Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-58257 State: PUBLISHED Published: 2025-09-22T18:23:24.186Z Last Updated: 2025-09-23T16:13:49.359Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Picture-Planet GmbH Products: Verowa Connect Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Picture-Planet GmbH Verowa Connect allows Stored XSS. This issue affects Verowa Connect: from n/a through 3.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/verowa-connect/vulnerability/wordpress-verowa-connect-plugin-3-2-3-cross-site-scripting-xss-vu
database/wordpress/plugin/verowa-connect/vulnerability/wordpress-verowa-connect-plugin-3-2-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58258 State: PUBLISHED Published: 2025-09-22T18:23:23.450Z Last Updated: 2025-09-23T16:13:55.741Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: nK Products: Lazy Blocks Problem Types: CWE-862 Description: Missing Authorization vulnerability in nK Lazy Blocks allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Lazy Blocks: from n/a through 4.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/lazy-blocks/vulnerability/wordpress-lazy-blocks-plugin-4-1-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58259 State: PUBLISHED Published: 2025-09-22T18:23:22.764Z Last Updated: 2025-09-23T17:56:03.818Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H) Vendors: scriptsbundle Products: Nokri Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in scriptsbundle Nokri allows Cross Site Request Forgery. This issue affects Nokri: from n/a through 1.6.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/nokri/vulnerability/wordpress-nokri-theme-1-6-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58260 State: PUBLISHED Published: 2025-09-22T18:23:22.061Z Last Updated: 2025-09-23T14:11:55.521Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Ronald Huereca Products: Highlight and Share – Social Text and Image Sharing Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ronald Huereca Highlight and Share – Social Text and Image Sharing allows Stored XSS. This issue affects Highlight and Share – Social Text and Image Sharing: from n/a through 5.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/
rough 5.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/highlight-and-share/vulnerability/wordpress-highlight-and-share-social-text-and-image-sharing-plugin-5-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58261 State: PUBLISHED Published: 2025-09-22T18:23:21.359Z Last Updated: 2025-09-23T14:12:00.631Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: PressPage Entertainment Inc Products: Mavis HTTPS to HTTP Redirection Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in PressPage Entertainment Inc Mavis HTTPS to HTTP Redirection allows Stored XSS. This issue affects Mavis HTTPS to HTTP Redirection: from n/a through 1.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mavis-https-to-http-redirect/vulnerability/wordpress-mavis-https-to-http-redire
patchstack.com/database/wordpress/plugin/mavis-https-to-http-redirect/vulnerability/wordpress-mavis-https-to-http-redirection-plugin-1-4-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58262 State: PUBLISHED Published: 2025-09-22T18:23:20.657Z Last Updated: 2025-09-23T14:12:07.151Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: wpdirectorykit Products: Sweet Energy Efficiency Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in wpdirectorykit Sweet Energy Efficiency allows Stored XSS. This issue affects Sweet Energy Efficiency: from n/a through 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sweet-energy-efficiency/vulnerability/wordpress-sweet-energy-efficiency-plugin-1-0-6-cross-site-request-forgery-csrf-vulnerabilit
rgy-efficiency/vulnerability/wordpress-sweet-energy-efficiency-plugin-1-0-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58263 State: PUBLISHED Published: 2025-09-22T18:23:19.933Z Last Updated: 2025-09-23T14:12:12.458Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: BuddyDev Products: BuddyPress Notification Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BuddyDev BuddyPress Notification Widget allows Stored XSS. This issue affects BuddyPress Notification Widget: from n/a through 1.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/buddypress-notifications-widget/vulnerability/wordpress-buddypress-n
- https://patchstack.com/database/wordpress/plugin/buddypress-notifications-widget/vulnerability/wordpress-buddypress-notification-widget-plugin-1-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58264 State: PUBLISHED Published: 2025-09-22T18:23:19.209Z Last Updated: 2025-09-23T14:12:18.130Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: artbees Products: JupiterX Core Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in artbees JupiterX Core allows Stored XSS. This issue affects JupiterX Core: from n/a through 4.10.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/jupiterx-core/vulnerability/wordpress-jupiterx-core-plugin-4-10-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58265 State: PUBLISHED Published: 2025-09-22T18:23:18.432Z Last Updated: 2025-09-23T14:12:22.949Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Stonehenge Creations Products: Events Manager &#8211; OpenStreetMaps Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stonehenge Creations Events Manager &#8211; OpenStreetMaps allows Stored XSS. This issue affects Events Manager &#8211; OpenStreetMaps: from n/a through 4.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/stonehenge-em-osm/vulne
t Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/stonehenge-em-osm/vulnerability/wordpress-events-manager-openstreetmaps-plugin-4-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58266 State: PUBLISHED Published: 2025-09-22T18:23:17.641Z Last Updated: 2025-09-23T16:14:01.503Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Fumiki Takahashi Products: Gianism Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fumiki Takahashi Gianism allows Stored XSS. This issue affects Gianism: from n/a through 5.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gianism/vulnerability/wordpress-gianism-plugin-5-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58267 State: PUBLISHED Published: 2025-09-22T18:23:16.939Z Last Updated: 2025-09-23T16:14:08.847Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Aftabul Islam Products: Stock Message Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Aftabul Islam Stock Message allows Stored XSS. This issue affects Stock Message: from n/a through 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/stock-message/vulnerability/wordpress-stock-message-plugin-1-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58268 State: PUBLISHED Published: 2025-09-22T18:23:16.256Z Last Updated: 2025-09-23T16:14:14.868Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WPMK Products: WPMK PDF Generator Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WPMK WPMK PDF Generator allows Stored XSS. This issue affects WPMK PDF Generator: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpmk-pdf-generator/vulnerability/wordpress-wpmk-pdf-generator-plugin-1-0-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58269 State: PUBLISHED Published: 2025-09-22T18:23:15.563Z Last Updated: 2025-09-23T16:14:20.912Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: weDevs Products: WP Project Manager Problem Types: CWE-798 Description: Use of Hard-coded Credentials vulnerability in weDevs WP Project Manager allows Retrieve Embedded Sensitive Data. This issue affects WP Project Manager: from n/a through 2.6.25. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wedevs-project-manager/vulnerability/wordpress-wp-project-manager-plugin-2-6-25-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-58270 State: PUBLISHED Published: 2025-09-22T18:23:14.848Z Last Updated: 2025-09-23T16:14:26.943Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NIX Solutions Ltd Products: NIX Anti-Spam Light Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in NIX Solutions Ltd NIX Anti-Spam Light allows Cross Site Request Forgery. This issue affects NIX Anti-Spam Light: from n/a through 0.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/nix-anti-spam-light/vulnerability/wordpress-nix-anti-spam-light-plugin-0-0-4-cross-site-request-forgery-csrf-vulnerabil
/nix-anti-spam-light/vulnerability/wordpress-nix-anti-spam-light-plugin-0-0-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58271 State: PUBLISHED Published: 2025-09-22T18:23:14.150Z Last Updated: 2025-09-23T14:12:27.840Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: AnyClip Video Platform Products: AnyClip Luminous Studio Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AnyClip Video Platform AnyClip Luminous Studio allows Stored XSS. This issue affects AnyClip Luminous Studio: from n/a through 1.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/anyclip-media/vulnerability/wordpress-anyclip-luminous-studio
rences: - https://patchstack.com/database/wordpress/plugin/anyclip-media/vulnerability/wordpress-anyclip-luminous-studio-plugin-1-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58272 State: PUBLISHED Published: 2025-09-03T05:28:00.966Z Last Updated: 2025-09-03T19:50:59.498Z Severity: LOW (CVSS 3.7 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: NTT EAST, Inc., NTT WEST, Inc. Products: Web Caster V130 Problem Types: CWE-352 Description: Cross-site request forgery vulnerability exists in Web Caster V130 versions 1.08 and earlier. If a logged-in user views a malicious page created by an attacker, the settings of the product may be unintentionally changed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ntt-east.co.jp/info/detail/220903_01.html - https://www.ntt-west.co.jp/info/support/oshirase20250903.html - https:/
/www.ntt-east.co.jp/info/detail/220903_01.html - https://www.ntt-west.co.jp/info/support/oshirase20250903.html - https://jvn.jp/en/jp/JVN65839588/
CVE ID: CVE-2025-58276 State: PUBLISHED Published: 2025-09-05T07:53:56.902Z Last Updated: 2025-09-05T13:20:46.097Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-264 Description: Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/9/
CVE ID: CVE-2025-58277 State: PUBLISHED Published: 2025-10-11T03:45:32.419Z Last Updated: 2025-10-14T14:14:43.737Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-200 Description: Permission verification bypass vulnerability in the Camera app. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/10/
