Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-1852 State: PUBLISHED Published: 2025-03-03T05:31:06.795Z Last Updated: 2025-03-03T17:19:05.041Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Totolink Products: EX1800T Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112_B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298120 - https
c and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298120 - https://vuldb.com/?ctiid.298120 - https://vuldb.com/?submit.505362 - https://github.com/watermelon-happy/cve/blob/main/ex1800tCVE.md - https://www.totolink.net/
CVE ID: CVE-2025-1853 State: PUBLISHED Published: 2025-03-03T06:00:08.840Z Last Updated: 2025-03-12T21:12:21.882Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: AC8 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda AC8 16.03.34.06 and classified as critical. This issue affects the function sub_49E098 of the file /goform/SetIpMacBind of the component Parameter Handler. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298121 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298121 - https://vuldb.com/?ctiid.298121 - https://vuldb.com/?submit.505374 - https://github.com/Raining-101/IOT_cve/blob/main/tenda-ac8_sub_49E098.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-1854 State: PUBLISHED Published: 2025-03-03T06:31:04.518Z Last Updated: 2025-03-03T15:55:29.875Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Codezips Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/del_member.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298122
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298122 - https://vuldb.com/?ctiid.298122 - https://vuldb.com/?submit.506053 - https://github.com/yhj09/CVE/blob/main/CVE_1.md
CVE ID: CVE-2025-1855 State: PUBLISHED Published: 2025-03-03T07:00:08.159Z Last Updated: 2025-03-03T15:51:37.149Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Shopping Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /product-details.php. The manipulation of the argument quality/price/value/name/summary/review leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichme
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298123 - https://vuldb.com/?ctiid.298123 - https://vuldb.com/?submit.506066 - https://github.com/panghuanjie/Code-audits/blob/main/PHPGurukul/PHPGurukul%20Online%20Shopping%20Portal%20v2.1%20SQL%20Injection3%20.pdf - https://phpgurukul.com/
CVE ID: CVE-2025-1856 State: PUBLISHED Published: 2025-03-03T07:31:06.276Z Last Updated: 2025-03-03T14:26:02.394Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Codezips Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Codezips Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/gen_invoice.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.
d to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298124 - https://vuldb.com/?ctiid.298124 - https://vuldb.com/?submit.506107 - https://github.com/smartttt1/CVE/blob/main/CVE_1.md
CVE ID: CVE-2025-1857 State: PUBLISHED Published: 2025-03-03T08:00:09.167Z Last Updated: 2025-03-03T14:19:21.115Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Nipah Virus Testing Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown part of the file /check_availability.php. The manipulation of the argument employeeid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298125 - https://vuldb.com/?ctiid.298125 - https://vuldb.com/?submit.506120 - https://github.com/panghuanjie/Code-audits/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-1858 State: PUBLISHED Published: 2025-03-03T08:31:04.167Z Last Updated: 2025-03-03T14:49:32.871Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Codezips Products: Online Shopping Website Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in Codezips Online Shopping Website 1.0. This vulnerability affects unknown code of the file /success.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298126 - https://vuldb.com/?ctiid.29
itional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298126 - https://vuldb.com/?ctiid.298126 - https://vuldb.com/?submit.506315 - https://github.com/Centurion-cyber/CVE/blob/main/CVE_1.md
CVE ID: CVE-2025-1859 State: PUBLISHED Published: 2025-03-03T09:00:08.310Z Last Updated: 2025-03-03T12:33:24.270Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: News Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul News Portal 4.1. This issue affects some unknown processing of the file /login.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298127 - https://vuldb.com/?ctiid.2981
