Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-26686 State: PUBLISHED Published: 2025-04-08T17:23:12.678Z Last Updated: 2025-06-04T17:52:26.548Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wind
indows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-591 Description: Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code
n: Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26686
CVE ID: CVE-2025-26687 State: PUBLISHED Published: 2025-04-08T17:23:13.353Z Last Updated: 2025-06-04T17:52:27.087Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wind
indows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Microsoft Office for Android, Microsoft Office for Universal Problem Types: CWE-416 Description: Use after free in Windows Win32K - GRFX allows an unaut
crosoft Office for Universal Problem Types: CWE-416 Description: Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26687
CVE ID: CVE-2025-26688 State: PUBLISHED Published: 2025-04-08T17:23:14.115Z Last Updated: 2025-06-04T17:52:27.574Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wind
indows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-121 Description: Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26688
CVE ID: CVE-2025-26689 State: PUBLISHED Published: 2025-03-31T04:49:30.059Z Last Updated: 2025-03-31T15:58:55.013Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Inaba Denki Sangyo Co., Ltd. Products: CHOCO TEI WATCHER mini (IB-MCT001) Problem Types: CWE-425 Description: Direct request ('Forced Browsing') issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If a remote attacker sends a specially crafted HTTP request to the product, the product data may be obtained or deleted, and/or the product settings may be altered. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.inaba.co.jp/files/chocomini_vulnerability.pdf - h
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.inaba.co.jp/files/chocomini_vulnerability.pdf - https://jvn.jp/en/vu/JVNVU91154745/ - https://www.cisa.gov/news-events/ics-advisories/icsa-25-084-04 - https://www.nozominetworks.com/blog/unpatched-vulnerabilities-in-production-line-cameras-may-allow-remote-surveillance-hinder-stoppage-recording
CVE ID: CVE-2025-26690 State: PUBLISHED Published: 2025-08-11T02:55:08.028Z Last Updated: 2025-08-11T20:37:10.526Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-476 Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-07.md
CVE ID: CVE-2025-26691 State: PUBLISHED Published: 2025-06-08T11:47:04.449Z Last Updated: 2025-06-09T03:30:20.333Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-281 Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md
CVE ID: CVE-2025-26692 State: PUBLISHED Published: 2025-04-27T23:56:48.261Z Last Updated: 2025-04-28T15:26:59.179Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SIOS Technology, Inc. Products: Quick Agent V3, Quick Agent V2 Problem Types: CWE-22 Description: Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Path Traversal'). If exploited, arbitrary code may be executed by a remote unauthenticated attacker with the Windows system privilege where the product is running. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mfp-support.sios.jp/hc/ja/articles/45853460006937 -
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mfp-support.sios.jp/hc/ja/articles/45853460006937 - https://siosapps.sios.jp/agent_info/20250425001.html - https://jvn.jp/en/jp/JVN82536398/
CVE ID: CVE-2025-26693 State: PUBLISHED Published: 2025-06-08T11:47:09.091Z Last Updated: 2025-06-09T03:29:57.365Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-281 Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md
CVE ID: CVE-2025-26694 State: PUBLISHED Published: 2025-11-11T16:50:17.055Z Last Updated: 2025-11-12T20:00:44.504Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) QAT Windows software Problem Types: Denial of Service, CWE-476 Description: Null pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and re
ay potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html
CVE ID: CVE-2025-26695 State: PUBLISHED Published: 2025-03-10T18:41:25.460Z Last Updated: 2025-03-12T18:37:28.315Z Vendors: Mozilla Products: Thunderbird Problem Types: Downloading of OpenPGP keys from WKD used incorrect padding Description: When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address. This vulnerability affects Thunderbird < 136 and Thunderbird < 128.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1883039 - https://www.mozilla.org/security/advisories/mfsa2025-17/ - https://www.mozilla.org/security/adviso
_bug.cgi?id=1883039 - https://www.mozilla.org/security/advisories/mfsa2025-17/ - https://www.mozilla.org/security/advisories/mfsa2025-18/
CVE ID: CVE-2025-26696 State: PUBLISHED Published: 2025-03-10T18:41:25.205Z Last Updated: 2025-03-11T19:17:04.139Z Vendors: Mozilla Products: Thunderbird Problem Types: Crafted email message incorrectly shown as being encrypted Description: Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability affects Thunderbird < 136 and Thunderbird < 128.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1864205 - https://www.mozilla.org/security/advisories/mfsa2025-17/ - https://www.mozilla.org/securi
