Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-0446 State: PUBLISHED Published: 2025-01-15T10:58:54.310Z Last Updated: 2025-03-14T16:16:26.842Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html - https://issues.chromium.org/issues/359949844
CVE ID: CVE-2025-0447 State: PUBLISHED Published: 2025-01-15T10:58:54.496Z Last Updated: 2025-03-14T15:23:47.553Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Navigation in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html - https://issues.chromium.org/issues/375550814
CVE ID: CVE-2025-0448 State: PUBLISHED Published: 2025-01-15T10:58:54.689Z Last Updated: 2025-03-24T17:23:49.690Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Compositing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html - https://issues.chromium.org/issues/377948403
CVE ID: CVE-2025-0450 State: PUBLISHED Published: 2025-01-21T11:09:45.700Z Last Updated: 2025-01-21T16:05:00.786Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: MuffinGroup Products: Betheme Problem Types: CWE-79 Description: The Betheme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom JS functionality in all versions up to, and including, 27.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injecte
r-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/340c14ea-70b9-4f60-84b3-97328432f110?source=cve - https://support.muffingroup.com/changelog/
CVE ID: CVE-2025-0451 State: PUBLISHED Published: 2025-02-04T18:53:06.962Z Last Updated: 2025-02-07T21:28:23.053Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/40061026
CVE ID: CVE-2025-0452 State: PUBLISHED Published: 2025-03-20T10:08:51.430Z Last Updated: 2025-03-20T19:01:35.215Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: eosphoros-ai Products: eosphoros-ai/db-gpt Problem Types: CWE-73 Description: eosphoros-ai/DB-GPT version latest is vulnerable to arbitrary file deletion on Windows systems via the '/v1/agent/hub/update' endpoint. The application fails to properly filter the '\' character, which is commonly used as a separator in Windows paths. This vulnerability allows attackers to delete any files on the host system by manipulating the 'plugin_repo_name' variable. Additional Analyst Notes: - CISA ADP Vulnrichment: R
on the host system by manipulating the 'plugin_repo_name' variable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/7e854343-3d61-47d4-ad41-c4d2f356a54a
CVE ID: CVE-2025-0453 State: PUBLISHED Published: 2025-03-20T10:11:02.779Z Last Updated: 2025-10-15T12:50:04.768Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: mlflow Products: mlflow/mlflow Problem Types: CWE-410 Description: In mlflow/mlflow version 2.17.2, the `/graphql` endpoint is vulnerable to a denial of service attack. An attacker can create large batches of queries that repeatedly request all runs from a given experiment. This can tie up all the workers allocated by MLFlow, rendering the application unable to respond to other requests. This vulnerability is due to uncontrolled resource consumption. Additional Analyst Notes: - CISA ADP Vulnrichment
uests. This vulnerability is due to uncontrolled resource consumption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/788327ec-714a-4d5c-83aa-8df04dd7612b
CVE ID: CVE-2025-0454 State: PUBLISHED Published: 2025-03-20T10:11:30.365Z Last Updated: 2025-03-20T15:22:14.163Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: significant-gravitas Products: significant-gravitas/autogpt Problem Types: CWE-918 Description: A Server-Side Request Forgery (SSRF) vulnerability was identified in the Requests utility of significant-gravitas/autogpt versions prior to v0.4.0. The vulnerability arises due to a hostname confusion between the `urlparse` function from the `urllib.parse` library and the `requests` library. A malicious user can exploit this by submitting a specially crafted URL, such as `http://localhost:\@google.com/../`,
y. A malicious user can exploit this by submitting a specially crafted URL, such as `http://localhost:\@google.com/../`, to bypass the SSRF check and perform an SSRF attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/0664fdee-bdc2-4650-8075-74d7b8d3e308 - https://github.com/significant-gravitas/autogpt/commit/ff065cd24c2289878c0abdb9adbf91c305f0d70a
CVE ID: CVE-2025-0455 State: PUBLISHED Published: 2025-01-16T01:29:25.439Z Last Updated: 2025-01-16T15:41:05.904Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NetVision Information Products: airPASS Problem Types: CWE-89 Description: The airPASS from NetVision Information has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8357-28308-1.html - https://www.twcert.org.tw/en/cp-139-8358-143bc-2.html
CVE ID: CVE-2025-0456 State: PUBLISHED Published: 2025-01-16T01:34:14.599Z Last Updated: 2025-01-16T15:37:24.318Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NetVision Information Products: airPASS Problem Types: CWE-306 Description: The airPASS from NetVision Information has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access the specific administrative functionality to retrieve * all accounts and passwords. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8359-53aa7-1.html - https://www.twcert.org.tw/en/cp-139-8360-e97b8-2.html
CVE ID: CVE-2025-0457 State: PUBLISHED Published: 2025-01-16T01:37:41.739Z Last Updated: 2025-01-16T15:36:31.672Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NetVision Information Products: airPASS Problem Types: CWE-78 Description: The airPASS from NetVision Information has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8361-ff3fb-1.html - https://www.twcert.org.tw/en/cp-139-8362-efb33-2.html