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298127 - https://vuldb.com/?ctiid.298127 - https://vuldb.com/?submit.506350 - https://github.com/panghuanjie/Code-audits/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-1860 State: PUBLISHED Published: 2025-03-28T00:56:08.647Z Last Updated: 2025-09-05T13:20:15.508Z Vendors: ZEFRAM Products: Data::Entropy Problem Types: CWE-338, CWE-331 Description: Data::Entropy for Perl 0.007 and earlier use the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://perldoc.perl.org/functions/rand - https://metacpan.org/release/ZEFRAM/Data-Entropy-0.007/source/lib/Data/Entropy.pm#L80
CVE ID: CVE-2025-1861 State: PUBLISHED Published: 2025-03-30T05:57:57.894Z Last Updated: 2025-11-03T20:57:13.769Z Vendors: PHP Group Products: PHP Problem Types: CWE-131 Description: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when parsing HTTP redirect in the response to an HTTP request, there is currently limit on the location value size caused by limited size of the location buffer to 1024. However as per RFC9110, the limit is recommended to be 8000. This may lead to incorrect URL truncation and redirecting to a wrong location. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https:/
g to a wrong location. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/php/php-src/security/advisories/GHSA-52jp-hrpf-2jff
CVE ID: CVE-2025-1862 State: PUBLISHED Published: 2025-09-26T08:18:21.708Z Last Updated: 2025-09-29T12:38:07.003Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L) Vendors: WSO2 Products: WSO2 Enterprise Integrator, WSO2 Identity Server, WSO2 Open Banking IAM, WSO2 Identity Server as Key Manager Problem Types: CWE-434 Description: An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user-supplied filenames in the BPEL uploader SOAP service endpoint. A malicious actor with administrative privileges can upload arbitrary files to a user-controlled location on the server. By leveraging this vulnerability, an attacker can upl
pload arbitrary files to a user-controlled location on the server. By leveraging this vulnerability, an attacker can upload a specially crafted payload and achieve remote code execution (RCE), potentially compromising the server and its data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-3992/
CVE ID: CVE-2025-1863 State: PUBLISHED Published: 2025-04-18T05:55:26.303Z Last Updated: 2025-04-18T12:00:37.316Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Yokogawa Electric Corporation Products: GX10 / GX20 / GP10 / GP20 Paperless Recorders, GM Data Acquisition System, DX1000 / DX2000 / DX1000N Paperless Recorders, FX1000 Paperless Recorders, μR10000 / μR20000 Chart Recorders, MW100 Data Acquisition Units, DX1000T / DX2000T Paperless Recorders, CX1000 / CX2000 Paperless Recorders Problem Types: CWE-1188 Description: Insecure default settings have been found in recorder products provided by Yokogawa Electric Corporation. The default setting of the au
t settings have been found in recorder products provided by Yokogawa Electric Corporation. The default setting of the authentication function is disabled on the affected products. Therefore, when connected to a network with default settings, anyone can access all functions related to settings and operations. As a result, an attacker can illegally manipulate and configure important data such as measured values and settings. This issue affects GX10 / GX20 / GP10 / GP20 Paperless Recorders: R5.04.01 or earlier; GM Data Acquisition System: R5.05.01 or earlier; DX1000 / DX2000 / DX1000N Paperless Recorders: R4.21 or earlier; FX1000 Paperless Recorders: R1.31 or earlier; μR10000 / μR20000 Chart Re
DX1000N Paperless Recorders: R4.21 or earlier; FX1000 Paperless Recorders: R1.31 or earlier; μR10000 / μR20000 Chart Recorders: R1.51 or earlier; MW100 Data Acquisition Units: All versions; DX1000T / DX2000T Paperless Recorders: All versions; CX1000 / CX2000 Paperless Recorders: All versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web-material3.yokogawa.com/1/36974/files/YSAR-25-0001-E.pdf
CVE ID: CVE-2025-1864 State: PUBLISHED Published: 2025-03-03T08:15:17.335Z Last Updated: 2025-03-03T14:09:47.207Z Vendors: radareorg Products: radare2 Problem Types: CWE-119 Description: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before <5.9.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/radareorg/radare2/pull/23981
