Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-5630 State: PUBLISHED Published: 2025-06-05T02:00:23.118Z Last Updated: 2025-06-05T14:09:33.182Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C) Vendors: D-Link Products: DIR-816 Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical. This vulnerability affects unknown code of the file /goform/form2lansetup.cgi. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: -
ed. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311116 - https://vuldb.com/?ctiid.311116 - https://vuldb.com/?submit.589779 - https://github.com/wudipjq/my_vuln/blob/main/D-Link5/vuln_54/54.md - https://www.dlink.com/
CVE ID: CVE-2025-5631 State: PUBLISHED Published: 2025-06-05T02:31:05.107Z Last Updated: 2025-06-05T14:09:25.990Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects, anirbandutta9 Products: Content Management System, News-Buzz Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been classified as critical. Affected is an unknown function of the file /publicposts.php. The manipulation of the argument post leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP
the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311118 - https://vuldb.com/?ctiid.311118 - https://vuldb.com/?submit.589780 - https://github.com/YZS17/CVE/blob/main/NEWS-BUZZ/sqli_publicposts.php_post.md
CVE ID: CVE-2025-5632 State: PUBLISHED Published: 2025-06-05T03:00:10.612Z Last Updated: 2025-06-05T14:09:10.416Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects, anirbandutta9 Products: Content Management System, News-Buzz Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/users.php. The manipulation of the argument change_to_admin leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additiona
injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311119 - https://vuldb.com/?ctiid.311119 - https://vuldb.com/?submit.589781 - https://github.com/YZS17/CVE/blob/main/NEWS-BUZZ/sqli_users.php_change_to_admin.md
CVE ID: CVE-2025-5633 State: PUBLISHED Published: 2025-06-05T03:31:04.853Z Last Updated: 2025-06-05T14:09:04.121Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects, anirbandutta9 Products: Content Management System, News-Buzz Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/users.php. The manipulation of the argument delete leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: -
tack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311120 - https://vuldb.com/?ctiid.311120 - https://vuldb.com/?submit.589783 - https://github.com/YZS17/CVE/blob/main/NEWS-BUZZ/sqli_users.php_delete.md
CVE ID: CVE-2025-5634 State: PUBLISHED Published: 2025-06-05T04:00:14.858Z Last Updated: 2025-06-05T14:08:56.700Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component NOOP Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311121 - https://vuldb.com/?ctiid.311121 - https://vuldb.com/?su
A ADP Vulnrichment: References: - https://vuldb.com/?id.311121 - https://vuldb.com/?ctiid.311121 - https://vuldb.com/?submit.587048 - https://fitoxs.com/exploit/exploit-c5e11f95f8d134e3c6b23c3b1b7ce5e79274ab0719f798f1bb509474b33b1c0e1.txt
CVE ID: CVE-2025-5635 State: PUBLISHED Published: 2025-06-05T04:00:16.168Z Last Updated: 2025-06-05T14:08:50.239Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. This vulnerability affects unknown code of the component PLS Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311122 - https://vuldb.com/?ctiid.311122 - https://vuldb.com/?submit.
Vulnrichment: References: - https://vuldb.com/?id.311122 - https://vuldb.com/?ctiid.311122 - https://vuldb.com/?submit.587057 - https://fitoxs.com/exploit/exploit-67a2e172844905e3e09735d62ac7a925e8492f78c789c2995a1f2474c539ed8f95.txt
CVE ID: CVE-2025-5636 State: PUBLISHED Published: 2025-06-05T04:31:03.843Z Last Updated: 2025-06-05T14:08:43.845Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component SET Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311123 - https://vuldb.com/?ctiid.311123 - https:
st Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311123 - https://vuldb.com/?ctiid.311123 - https://vuldb.com/?submit.587059 - https://fitoxs.com/exploit/exploit-76d51400a1f23f1d67c2eb8f6793d6b8109cf44230294b16380f676b7bcad8c695.txt
CVE ID: CVE-2025-5637 State: PUBLISHED Published: 2025-06-05T04:31:05.087Z Last Updated: 2025-06-05T14:08:34.209Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in PCMan FTP Server 2.0.7. Affected is an unknown function of the component SYSTEM Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311124 - https://vuldb.com/?ctiid.311124 - https://vul
tes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311124 - https://vuldb.com/?ctiid.311124 - https://vuldb.com/?submit.587064 - https://fitoxs.com/exploit/exploit-af5b0137a4b3e132a79a087dbb97a8854fc4db337aad9a85fae3c7e748da3ad595.txt
CVE ID: CVE-2025-5638 State: PUBLISHED Published: 2025-06-05T05:00:19.690Z Last Updated: 2025-06-05T14:08:15.205Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Notice Board System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vul
osed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311125 - https://vuldb.com/?ctiid.311125 - https://vuldb.com/?submit.589811 - https://github.com/f1rstb100d/myCVE/issues/39 - https://phpgurukul.com/
CVE ID: CVE-2025-5639 State: PUBLISHED Published: 2025-06-05T05:31:06.774Z Last Updated: 2025-06-05T14:07:48.289Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Notice Board System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311126 - http
