Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-10500 State: PUBLISHED Published: 2025-09-24T16:17:12.209Z Last Updated: 2025-09-25T03:55:51.562Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html - https://issues.chromium.org/issues/435875050
CVE ID: CVE-2025-10501 State: PUBLISHED Published: 2025-09-24T16:17:12.775Z Last Updated: 2025-09-25T03:55:52.407Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html - https://issues.chromium.org/issues/440737137
CVE ID: CVE-2025-10502 State: PUBLISHED Published: 2025-09-24T16:17:13.365Z Last Updated: 2025-09-25T03:55:53.380Z Vendors: Google Products: Chrome Problem Types: CWE-122 Description: Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html - https://issues.chromium.org/issues/438038775
CVE ID: CVE-2025-10504 State: PUBLISHED Published: 2025-09-29T04:12:18.599Z Last Updated: 2025-10-16T06:22:01.300Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: ABB Products: Terra AC wallbox Problem Types: CWE-122 Description: Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A8107&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2025-10527 State: PUBLISHED Published: 2025-09-16T12:26:35.079Z Last Updated: 2025-11-03T18:08:27.952Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1984825 - https://www.mozilla.org/security/advisories/mfsa2025-73/ - https://www.mozilla.org/security/advisories/mfsa2025-75/ - https://www.mozilla.org/security/advisories/mfsa2025-77/ - https://
//www.mozilla.org/security/advisories/mfsa2025-75/ - https://www.mozilla.org/security/advisories/mfsa2025-77/ - https://www.mozilla.org/security/advisories/mfsa2025-78/
CVE ID: CVE-2025-10528 State: PUBLISHED Published: 2025-09-16T12:26:35.394Z Last Updated: 2025-11-03T18:08:29.851Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1986185 - https://www.mozilla.org/security/advisories/mfsa2025-73/ - https://www.mozilla.org/security/advisories/mfsa2025-75/ - https://www.mozilla.org/security/advisories/mf
mfsa2025-73/ - https://www.mozilla.org/security/advisories/mfsa2025-75/ - https://www.mozilla.org/security/advisories/mfsa2025-77/ - https://www.mozilla.org/security/advisories/mfsa2025-78/
CVE ID: CVE-2025-10529 State: PUBLISHED Published: 2025-09-16T12:26:35.822Z Last Updated: 2025-11-03T18:08:31.807Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Same-origin policy bypass in the Layout component. This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1970490 - https://www.mozilla.org/security/advisories/mfsa2025-73/ - https://www.mozilla.org/security/advisories/mfsa2025-75/ - https://www.mozilla.org/security/advisories/mfsa2025-77/ - https://www.mozilla.org/securit
ity/advisories/mfsa2025-75/ - https://www.mozilla.org/security/advisories/mfsa2025-77/ - https://www.mozilla.org/security/advisories/mfsa2025-78/
CVE ID: CVE-2025-10530 State: PUBLISHED Published: 2025-09-16T12:26:37.795Z Last Updated: 2025-10-30T16:10:03.883Z Vendors: Mozilla Products: Firefox, Thunderbird Description: Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability affects Firefox < 143 and Thunderbird < 143. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1974025 - https://www.mozilla.org/security/advisories/mfsa2025-73/ - https://www.mozilla.org/security/advisories/mfsa2025-77/
CVE ID: CVE-2025-10531 State: PUBLISHED Published: 2025-09-16T12:26:38.264Z Last Updated: 2025-10-30T16:10:06.094Z Vendors: Mozilla Products: Firefox, Thunderbird Description: Mitigation bypass in the Web Compatibility: Tooling component. This vulnerability affects Firefox < 143 and Thunderbird < 143. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1978453 - https://www.mozilla.org/security/advisories/mfsa2025-73/ - https://www.mozilla.org/security/advisories/mfsa2025-77/
CVE ID: CVE-2025-10532 State: PUBLISHED Published: 2025-09-16T12:26:36.188Z Last Updated: 2025-11-03T18:08:33.712Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Incorrect boundary conditions in the JavaScript: GC component. This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1979502 - https://www.mozilla.org/security/advisories/mfsa2025-73/ - https://www.mozilla.org/security/advisories/mfsa2025-75/ - https://www.mozilla.org/security/advisories/mfsa2025-77/ - https://www.mozilla