CVE ID: CVE-2025-1865 State: PUBLISHED Published: 2025-04-04T09:52:56.627Z Last Updated: 2025-07-07T20:49:02.467Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Elaborate Bytes AG Products: Virtual CloneDrive Problem Types: CWE-284 Description: The kernel driver, accessible to low-privileged users, exposes a function that fails to properly validate the privileges of the calling process. This allows creating files at arbitrary locations with full user control, ultimately allowing for privilege escalation to SYSTEM. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.elby.ch/de/products/vcd.html - https://neodyme.io/de/advisories/cve-20
CISA ADP Vulnrichment: References: - https://www.elby.ch/de/products/vcd.html - https://neodyme.io/de/advisories/cve-2025-1865/
CVE ID: CVE-2025-1866 State: PUBLISHED Published: 2025-03-03T08:44:23.118Z Last Updated: 2025-03-03T16:34:59.877Z Vendors: warmcat Products: libwebsockets Problem Types: CWE-119 Description: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows Pointer Manipulation, potentially leading to out-of-bounds memory access. This issue affects libwebsockets before 4.3.4 and is present in code built specifically for the Win32 platform. By default, the affected code is not executed unless one of the following conditions is met: LWS_WITHOUT_EXTENSIONS (default ON) is manually set to OFF in CMake. LWS_WITH_HTTP_STREAM_COMPRESSION (default O
is met: LWS_WITHOUT_EXTENSIONS (default ON) is manually set to OFF in CMake. LWS_WITH_HTTP_STREAM_COMPRESSION (default OFF) is manually set to ON in CMake. Despite these conditions, when triggered in affected configurations, this vulnerability may allow attackers to manipulate pointers, potentially leading to memory corruption or unexpected behavior. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/warmcat/libwebsockets/commit/3f7c79fd57338aca1bf4a1b1f24e324b80d36265
CVE ID: CVE-2025-1867 State: PUBLISHED Published: 2025-03-03T08:48:56.284Z Last Updated: 2025-03-03T16:32:50.538Z Vendors: ithewei Products: libhv Problem Types: CWE-444 Description: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in ithewei libhv allows HTTP Response Smuggling.This issue affects libhv: through 1.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ithewei/libhv/pull/689
CVE ID: CVE-2025-1868 State: PUBLISHED Published: 2025-03-03T10:53:44.771Z Last Updated: 2025-03-03T12:06:33.914Z Vendors: Famatech Corp Products: Advanced IP Scanner, Advanced Port Scanner Problem Types: CWE-200 Description: Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scanner. It occurs when these applications initiate a network scan, inadvertently sending the NTLM hash of the user performing the scan. This vulnerability can be exploited by intercepting network traffic to a legitimate server or by setting up a fake server, in both local and remote scenarios. This exposure is relevant for both HTTP/HTTPS and SMB protocols
ng up a fake server, in both local and remote scenarios. This exposure is relevant for both HTTP/HTTPS and SMB protocols. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/information-display-multiple-products-famatech-corp
CVE ID: CVE-2025-1869 State: PUBLISHED Published: 2025-03-03T12:49:35.389Z Last Updated: 2025-03-03T20:02:08.853Z Vendors: Mayuri K Products: 101news Problem Types: CWE-89 Description: SQL injection vulnerability have been found in 101news affecting version 1.0 through the "username" parameter in admin/check_avalability.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-101news
CVE ID: CVE-2025-1870 State: PUBLISHED Published: 2025-03-03T12:50:14.993Z Last Updated: 2025-03-03T20:05:00.687Z Vendors: Mayuri K Products: 101news Problem Types: CWE-89 Description: SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagedescription" parameter in admin/aboutus.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-101news
CVE ID: CVE-2025-1871 State: PUBLISHED Published: 2025-03-03T12:50:41.680Z Last Updated: 2025-03-03T14:07:39.856Z Vendors: Mayuri K Products: 101news Problem Types: CWE-89 Description: SQL injection vulnerability have been found in 101news affecting version 1.0 through the "category" and "subcategory" parameters in admin/add-subcategory.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-101news