ic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311126 - https://vuldb.com/?ctiid.311126 - https://vuldb.com/?submit.589812 - https://github.com/f1rstb100d/myCVE/issues/40 - https://phpgurukul.com/
CVE ID: CVE-2025-5640 State: PUBLISHED Published: 2025-06-05T06:00:19.757Z Last Updated: 2025-06-05T15:22:29.230Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: PX4-Autopilot Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in PX4-Autopilot 1.12.3. It has been classified as problematic. This affects the function MavlinkReceiver::handle_message_trajectory_representation_waypoints of the file mavlink_receiver.cpp of the component TRAJECTORY_REPRESENTATION_WAYPOINTS Message Handler. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the publ
tack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311127 - https://vuldb.com/?ctiid.311127 - https://vuldb.com/?submit.584889 - https://github.com/PX4/PX4-Autopilot/issues/24915 - https://github.com/PX4/PX4-Autopilot/issues/24915#issue-3091040552
CVE ID: CVE-2025-5641 State: PUBLISHED Published: 2025-06-05T06:31:06.181Z Last Updated: 2025-06-05T15:18:05.066Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Radare2 Problem Types: CWE-119 Description: A vulnerability was found in Radare2 5.9.9. It has been rated as problematic. This issue affects the function r_cons_is_breaked in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be
tack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The identifier of the patch is 5705d99cc1f23f36f9a84aab26d1724010b97798. It is recommended to apply a patch to fix this issue. The documentation explains that the parameter -T is experimental and "crashy". Further analysis has shown "the race is not a real problem unless you use asan". An additional warning regarding threading support has been added. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311129 - https://vuldb.com/?ctiid.311129 - https://vuldb.com/
CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311129 - https://vuldb.com/?ctiid.311129 - https://vuldb.com/?submit.586909 - https://github.com/radareorg/radare2/issues/24230 - https://github.com/radareorg/radare2/issues/24230#issuecomment-2919612676 - https://drive.google.com/file/d/1oG5IC7qhL_SJsIHpnWp7MZlWJGYt8qWZ/view?usp=sharing - https://github.com/radareorg/radare2/commit/5705d99cc1f23f36f9a84aab26d1724010b97798
CVE ID: CVE-2025-5642 State: PUBLISHED Published: 2025-06-05T06:31:08.823Z Last Updated: 2025-06-05T18:50:10.542Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Radare2 Problem Types: CWE-119 Description: A vulnerability classified as problematic has been found in Radare2 5.9.9. Affected is the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation leads to memory corruption. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerabil
old to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The patch is identified as 5705d99cc1f23f36f9a84aab26d1724010b97798. It is recommended to apply a patch to fix this issue. The documentation explains that the parameter -T is experimental and "crashy". Further analysis has shown "the race is not a real problem unless you use asan". A new warning has been added. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311130 - https://vuldb.com/?ctiid.311130 - https://vuldb.com/?submit.586910 - https://github.com/radareorg/radare2/issues/24231 - https://github
om/?ctiid.311130 - https://vuldb.com/?submit.586910 - https://github.com/radareorg/radare2/issues/24231 - https://github.com/radareorg/radare2/issues/24231#issuecomment-2918848163 - https://drive.google.com/file/d/1joXpofhKSeb3uJ034ayVuWIoJj08gm_9/view?usp=sharing - https://github.com/radareorg/radare2/commit/5705d99cc1f23f36f9a84aab26d1724010b97798
CVE ID: CVE-2025-5643 State: PUBLISHED Published: 2025-06-05T07:00:19.086Z Last Updated: 2025-06-05T18:45:59.305Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Radare2 Problem Types: CWE-119 Description: A vulnerability classified as problematic was found in Radare2 5.9.9. Affected by this vulnerability is the function cons_stack_load in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The r
ther high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The patch is named 5705d99cc1f23f36f9a84aab26d1724010b97798. It is recommended to apply a patch to fix this issue. The documentation explains that the parameter -T is experimental and "crashy". Further analysis has shown "the race is not a real problem unless you use asan". A new warning has been added. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311131 - https://vuldb.com/?ctiid.311131 - https://vuldb.com/?submit.586912 - https://github.com/radareorg/radare2/issue
311131 - https://vuldb.com/?ctiid.311131 - https://vuldb.com/?submit.586912 - https://github.com/radareorg/radare2/issues/24232 - https://github.com/radareorg/radare2/issues/24232#issuecomment-2918841776 - https://drive.google.com/file/d/1XsoyD7lMC-9a9Cxhld8sdEE-0PF3lxvB/view?usp=sharing - https://github.com/radareorg/radare2/commit/5705d99cc1f23f36f9a84aab26d1724010b97798
CVE ID: CVE-2025-5644 State: PUBLISHED Published: 2025-06-05T07:00:21.805Z Last Updated: 2025-06-05T18:25:12.368Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Radare2 Problem Types: CWE-416, CWE-119 Description: A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9. Affected by this issue is the function r_cons_flush in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to use after free. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public