la.org/security/advisories/mfsa2025-75/ - https://www.mozilla.org/security/advisories/mfsa2025-77/ - https://www.mozilla.org/security/advisories/mfsa2025-78/
CVE ID: CVE-2025-10533 State: PUBLISHED Published: 2025-09-16T12:26:34.655Z Last Updated: 2025-11-03T18:08:34.662Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Integer overflow in the SVG component. This vulnerability affects Firefox < 143, Firefox ESR < 115.28, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1980788 - https://www.mozilla.org/security/advisories/mfsa2025-73/ - https://www.mozilla.org/security/advisories/mfsa2025-74/ - https://www.mozilla.org/security/advisories/mfsa2025-75/ - https://www.mozilla.o
.org/security/advisories/mfsa2025-74/ - https://www.mozilla.org/security/advisories/mfsa2025-75/ - https://www.mozilla.org/security/advisories/mfsa2025-77/ - https://www.mozilla.org/security/advisories/mfsa2025-78/
CVE ID: CVE-2025-10534 State: PUBLISHED Published: 2025-09-16T12:26:38.630Z Last Updated: 2025-11-04T15:50:01.108Z Vendors: Mozilla Products: Firefox, Thunderbird Description: Spoofing issue in the Site Permissions component. This vulnerability affects Firefox < 143 and Thunderbird < 143. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1665334 - https://www.mozilla.org/security/advisories/mfsa2025-73/ - https://www.mozilla.org/security/advisories/mfsa2025-77/
CVE ID: CVE-2025-10535 State: PUBLISHED Published: 2025-09-16T12:26:38.955Z Last Updated: 2025-11-04T15:49:28.323Z Vendors: Mozilla Products: Firefox Description: Information disclosure, mitigation bypass in the Privacy component in Firefox for Android. This vulnerability affects Firefox < 143. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1979918 - https://www.mozilla.org/security/advisories/mfsa2025-73/
CVE ID: CVE-2025-10536 State: PUBLISHED Published: 2025-09-16T12:26:36.546Z Last Updated: 2025-11-03T18:08:36.559Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Information disclosure in the Networking: Cache component. This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1981502 - https://www.mozilla.org/security/advisories/mfsa2025-73/ - https://www.mozilla.org/security/advisories/mfsa2025-75/ - https://www.mozilla.org/security/advisories/mfsa2025-77/ - https://www.mozilla.org
rg/security/advisories/mfsa2025-75/ - https://www.mozilla.org/security/advisories/mfsa2025-77/ - https://www.mozilla.org/security/advisories/mfsa2025-78/
CVE ID: CVE-2025-10537 State: PUBLISHED Published: 2025-09-16T12:26:37.029Z Last Updated: 2025-11-03T18:08:38.494Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=193
tes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1938220%2C1980730%2C1981280%2C1981283%2C1984505%2C1985067 - https://www.mozilla.org/security/advisories/mfsa2025-73/ - https://www.mozilla.org/security/advisories/mfsa2025-75/ - https://www.mozilla.org/security/advisories/mfsa2025-77/ - https://www.mozilla.org/security/advisories/mfsa2025-78/
CVE ID: CVE-2025-10538 State: PUBLISHED Published: 2025-10-01T04:02:35.188Z Last Updated: 2025-10-01T14:59:48.942Z Vendors: LG Innotek Products: Camera Model LND7210, Camera Model LNV7210R Problem Types: CWE-288 Description: An authentication bypass vulnerability exists in LG Innotek camera models LND7210 and LNV7210R. The vulnerability allows a malicious actor to gain access to camera information including user account information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-273-07
CVE ID: CVE-2025-10540 State: PUBLISHED Published: 2025-09-25T14:05:05.646Z Last Updated: 2025-11-03T18:08:39.436Z Vendors: iMonitor Software Inc. Products: iMonitor EAM Problem Types: CWE-319 Description: iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM monitor management software and the server, in plaintext without authentication or encryption. An attacker with network access can intercept sensitive information (such as credentials, keylogger data, and personally identifiable information) and tamper with traffic. This allows both unauthorized disclosure and modification of data, including issuing arbitrary commands to