.org/show_bug.cgi?id=1864205 - https://www.mozilla.org/security/advisories/mfsa2025-17/ - https://www.mozilla.org/security/advisories/mfsa2025-18/
CVE ID: CVE-2025-26697 State: PUBLISHED Published: 2025-08-12T16:59:23.531Z Last Updated: 2025-08-13T20:15:41.515Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) 700 Series Ethernet Problem Types: Denial of Service, CWE-400 Description: Uncontrolled resource consumption in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow an authenticated user to potentially enable denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01335.html
CVE ID: CVE-2025-26698 State: PUBLISHED Published: 2025-02-26T08:42:53.924Z Last Updated: 2025-02-26T15:32:14.346Z Severity: LOW (CVSS 2.7 CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: J’s Communication Co., Ltd. Products: RevoWorks SCVX, RevoWorks Browser Problem Types: CWE-669 Description: Incorrect resource transfer between spheres issue exists in RevoWorks SCVX and RevoWorks Browser. If exploited, malicious files may be downloaded to the system where using the product. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jscom.jp/news-20250217/ - https://jvn.jp/en/jp/JVN91300609/
CVE ID: CVE-2025-26699 State: PUBLISHED Published: 2025-03-06T00:00:00.000Z Last Updated: 2025-03-19T20:03:03.946Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L) Vendors: djangoproject Products: Django Problem Types: CWE-770 Description: An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.djangoproject.com/en/dev/releases/security/ - https://groups.google.com/g/django-announce
t: References: - https://docs.djangoproject.com/en/dev/releases/security/ - https://groups.google.com/g/django-announce - https://www.djangoproject.com/weblog/2025/mar/06/security-releases/
CVE ID: CVE-2025-26700 State: PUBLISHED Published: 2025-02-17T02:59:57.779Z Last Updated: 2025-02-18T15:56:18.426Z Severity: MEDIUM (CVSS 5.2 CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: Siber Systems, Inc. Products: RoboForm Password Manager Problem Types: CWE-288 Description: Authentication bypass using an alternate path or channel issue exists in ”RoboForm Password Manager" App for Android versions prior to 9.7.4, which may allow an attacker with access to a device where the application is installed to bypass the lock screen and obtain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.roboform.com/news-android - https://jvn.jp/en
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.roboform.com/news-android - https://jvn.jp/en/vu/JVNVU92071645/
CVE ID: CVE-2025-26701 State: PUBLISHED Published: 2025-03-11T00:00:00.000Z Last Updated: 2025-03-11T19:27:40.631Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Percona Products: Monitoring and Management Problem Types: CWE-1393 Description: An issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova. The default service account credentials can lead to SSH access, use of Sudo to root, and sensitive data exposure. This is fixed in PMM2 2.42.0-1.ova, 2.43.0-1.ova, 2.43.1-1.ova, 2.43.2-1.ova, and 2.44.0-1.ova and in PMM3 3.0.0-1.ova and later. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.percona.com/blog/security-ad
ova and later. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.percona.com/blog/security-advisory-cve-affecting-percona-monitoring-and-management-pmm/
CVE ID: CVE-2025-26702 State: PUBLISHED Published: 2025-03-11T07:04:13.379Z Last Updated: 2025-03-11T15:57:50.032Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: ZTE Products: GoldenDB Problem Types: CWE-20 Description: Improper Input Validation vulnerability in ZTE GoldenDB allows Input Data Manipulation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.04. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1820079027271819342
CVE ID: CVE-2025-26703 State: PUBLISHED Published: 2025-03-11T06:59:20.942Z Last Updated: 2025-03-11T17:17:25.303Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: ZTE Products: GoldenDB Problem Types: CWE-269 Description: Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.04. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/5666152569221570627
CVE ID: CVE-2025-26704 State: PUBLISHED Published: 2025-03-11T06:55:34.869Z Last Updated: 2025-03-11T17:29:31.278Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L) Vendors: ZTE Products: GoldenDB Problem Types: CWE-269 Description: Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.05. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/6999218053484646494
CVE ID: CVE-2025-26705 State: PUBLISHED Published: 2025-03-11T06:49:25.689Z Last Updated: 2025-03-11T17:38:44.541Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: ZTE Products: GoldenDB Problem Types: CWE-269 Description: Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.05. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/577084989971263576
CVE ID: CVE-2025-26706 State: PUBLISHED Published: 2025-03-11T06:43:00.347Z Last Updated: 2025-03-11T13:14:48.609Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: ZTE Products: GoldenDB Problem Types: CWE-269 Description: Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.07. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/6999218053484646486