CVE ID: CVE-2025-1872 State: PUBLISHED Published: 2025-03-03T12:51:04.557Z Last Updated: 2025-03-12T19:50:34.986Z Vendors: Mayuri K Products: 101news Problem Types: CWE-89 Description: SQL injection vulnerability have been found in 101news affecting version 1.0 through the "sadminusername" parameter in admin/add-subadmins.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-101news
CVE ID: CVE-2025-1873 State: PUBLISHED Published: 2025-03-03T12:51:40.448Z Last Updated: 2025-03-03T13:59:46.768Z Vendors: Mayuri K Products: 101news Problem Types: CWE-89 Description: SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-101news
CVE ID: CVE-2025-1874 State: PUBLISHED Published: 2025-03-03T12:52:45.295Z Last Updated: 2025-03-03T13:56:51.784Z Vendors: Mayuri K Products: 101news Problem Types: CWE-89 Description: SQL injection vulnerability have been found in 101news affecting version 1.0 through the "description" parameter in admin/add-category.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-101news
CVE ID: CVE-2025-1875 State: PUBLISHED Published: 2025-03-03T12:53:02.930Z Last Updated: 2025-03-03T13:54:42.068Z Vendors: Mayuri K Products: 101news Problem Types: CWE-89 Description: SQL injection vulnerability have been found in 101news affecting version 1.0 through the "searchtitle" parameter in search.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-101news
CVE ID: CVE-2025-1876 State: PUBLISHED Published: 2025-03-03T17:00:08.762Z Last Updated: 2025-03-04T16:22:55.482Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: D-Link Products: DAP-1562 Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, has been found in D-Link DAP-1562 1.10. Affected by this issue is the function http_request_parse of the component HTTP Header Handler. The manipulation of the argument Authorization leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the mainta
losed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298190 - https://vuldb.com/?ctiid.298190 - https://vuldb.com/?submit.506106 - https://witty-maiasaura-083.notion.site/D-link-DAP-1562-http_request_parse-Vulnerability-1a4b2f2a636180a2a67de271ad5fe6d7 - https://www.dlink.com/
CVE ID: CVE-2025-1877 State: PUBLISHED Published: 2025-03-03T18:31:05.497Z Last Updated: 2025-03-03T20:15:08.093Z Severity: N/A (CVSS 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C) Vendors: D-Link Products: DAP-1562 Problem Types: CWE-476, CWE-404 Description: A vulnerability, which was classified as critical, was found in D-Link DAP-1562 1.10. This affects the function pure_auth_check of the component HTTP POST Request Handler. The manipulation of the argument a1 leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional A
c and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298191 - https://vuldb.com/?ctiid.298191 - https://vuldb.com/?submit.506526 - https://witty-maiasaura-083.notion.site/D-link-DAP-1562-pure_auth_check-Vulnerability-1a5b2f2a63618013a1fecb743f2d0667 - https://www.dlink.com/
CVE ID: CVE-2025-1878 State: PUBLISHED Published: 2025-03-03T19:00:09.070Z Last Updated: 2025-03-03T19:49:51.260Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: i-Drive Products: i11, i12 Problem Types: CWE-1393 Description: A vulnerability has been found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This vulnerability affects unknown code of the component WiFi. The manipulation leads to use of default password. Access to the local network is required for this attack to succeed. The complexity of an attack is rather high. The exploitation appears to be difficult. It was not possible to identify the current maintainer of the product. It m
h. The exploitation appears to be difficult. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298192 - https://vuldb.com/?ctiid.298192 - https://vuldb.com/?submit.510949 - https://github.com/geo-chen/i-Drive
CVE ID: CVE-2025-1879 State: PUBLISHED Published: 2025-03-03T19:31:04.880Z Last Updated: 2025-03-04T15:13:54.562Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: i-Drive Products: i11, i12 Problem Types: CWE-798, CWE-259 Description: A vulnerability was found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This issue affects some unknown processing of the component APK. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life. Additional Analyst Notes: - CISA ADP Vulnr
aintainer of the product. It must be assumed that the product is end-of-life. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298193 - https://vuldb.com/?ctiid.298193 - https://vuldb.com/?submit.510950 - https://github.com/geo-chen/i-Drive