ith traffic. This allows both unauthorized disclosure and modification of data, including issuing arbitrary commands to client agents. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://r.sec-consult.com/imonitor
CVE ID: CVE-2025-10541 State: PUBLISHED Published: 2025-09-25T14:31:32.644Z Last Updated: 2025-11-03T18:08:40.379Z Vendors: iMonitor Software Inc. Products: iMonitor EAM Problem Types: CWE-732 Description: iMonitor EAM 9.6394 installs a system service (eamusbsrv64.exe) that runs with NT AUTHORITY\SYSTEM privileges. This service includes an insecure update mechanism that automatically loads files placed in the C:\sysupdate\ directory during startup. Because any local user can create and write to this directory, an attacker can place malicious DLLs or executables in it. Upon service restart, the files are moved to the application’s installation path and executed with SYSTEM privileges, leading
service restart, the files are moved to the application’s installation path and executed with SYSTEM privileges, leading to privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://r.sec-consult.com/imonitor
CVE ID: CVE-2025-10542 State: PUBLISHED Published: 2025-09-25T14:35:18.879Z Last Updated: 2025-11-03T18:08:41.325Z Vendors: iMonitor Software Inc. Products: iMonitor EAM Problem Types: CWE-1392 Description: iMonitor EAM 9.6394 ships with default administrative credentials that are also displayed within the management client’s connection dialog. If the administrator does not change these defaults, a remote attacker can authenticate to the EAM server and gain full control over monitored agents and data. This enables reading highly sensitive telemetry (including keylogger output) and issuing arbitrary actions to all connected clients. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pro
ut) and issuing arbitrary actions to all connected clients. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://r.sec-consult.com/imonitor
CVE ID: CVE-2025-10544 State: PUBLISHED Published: 2025-09-26T09:51:12.104Z Last Updated: 2025-09-26T12:41:19.401Z Vendors: AvePoint Products: DocAve, Perimeter, Compliance Guardian Problem Types: CWE-434 Description: Unrestricted file upload vulnerability in DocAve 6.13.2, Perimeter 1.12.3, Compliance Guardian 4.7.1, and earlier versions, allowing administrator users to upload files without proper validation. An attacker could exploit this vulnerability by uploading malicious files that compromise the system. In addition, it is vulnerable to Path Traversal, which allows files to be written to arbitrary directories within the web root. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
les to be written to arbitrary directories within the web root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/unrestricted-uploading-dangerous-file-types-avepoint-products
CVE ID: CVE-2025-10545 State: PUBLISHED Published: 2025-10-16T08:24:25.928Z Last Updated: 2025-10-16T14:14:09.887Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-863 Description: Mattermost versions 10.5.x <= 10.5.10, 10.11.x <= 10.11.2 fail to properly validate guest user permissions when adding channel members which allows guest users to add any team members to their private channels via the `/api/v4/channels/{channel_id}/members` endpoint Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-10546 State: PUBLISHED Published: 2025-09-16T12:18:58.822Z Last Updated: 2025-09-16T18:25:22.896Z Vendors: PPC Technologies Products: PPC XPON ONT (Optical Network Terminal) 2K15X Problem Types: CWE-79 Description: This vulnerability exist in PPC 2K15X Router, due to improper input validation for the Common Gateway Interface (CGI) parameters at its web management portal. A remote attacker could exploit this vulnerability by injecting malicious JavaScript into the vulnerable parameter, leading to a reflected Cross-Site Scripting (XSS) attack on the targeted system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pagei
system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0215