CVE ID: CVE-2025-58278 State: PUBLISHED Published: 2025-10-11T03:47:52.659Z Last Updated: 2025-10-14T14:14:31.155Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-200 Description: Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/10/
CVE ID: CVE-2025-58280 State: PUBLISHED Published: 2025-09-05T07:55:27.862Z Last Updated: 2025-09-29T16:57:16.303Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-1321 Description: Vulnerability of exposing object heap addresses in the Ark eTS module. Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/9/
CVE ID: CVE-2025-58281 State: PUBLISHED Published: 2025-09-05T07:56:27.163Z Last Updated: 2025-09-05T13:08:12.670Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-125 Description: Out-of-bounds read vulnerability in the runtime interpreter module. Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/9/
CVE ID: CVE-2025-58282 State: PUBLISHED Published: 2025-10-11T03:50:15.088Z Last Updated: 2025-10-14T14:14:18.774Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-264 Description: Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/10/
CVE ID: CVE-2025-58283 State: PUBLISHED Published: 2025-10-11T03:52:16.473Z Last Updated: 2025-10-14T14:14:06.708Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-264 Description: Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/10/
CVE ID: CVE-2025-58284 State: PUBLISHED Published: 2025-10-11T03:54:06.045Z Last Updated: 2025-10-14T14:13:53.572Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-264 Description: Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/10/
CVE ID: CVE-2025-58285 State: PUBLISHED Published: 2025-10-11T03:55:38.534Z Last Updated: 2025-10-14T14:13:42.084Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-264 Description: Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/10/
CVE ID: CVE-2025-58286 State: PUBLISHED Published: 2025-10-11T08:43:00.183Z Last Updated: 2025-10-14T14:10:54.391Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-25 Description: Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/10/
CVE ID: CVE-2025-58287 State: PUBLISHED Published: 2025-10-11T08:47:48.907Z Last Updated: 2025-10-14T14:10:42.881Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-275 Description: Use After Free (UAF) vulnerability in the office service. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/10/
CVE ID: CVE-2025-58288 State: PUBLISHED Published: 2025-10-11T08:48:53.623Z Last Updated: 2025-10-14T14:10:29.352Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-275 Description: Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/10/
CVE ID: CVE-2025-58289 State: PUBLISHED Published: 2025-10-11T09:18:56.471Z Last Updated: 2025-10-14T18:46:03.018Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-840 Description: Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/10/
CVE ID: CVE-2025-58290 State: PUBLISHED Published: 2025-10-11T08:49:56.539Z Last Updated: 2025-10-14T14:10:17.406Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-41 Description: Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/10/
CVE ID: CVE-2025-58291 State: PUBLISHED Published: 2025-10-11T08:51:04.949Z Last Updated: 2025-10-14T14:10:04.038Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-29 Description: Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/10/
CVE ID: CVE-2025-58292 State: PUBLISHED Published: 2025-10-11T08:52:23.132Z Last Updated: 2025-10-14T14:09:52.174Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-27 Description: Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/10/
CVE ID: CVE-2025-58293 State: PUBLISHED Published: 2025-10-11T09:19:57.937Z Last Updated: 2025-10-14T18:45:56.483Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-264 Description: Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/10/
CVE ID: CVE-2025-58295 State: PUBLISHED Published: 2025-10-11T08:53:20.733Z Last Updated: 2025-10-14T14:09:40.218Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-121 Description: Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/10/
CVE ID: CVE-2025-58296 State: PUBLISHED Published: 2025-09-05T07:57:36.044Z Last Updated: 2025-09-05T12:45:18.395Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-362 Description: Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect function stability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/9/
CVE ID: CVE-2025-58297 State: PUBLISHED Published: 2025-10-11T08:54:24.085Z Last Updated: 2025-10-14T14:09:28.949Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-121 Description: Buffer overflow vulnerability in the sensor service. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/10/
CVE ID: CVE-2025-58298 State: PUBLISHED Published: 2025-10-11T09:05:12.174Z Last Updated: 2025-10-14T14:09:04.778Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-121 Description: Data processing error vulnerability in the package management module. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/10/
CVE ID: CVE-2025-58299 State: PUBLISHED Published: 2025-10-11T09:07:26.711Z Last Updated: 2025-10-14T18:46:19.816Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-416 Description: Use After Free (UAF) vulnerability in the storage management module. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/10/