 - https://plugins.trac.wordpr
trac.wordpress.org/browser/code-snippets/tags/3.8.1/php/front-end/class-front-end.php#L295 - https://plugins.trac.wordpress.org/browser/code-snippets/tags/3.8.1/php/front-end/class-front-end.php#L296 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3397635%40code-snippets%2Ftrunk&old=3395415%40code-snippets%2Ftrunk&sfp_email=&sfph_mail=#file23
CVE ID: CVE-2025-13042 State: PUBLISHED Published: 2025-11-12T16:48:43.925Z Last Updated: 2025-11-13T04:55:29.184Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_11.html - https://issues.chromium.org/issues/457351015
CVE ID: CVE-2025-13046 State: PUBLISHED Published: 2025-11-12T07:57:30.785Z Last Updated: 2025-11-12T14:43:51.742Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ViewLead Technology Products: Bacteriology Laboratory Reporting System Problem Types: CWE-89 Description: Bacteriology Laboratory Reporting System developed by ViewLead Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10498-61fa4-1.html - https://www.twcert.org.tw/en/cp-139-10499-15678-2.html
CVE ID: CVE-2025-13047 State: PUBLISHED Published: 2025-11-12T07:59:21.895Z Last Updated: 2025-11-12T14:42:39.882Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ViewLead Technology Products: Bacteriology Laboratory Reporting System Problem Types: CWE-89 Description: Bacteriology Laboratory Reporting System developed by ViewLead Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10498-61fa4-1.html - https://www.twcert.org.tw/en/cp-139-10499-15678-2.html
CVE ID: CVE-2025-13051 State: PUBLISHED Published: 2025-11-19T02:50:57.285Z Last Updated: 2025-11-19T20:04:20.177Z Vendors: ASUSTOR Products: ABP and AES Problem Types: CWE-427 Description: When the service of ABP and AES is installed in a directory writable by non-administrative users, an attacker can replace or plant a DLL with the same name as one loaded by the service. Upon service restart, the malicious DLL is loaded and executed under the LocalSystem account, resulting in unauthorized code execution with elevated privileges. This issue affects ABP and AES: from ABP 2.0 through 2.0.7.9050, from AES 1.0 through 1.0.6.8290. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
0 through 2.0.7.9050, from AES 1.0 through 1.0.6.8290. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.asustor.com/security/security_advisory_detail?id=48
CVE ID: CVE-2025-13054 State: PUBLISHED Published: 2025-11-19T05:45:12.261Z Last Updated: 2025-11-19T20:21:51.179Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: cozmoslabs Products: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor Problem Types: CWE-79 Description: The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wppb-embed shortcode in all versions up to, and including, 3.14.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f
3.14.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3830ae19-cafc-40db-afde-2424cae23031?source=cve - https://plugins.trac.wordpress.org/changeset/3397155/profile-builder
CVE ID: CVE-2025-13057 State: PUBLISHED Published: 2025-11-12T18:32:06.466Z Last Updated: 2025-11-12T21:04:23.201Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: School Fees Payment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=save_student. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.33218
vailable and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332184 - https://vuldb.com/?ctiid.332184 - https://vuldb.com/?submit.682367 - https://github.com/QingqingOK/CVE/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-13058 State: PUBLISHED Published: 2025-11-12T19:32:06.630Z Last Updated: 2025-11-12T21:03:16.987Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:ND/RL:OF/RC:C) Vendors: soerennb Products: eXtplorer Problem Types: CWE-79, CWE-94 Description: A security flaw has been discovered in soerennb eXtplorer up to 2.1.15. The affected element is an unknown function of the component Filename Handler. The manipulation results in cross site scripting. The attack may be launched remotely. The patch is identified as 002def70b985f7012586df2c44368845bf405ab3. Applying a patch is advised to resolve this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
patch is advised to resolve this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332185 - https://vuldb.com/?ctiid.332185 - https://vuldb.com/?submit.682370 - https://github.com/soerennb/extplorer/issues/33 - https://github.com/soerennb/extplorer/commit/002def70b985f7012586df2c44368845bf405ab3
CVE ID: CVE-2025-13059 State: PUBLISHED Published: 2025-11-12T20:02:06.864Z Last Updated: 2025-11-14T17:33:12.976Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Alumni Management System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in SourceCodester Alumni Management System 1.0. The impacted element is an unknown function of the file /manage_career.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
ble to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332186 - https://vuldb.com/?ctiid.332186 - https://vuldb.com/?submit.682548 - https://github.com/CaseyW33/CVE/issues/1 - https://www.sourcecodester.com/
CVE ID: CVE-2025-13060 State: PUBLISHED Published: 2025-11-12T20:02:09.533Z Last Updated: 2025-11-14T17:31:19.516Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Survey Application System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /view_survey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332187 - https:
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332187 - https://vuldb.com/?ctiid.332187 - https://vuldb.com/?submit.682565 - https://github.com/lakshayyverma/CVE-Discovery/blob/main/Survey%20Application%20System%202%20.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-13061 State: PUBLISHED Published: 2025-11-12T20:32:07.008Z Last Updated: 2025-11-14T16:54:35.124Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online Voting System Problem Types: CWE-434, CWE-284 Description: A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=manage_voting. Performing manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332188 - https://vuldb.com/?ctiid
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332188 - https://vuldb.com/?ctiid.332188 - https://vuldb.com/?submit.682587 - https://github.com/yihaofuweng/cve/issues/55 - https://itsourcecode.com/
CVE ID: CVE-2025-13063 State: PUBLISHED Published: 2025-11-12T21:02:07.581Z Last Updated: 2025-11-13T14:18:20.215Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: DinukaNavaratna Products: Dee Store Problem Types: CWE-862, CWE-863 Description: A flaw has been found in DinukaNavaratna Dee Store 1.0. Affected is an unknown function. Executing manipulation can lead to missing authorization. The attack may be performed from remote. The exploit has been published and may be used. Multiple endpoints are affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332189 - https://vuldb.com/?ctiid.332189 - https://vuldb.com/?submit.
Vulnrichment: References: - https://vuldb.com/?id.332189 - https://vuldb.com/?ctiid.332189 - https://vuldb.com/?submit.682708 - https://github.com/DinukaNavaratna/Dee_Store-Simple_Online_Shopping_Website/issues/1
CVE ID: CVE-2025-13068 State: PUBLISHED Published: 2025-11-25T04:38:01.612Z Last Updated: 2025-11-25T04:38:01.612Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: milmor Products: Telegram Bot & Channel Problem Types: CWE-79 Description: The Telegram Bot & Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Telegram username in all versions up to, and including, 4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. References: - https://www.wordfence.com/threat-intel/v