CVE ID: CVE-2025-10547 State: PUBLISHED Published: 2025-10-03T11:35:43.752Z Last Updated: 2025-11-04T22:06:30.559Z Vendors: DrayTek Corporation Products: Vigor1000B, Vigor2962, Vigor3910, Vigor3912, Vigor2135, Vigor2763, Vigor2765, Vigor2766, Vigor2865, Vigor2865 LTE Series, Vigor2865L-5G Series, Vigor2866, Vigor2866 LTE, Vigor2927, Vigor 2927 LTE, Vigor2927L-5G, Vigor2915, Vigor2862, Vigor2862 LTE, Vigor2926 Problem Types: CWE-456: Missing Initialization of a Variable Description: An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption. Additio
ters running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.draytek.com/about/security-advisory/use-of-uninitialized-variable-vulnerabilities/
CVE ID: CVE-2025-10548 State: PUBLISHED Published: 2025-09-23T06:49:33.659Z Last Updated: 2025-11-03T18:08:42.269Z Vendors: CleverControl Products: CleverControl employee monitoring software Problem Types: CWE-295 Description: The CleverControl employee monitoring software (v11.5.1041.6) fails to validate TLS server certificates during the installation process. The installer downloads and executes external components using curl.exe --insecure, enabling a man-in-the-middle attacker to deliver malicious files that are executed with SYSTEM privileges. This can lead to full remote code execution with administrative rights. No patch is available as the vendor has been unresponsive. It is assumed
ote code execution with administrative rights. No patch is available as the vendor has been unresponsive. It is assumed that previous versions are also affected, but this is not confirmed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://r.sec-consult.com/clevercontrol
CVE ID: CVE-2025-10552 State: PUBLISHED Published: 2025-10-13T07:36:11.959Z Last Updated: 2025-10-14T15:07:38.378Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: 3DSwymer Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10552
CVE ID: CVE-2025-10554 State: PUBLISHED Published: 2025-11-24T15:31:39.739Z Last Updated: 2025-11-24T17:59:51.057Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: ENOVIA Product Manager Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10554
CVE ID: CVE-2025-10555 State: PUBLISHED Published: 2025-11-24T15:31:54.111Z Last Updated: 2025-11-24T16:02:51.305Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: DELMIA Service Process Engineer Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10555
CVE ID: CVE-2025-10556 State: PUBLISHED Published: 2025-10-13T07:36:19.327Z Last Updated: 2025-10-14T14:56:28.760Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: ENOVIA Specification Manager Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10556
CVE ID: CVE-2025-10557 State: PUBLISHED Published: 2025-10-13T07:36:28.063Z Last Updated: 2025-10-27T16:10:55.079Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: ENOVIA Collaborative Industry Innovator Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/trust-center/security/security-advisories/cve-202
lyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10557
CVE ID: CVE-2025-10558 State: PUBLISHED Published: 2025-10-13T07:36:34.151Z Last Updated: 2025-10-14T14:49:21.171Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: 3DSwymer Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10558
CVE ID: CVE-2025-10561 State: REJECTED Published: 2025-10-27T10:00:07.715Z Last Updated: 2025-11-11T08:33:26.172Z Description: No description available.
CVE ID: CVE-2025-10562 State: PUBLISHED Published: 2025-09-16T19:02:06.928Z Last Updated: 2025-09-16T20:19:43.390Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Grocery Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file /ajax.php?action=save_product. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324476 - https:/
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324476 - https://vuldb.com/?ctiid.324476 - https://vuldb.com/?submit.646976 - https://github.com/zzb1388/cve/issues/77 - https://www.campcodes.com/
CVE ID: CVE-2025-10563 State: PUBLISHED Published: 2025-09-16T20:02:07.584Z Last Updated: 2025-09-16T20:28:06.373Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Grocery Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=save_category. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.