CVE ID: CVE-2025-0458 State: PUBLISHED Published: 2025-01-14T15:31:04.096Z Last Updated: 2025-01-14T16:43:09.687Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Virtual Computer Products: Vysual RH Solution Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in Virtual Computer Vysual RH Solution 2024.12.1. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Panel. The manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but
. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.291475 - https://vuldb.com/?ctiid.291475 - https://vuldb.com/?submit.473865
CVE ID: CVE-2025-0459 State: PUBLISHED Published: 2025-01-14T15:31:05.312Z Last Updated: 2025-01-14T16:42:46.314Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: libretro Products: RetroArch Problem Types: CWE-426 Description: A vulnerability, which was classified as problematic, has been found in libretro RetroArch up to 1.19.1 on Windows. Affected by this issue is some unknown functionality in the library profapi.dll of the component Startup. The manipulation leads to untrusted search path. An attack has to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnri
or was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.291476 - https://vuldb.com/?ctiid.291476 - https://vuldb.com/?submit.474011
CVE ID: CVE-2025-0460 State: PUBLISHED Published: 2025-01-14T16:00:17.534Z Last Updated: 2025-01-14T16:39:20.230Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: n/a Products: Blog Botz for Journal Theme Problem Types: CWE-434, CWE-284 Description: A vulnerability, which was classified as critical, was found in Blog Botz for Journal Theme 1.0 on OpenCart. This affects an unknown part of the file /index.php?route=extension/module/blog_add. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not
loit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.291477 - https://vuldb.com/?ctiid.291477 - https://vuldb.com/?submit.474089 - https://gist.github.com/mcdruid/28124198128022a1c2b4060f74d99cd6
CVE ID: CVE-2025-0461 State: PUBLISHED Published: 2025-01-14T16:00:19.736Z Last Updated: 2025-01-14T16:38:30.241Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Shanghai Lingdang Information Technology Products: Lingdang CRM Problem Types: CWE-22 Description: A vulnerability has been found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0 and classified as problematic. This vulnerability affects unknown code of the file /crm/weixinmp/index.php?userid=123&module=Users&usid=1&action=UsersAjax&minipro_const_type=1&related_module=Singin. The manipulation of the argument pathfile leads to path traversal. The attack can be initiated remotely.
_module=Singin. The manipulation of the argument pathfile leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.291478 - https://vuldb.com/?ctiid.291478 - https://vuldb.com/?submit.474252 - https://github.com/BxYQ/ld/blob/main/downloadSocialPromotionQrcode_fileread.doc
CVE ID: CVE-2025-0462 State: PUBLISHED Published: 2025-01-14T16:31:05.486Z Last Updated: 2025-01-14T16:53:00.271Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Shanghai Lingdang Information Technology Products: Lingdang CRM Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0 and classified as critical. This issue affects some unknown processing of the file /crm/weixinmp/index.php?userid=123&module=Users&usid=1&action=UsersAjax&minipro_const_type=1. The manipulation of the argument searchcontent leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t
argument searchcontent leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.291479 - https://vuldb.com/?ctiid.291479 - https://vuldb.com/?submit.474254 - https://github.com/BxYQ/ld/blob/main/ListView_SQL.doc
CVE ID: CVE-2025-0463 State: PUBLISHED Published: 2025-01-14T17:00:14.799Z Last Updated: 2025-01-14T19:03:42.348Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Shanghai Lingdang Information Technology Products: Lingdang CRM Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0. It has been classified as critical. Affected is an unknown function of the file /crm/weixinmp/index.php?userid=123&module=Users&usid=1&action=UsersAjax&minipro_const_type=1&related_module=Singin. The manipulation of the argument name leads to unrestricted upload. It is possible to launch the attack remotely. The expl
e manipulation of the argument name leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.291480 - https://vuldb.com/?ctiid.291480 - https://vuldb.com/?submit.474255 - https://github.com/BxYQ/ld/blob/main/File_Upload_vul.doc
CVE ID: CVE-2025-0464 State: PUBLISHED Published: 2025-01-14T17:00:16.781Z Last Updated: 2025-01-14T19:09:04.945Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Task Reminder System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Maintenance Section. The manipulation of the argument System Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.291481 - https://vuldb.com/?ctiid.291481 - https://vuldb.com/?submit.474280 - https://www.sourcecodester.com/
CVE ID: CVE-2025-0465 State: PUBLISHED Published: 2025-01-14T17:31:04.647Z Last Updated: 2025-01-14T20:51:34.155Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: n/a Products: AquilaCMS Problem Types: CWE-502, CWE-20 Description: A vulnerability was found in AquilaCMS 1.412.13. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/v2/categories. The manipulation of the argument PostBody.populate leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CIS