ity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The name of the patch is 5705d99cc1f23f36f9a84aab26d1724010b97798. It is recommended to apply a patch to fix this issue. The documentation explains that the parameter -T is experimental and "crashy". Further analysis has shown "the race is not a real problem unless you use asan". A new warning has been added. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311132 - https://vuldb.com/?ctiid.311132 - https://vuldb.com/?submit.586921 - https://githu
ces: - https://vuldb.com/?id.311132 - https://vuldb.com/?ctiid.311132 - https://vuldb.com/?submit.586921 - https://github.com/radareorg/radare2/issues/24233 - https://github.com/radareorg/radare2/issues/24233#issuecomment-2918847833 - https://drive.google.com/file/d/1VtiMMp7ECun3sq3AwlqQrU9xEPA45eOz/view?usp=sharing - https://github.com/radareorg/radare2/commit/5705d99cc1f23f36f9a84aab26d1724010b97798
CVE ID: CVE-2025-5645 State: PUBLISHED Published: 2025-06-05T07:31:05.437Z Last Updated: 2025-06-05T18:12:13.614Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Radare2 Problem Types: CWE-119 Description: A vulnerability, which was classified as problematic, was found in Radare2 5.9.9. This affects the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The real existenc
exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The identifier of the patch is 5705d99cc1f23f36f9a84aab26d1724010b97798. It is recommended to apply a patch to fix this issue. The documentation explains that the parameter -T is experimental and "crashy". Further analysis has shown "the race is not a real problem unless you use asan". A new warning has been added. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311133 - https://vuldb.com/?ctiid.311133 - https://vuldb.com/?submit.586922 - https://github.com/radareorg/radare2/issue
311133 - https://vuldb.com/?ctiid.311133 - https://vuldb.com/?submit.586922 - https://github.com/radareorg/radare2/issues/24234 - https://github.com/radareorg/radare2/issues/24234#issuecomment-2918847551 - https://drive.google.com/file/d/1LVaraZB30lJXtrvp-4bcEJrZYFJb2bfc/view?usp=sharing - https://github.com/radareorg/radare2/commit/5705d99cc1f23f36f9a84aab26d1724010b97798
CVE ID: CVE-2025-5646 State: PUBLISHED Published: 2025-06-05T08:00:20.742Z Last Updated: 2025-06-05T18:11:05.880Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Radare2 Problem Types: CWE-119 Description: A vulnerability has been found in Radare2 5.9.9 and classified as problematic. This vulnerability affects the function r_cons_rainbow_free in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public an
y of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The patch is identified as 5705d99cc1f23f36f9a84aab26d1724010b97798. It is recommended to apply a patch to fix this issue. The documentation explains that the parameter -T is experimental and "crashy". Further analysis has shown "the race is not a real problem unless you use asan". A new warning has been added. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311134 - https://vuldb.com/?ctiid.311134 - https://vuldb.com/?submit.586923 - https://github
es: - https://vuldb.com/?id.311134 - https://vuldb.com/?ctiid.311134 - https://vuldb.com/?submit.586923 - https://github.com/radareorg/radare2/issues/24235 - https://github.com/radareorg/radare2/issues/24235#issuecomment-2918847213 - https://drive.google.com/file/d/1PYNtV7Kx2OEgM9Cemb5FBlMJH_J1wux0/view?usp=sharing - https://github.com/radareorg/radare2/commit/5705d99cc1f23f36f9a84aab26d1724010b97798
CVE ID: CVE-2025-5647 State: PUBLISHED Published: 2025-06-05T08:31:06.332Z Last Updated: 2025-06-05T15:10:40.887Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Radare2 Problem Types: CWE-119 Description: A vulnerability was found in Radare2 5.9.9 and classified as problematic. This issue affects the function r_cons_context_break_pop in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The
ather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The patch is named 5705d99cc1f23f36f9a84aab26d1724010b97798. It is recommended to apply a patch to fix this issue. The documentation explains that the parameter -T is experimental and "crashy". Further analysis has shown "the race is not a real problem unless you use asan". A new warning has been added. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311135 - https://vuldb.com/?ctiid.311135 - https://vuldb.com/?submit.586928 - https://github.com/radareorg/radare2/iss
d.311135 - https://vuldb.com/?ctiid.311135 - https://vuldb.com/?submit.586928 - https://github.com/radareorg/radare2/issues/24237 - https://github.com/radareorg/radare2/issues/24237#issuecomment-2918846137 - https://drive.google.com/file/d/16ApwSAKLDqm1qzJLe-uUZSCyy8HNG965/view?usp=sharing - https://github.com/radareorg/radare2/commit/5705d99cc1f23f36f9a84aab26d1724010b97798
CVE ID: CVE-2025-5648 State: PUBLISHED Published: 2025-06-05T09:00:13.054Z Last Updated: 2025-06-05T14:07:40.992Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Radare2 Problem Types: CWE-119 Description: A vulnerability was found in Radare2 5.9.9. It has been classified as problematic. Affected is the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has to be approached locally. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The real exis