CVE ID: CVE-2025-26707 State: PUBLISHED Published: 2025-03-11T03:17:01.614Z Last Updated: 2025-03-11T13:58:12.308Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: ZTE Products: GoldenDB Problem Types: CWE-269 Description: Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.05. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/6999218053484646470
CVE ID: CVE-2025-26708 State: PUBLISHED Published: 2025-03-07T02:38:37.127Z Last Updated: 2025-03-17T06:57:56.825Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: ZTE Products: ZTE Link Problem Types: CWE-327 Description: There is a configuration defect vulnerability in ZTELink 5.4.9 for iOS. This vulnerability is caused by a flaw in the WiFi parameter configuration of the ZTELink. An attacker can obtain unauthorized access to the WiFi service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/5666152569221570580
CVE ID: CVE-2025-26709 State: PUBLISHED Published: 2025-08-15T10:35:22.604Z Last Updated: 2025-08-15T11:48:24.285Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: ZTE Products: F50 Problem Types: CWE-200 Description: There is an unauthorized access vulnerability in ZTE F50. Due to improper permission control of the Web module interface, an unauthorized attacker can obtain sensitive information through the interface Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1288700446535356789
CVE ID: CVE-2025-26710 State: PUBLISHED Published: 2025-09-16T09:14:00.815Z Last Updated: 2025-09-16T19:25:40.632Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: ZTE Products: T5400 Problem Types: CWE-200 Description: There is an an information disclosure vulnerability in ZTE T5400. Due to improper configuration of the access control mechanism, attackers can obtain information through interfaces without authorization, causing the risk of information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1441846006241435667
CVE ID: CVE-2025-26711 State: PUBLISHED Published: 2025-09-16T09:35:38.419Z Last Updated: 2025-09-16T19:26:10.986Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: ZTE Products: T5400 Problem Types: CWE-200 Description: There is an unauthorized access vulnerability in ZTE T5400. Due to improper permission control of the Web module interface, an unauthorized attacker can obtain sensitive information through the interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1441846006241435677
CVE ID: CVE-2025-26730 State: PUBLISHED Published: 2025-04-15T21:53:09.964Z Last Updated: 2025-04-16T15:06:59.521Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: NotFound Products: Macro Calculator with Admin Email Optin & Data Problem Types: CWE-497 Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NotFound Macro Calculator with Admin Email Optin & Data. This issue affects Macro Calculator with Admin Email Optin & Data: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/macro-admin-email-data-optin-calculator/vulnerabili
ment: References: - https://patchstack.com/database/wordpress/plugin/macro-admin-email-data-optin-calculator/vulnerability/wordpress-macro-calculator-with-admin-email-optin-data-plugin-1-0-multiple-vulnerabilities-vulnerability?_s_id=cve
CVE ID: CVE-2025-26731 State: PUBLISHED Published: 2025-03-27T14:01:48.770Z Last Updated: 2025-03-28T17:00:52.054Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Repute Infosystems Products: ARPrice Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Repute Infosystems ARPrice allows Stored XSS.This issue affects ARPrice: from n/a through 4.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/arprice/vulnerability/wordpress-arprice-plugin-4-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-26732 State: PUBLISHED Published: 2025-03-27T14:00:07.569Z Last Updated: 2025-03-28T17:11:32.675Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: BurgerThemes Products: StoreBiz Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BurgerThemes StoreBiz allows DOM-Based XSS.This issue affects StoreBiz: from n/a through 1.0.32. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/storebiz/vulnerability/wordpress-storebiz-plugin-1-0-32-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-26733 State: PUBLISHED Published: 2025-03-27T22:01:31.581Z Last Updated: 2025-03-28T15:58:24.608Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L) Vendors: Shinetheme Products: Traveler Problem Types: CWE-862 Description: Missing Authorization vulnerability in Shinetheme Traveler.This issue affects Traveler: from n/a through 3.1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/traveler/vulnerability/wordpress-traveler-theme-3-1-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-26734 State: PUBLISHED Published: 2025-03-27T13:58:36.836Z Last Updated: 2025-03-28T17:11:39.756Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: peregrinethemes Products: Hester Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in peregrinethemes Hester allows Stored XSS.This issue affects Hester: from n/a through 1.1.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/hester/vulnerability/wordpress-hester-plugin-1-1-10-cross-site-scripting-xss-vulnerability?_s_id=cve