ed. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.291482 - https://vuldb.com/?ctiid.291482 - https://vuldb.com/?submit.474285 - https://gist.github.com/PSDat123/ad7eb46550f22632aa4c229a0857f00d
CVE ID: CVE-2025-0466 State: PUBLISHED Published: 2025-02-04T06:00:11.861Z Last Updated: 2025-08-27T12:00:27.039Z Vendors: Unknown Products: Sensei LMS Problem Types: CWE-862 Missing Authorization Description: The Sensei LMS WordPress plugin before 4.24.4 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak sensei_email and sensei_message Information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/53ab86dc-1195-4ba0-8eda-6a0d7b45c45f/
CVE ID: CVE-2025-0467 State: PUBLISHED Published: 2025-04-18T00:32:02.991Z Last Updated: 2025-04-21T13:34:48.602Z Vendors: Imagination Technologies Products: Graphics DDK Problem Types: CWE-823 Description: Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.imaginationtech.com/gpu-driver-vulnerabilities/
CVE ID: CVE-2025-0468 State: PUBLISHED Published: 2025-04-04T15:39:37.798Z Last Updated: 2025-04-07T14:48:05.895Z Vendors: Imagination Technologies Products: Graphics DDK Problem Types: CWE-280 Description: Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kernel and drivers running on the platform altering their behaviour. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.imaginationtech.com/gpu-driver-vulnerabilities/
CVE ID: CVE-2025-0469 State: PUBLISHED Published: 2025-02-27T04:21:44.250Z Last Updated: 2025-02-27T14:55:04.061Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wpmudev Products: Forminator Forms – Contact Form, Payment Form & Custom Form Builder Problem Types: CWE-79 Description: The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the slider template data in all versions up to, and including, 1.39.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrar
scaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/14043276-ba0a-4862-a1a7-00b4c372c5bc?source=cve - https://plugins.trac.wordpress.org/browser/forminator/tags/1.39.2/assets/forminator-ui/js/forminator-form.js#L888
CVE ID: CVE-2025-0470 State: PUBLISHED Published: 2025-01-31T03:21:28.615Z Last Updated: 2025-01-31T16:52:29.378Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: wpmudev Products: Forminator Forms – Contact Form, Payment Form & Custom Form Builder Problem Types: CWE-79 Description: The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the title parameter in all versions up to, and including, 1.38.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if the
aping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f5281d4b-c2cd-4972-b837-e101a8893c6e?source=cve - https://plugins.trac.wordpress.org/browser/forminator/tags/1.38.2/requirejs/main.js - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3226716%40forminator%2Ftrunk&old=3222217%40forminator%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2025-0471 State: PUBLISHED Published: 2025-01-16T13:02:16.104Z Last Updated: 2025-01-16T14:10:49.124Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: PMB Services Products: PMB platform Problem Types: CWE-434 Description: Unrestricted file upload vulnerability in the PMB platform, affecting versions 4.0.10 and above. This vulnerability could allow an attacker to upload a file to gain remote access to the machine, being able to access, modify and execute commands freely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-pmb-platform
CVE ID: CVE-2025-0472 State: PUBLISHED Published: 2025-01-16T13:03:28.285Z Last Updated: 2025-01-16T14:10:21.348Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: PMB Services Products: PMB platform Problem Types: CWE-200 Description: Information exposure in the PMB platform affecting versions 4.2.13 and earlier. This vulnerability allows an attacker to upload a file to the environment and enumerate the internal files of a machine by looking at the request response. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-pmb-platform
CVE ID: CVE-2025-0473 State: PUBLISHED Published: 2025-01-16T13:09:14.896Z Last Updated: 2025-01-16T14:09:54.540Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: PMB Services Products: PMB platform Problem Types: CWE-459 Description: Vulnerability in the PMB platform that allows an attacker to persist temporary files on the server, affecting versions 4.0.10 and above. This vulnerability exists in the file upload functionality on the ‘/pmb/authorities/import/iimport_authorities’ endpoint. When a file is uploaded via this resource, the server will create a temporary file that will be deleted after the client sends a POST request to ‘/pmb/authorities/import/iim
will create a temporary file that will be deleted after the client sends a POST request to ‘/pmb/authorities/import/iimport_authorities’. This workflow is automated by the web client, however an attacker can trap and launch the second POST request to prevent the temporary file from being deleted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-pmb-platform
CVE ID: CVE-2025-0474 State: PUBLISHED Published: 2025-01-14T18:50:30.331Z Last Updated: 2025-11-19T20:29:57.454Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Invoice Ninja Products: Invoice Ninja Problem Types: CWE-918 Description: Invoice Ninja is vulnerable to authenticated Server-Side Request Forgery (SSRF) allowing for arbitrary file read and network resource requests as the application user. This issue affects Invoice Ninja: from 5.8.56 through 5.11.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/invoiceninja/invoiceninja/commit/2a9bf353b432d7060e85487b617151ecbc36247d - https://vulncheck.com/advisories/invoice-