Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-3355 State: PUBLISHED Published: 2025-10-30T19:21:42.496Z Last Updated: 2025-10-30T19:51:08.264Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Tivoli Monitoring Problem Types: CWE-22 Description: IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7249694
CVE ID: CVE-2025-3356 State: PUBLISHED Published: 2025-10-30T19:22:37.371Z Last Updated: 2025-10-30T19:41:12.149Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: IBM Products: Tivoli Monitoring Problem Types: CWE-22 Description: IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view, overwrite, or append to arbitrary files on the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7249694
CVE ID: CVE-2025-3357 State: PUBLISHED Published: 2025-05-28T14:51:29.649Z Last Updated: 2025-08-26T14:56:28.301Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Tivoli Monitoring Problem Types: CWE-1285 Description: IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 19 could allow a remote attacker to execute arbitrary code due to improper validation of an index value of a dynamically allocated array. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7234923
CVE ID: CVE-2025-3358 State: REJECTED Published: N/A Last Updated: 2025-04-29T22:15:53.696Z Description: No description available.
CVE ID: CVE-2025-3359 State: PUBLISHED Published: 2025-04-07T12:43:43.759Z Last Updated: 2025-11-20T20:08:12.027Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-754 Description: A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-3359 - https://bugzilla.redhat.com/show_bug.cgi?id=2357749
CVE ID: CVE-2025-3360 State: PUBLISHED Published: 2025-04-07T12:53:55.924Z Last Updated: 2025-11-21T07:16:40.998Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-190 Description: A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2025-3360
es: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2025-3360 - https://bugzilla.redhat.com/show_bug.cgi?id=2357754
CVE ID: CVE-2025-3361 State: PUBLISHED Published: 2025-04-08T02:00:12.620Z Last Updated: 2025-04-08T15:59:50.067Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: HGiga Products: iSherlock 4.5, iSherlock 5.5 Problem Types: CWE-78 Description: The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10051-76634-1.html - https://www.twcert.org.tw/en/lp-139-2.html
CVE ID: CVE-2025-3362 State: PUBLISHED Published: 2025-04-08T02:03:34.585Z Last Updated: 2025-04-08T14:51:59.807Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: HGiga Products: iSherlock 4.5, iSherlock 5.5 Problem Types: CWE-78 Description: The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10053-890b1-1.html - https://www.twcert.org.tw/en/cp-139-10055-7dacf-2.html
CVE ID: CVE-2025-3363 State: PUBLISHED Published: 2025-04-08T02:11:48.241Z Last Updated: 2025-04-08T14:19:12.551Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: HGiga Products: iSherlock 4.5, iSherlock 5.5 Problem Types: CWE-78 Description: The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10054-84588-1.html - https://www.twcert.org.tw/en/cp-139-10056-c553a-2.html
CVE ID: CVE-2025-3364 State: PUBLISHED Published: 2025-04-08T02:26:50.820Z Last Updated: 2025-04-08T14:18:44.692Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: HGiga Products: PowerStation Problem Types: CWE-250 Description: The SSH service of PowerStation from HGiga has a Chroot Escape vulnerability, allowing attackers with root privileges to bypass chroot restrictions and access the entire file system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10057-58c05-1.html - https://www.twcert.org.tw/en/cp-139-10058-fce0b-2.html
CVE ID: CVE-2025-3365 State: PUBLISHED Published: 2025-06-06T08:14:00.444Z Last Updated: 2025-06-06T17:12:51.401Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: B. Braun Melsungen AG Products: OnlineSuite Problem Types: CWE-23 Description: A missing protection against path traversal allows to access any file on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.bbraun.com/productsecurity
CVE ID: CVE-2025-3369 State: PUBLISHED Published: 2025-04-07T13:31:04.801Z Last Updated: 2025-04-07T13:53:30.974Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: xxyopen Products: Novel-Plus Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /novel/friendLink/list. The manipulation of the argument sort leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303614 - https://vuldb.com/?ct
d. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303614 - https://vuldb.com/?ctiid.303614 - https://vuldb.com/?submit.552101 - https://github.com/mapl3miss/novel-plusSQLi/blob/master/novelPLUS-sqli.md
CVE ID: CVE-2025-3370 State: PUBLISHED Published: 2025-04-07T14:00:13.262Z Last Updated: 2025-04-07T14:21:28.689Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Men Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Men Salon Management System 1.0. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vul
osed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303615 - https://vuldb.com/?ctiid.303615 - https://vuldb.com/?submit.552172 - https://github.com/1SHOTSEC/CVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-3371 State: PUBLISHED Published: 2025-04-07T14:31:06.470Z Last Updated: 2025-04-07T14:50:13.841Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component DELETE Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303617 - https://vuldb.com/?ctiid.303617 - htt
alyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303617 - https://vuldb.com/?ctiid.303617 - https://vuldb.com/?submit.552270 - https://fitoxs.com/exploit/exploit1.txt
CVE ID: CVE-2025-3372 State: PUBLISHED Published: 2025-04-07T15:00:12.726Z Last Updated: 2025-04-07T15:44:33.576Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in PCMan FTP Server 2.0.7. Affected is an unknown function of the component MKDIR Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303618 - https://vuldb.com/?ctiid.303618 - https://vuld
es: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303618 - https://vuldb.com/?ctiid.303618 - https://vuldb.com/?submit.552273 - https://fitoxs.com/exploit/01-exploit.txt
CVE ID: CVE-2025-3373 State: PUBLISHED Published: 2025-04-07T15:31:04.441Z Last Updated: 2025-04-07T15:52:14.718Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this vulnerability is an unknown functionality of the component SITE CHMOD Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303619 - https://vuldb.com/?ctiid.3
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303619 - https://vuldb.com/?ctiid.303619 - https://vuldb.com/?submit.552274 - https://fitoxs.com/exploit/exploit2.txt
CVE ID: CVE-2025-3374 State: PUBLISHED Published: 2025-04-07T16:00:14.352Z Last Updated: 2025-04-07T16:11:10.570Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this issue is some unknown functionality of the component CCC Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303620 - https://vuldb.com/?ctiid.303620 - https://vu
otes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303620 - https://vuldb.com/?ctiid.303620 - https://vuldb.com/?submit.552336 - https://fitoxs.com/exploit/exploit-e4f29cda8e801f1b0e7fcf539e4352b4.txt
CVE ID: CVE-2025-3375 State: PUBLISHED Published: 2025-04-07T16:31:04.691Z Last Updated: 2025-04-08T16:01:13.167Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. This affects an unknown part of the component CDUP Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303621 - https://vuldb.com/?ctiid.303621 - https://vuldb
s: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303621 - https://vuldb.com/?ctiid.303621 - https://vuldb.com/?submit.552337 - https://fitoxs.com/exploit/exploit-b81a4a56b5d867bc810b183e3c9791ef.txt
CVE ID: CVE-2025-3376 State: PUBLISHED Published: 2025-04-07T17:00:11.404Z Last Updated: 2025-04-08T16:01:05.047Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. This vulnerability affects unknown code of the component CONF Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303622 - https://vuldb.com/?ctiid.303622 - https://vuldb.
: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303622 - https://vuldb.com/?ctiid.303622 - https://vuldb.com/?submit.552338 - https://fitoxs.com/exploit/exploit-f14d986820a0a41f23e061b41b5c6f61.txt
CVE ID: CVE-2025-3377 State: PUBLISHED Published: 2025-04-07T17:31:04.687Z Last Updated: 2025-05-12T15:43:15.981Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. This issue affects some unknown processing of the component ENC Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303623 - https://vuldb.com/?ctiid.303623 - https://vuldb.c
- CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303623 - https://vuldb.com/?ctiid.303623 - https://vuldb.com/?submit.552339 - https://fitoxs.com/exploit/exploit-c72a40d2a3b5d9dc02aef891ea1788bc.txt
CVE ID: CVE-2025-3378 State: PUBLISHED Published: 2025-04-07T18:00:15.252Z Last Updated: 2025-04-07T18:39:27.450Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. Affected is an unknown function of the component EPRT Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303624 - https://vuldb.com/?ctiid.303624 - https://vuldb.com/?s
SA ADP Vulnrichment: References: - https://vuldb.com/?id.303624 - https://vuldb.com/?ctiid.303624 - https://vuldb.com/?submit.552340 - https://fitoxs.com/exploit/exploit-0f5ecb9a57beef4e5b35111c1beccdcf.txt
CVE ID: CVE-2025-3379 State: PUBLISHED Published: 2025-04-07T18:31:08.189Z Last Updated: 2025-04-07T18:56:00.762Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. Affected by this vulnerability is an unknown functionality of the component EPSV Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303625 - https://vuldb.com/?ctiid.303625 - https:/
t Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303625 - https://vuldb.com/?ctiid.303625 - https://vuldb.com/?submit.552341 - https://fitoxs.com/exploit/exploit-bb0f6aa46681315f8c62a944a52a3f4e.txt
CVE ID: CVE-2025-3380 State: PUBLISHED Published: 2025-04-07T19:00:10.808Z Last Updated: 2025-04-07T19:23:39.655Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. Affected by this issue is some unknown functionality of the component FEAT Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303626 - https://vuldb.com/?ctiid.30362
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303626 - https://vuldb.com/?ctiid.303626 - https://vuldb.com/?submit.552342 - https://fitoxs.com/exploit/exploit-c926c69a41d2fce207cf3a3b789b7a79.txt
CVE ID: CVE-2025-3381 State: PUBLISHED Published: 2025-04-07T19:31:04.438Z Last Updated: 2025-04-08T15:56:35.799Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: zhangyanbo2007 Products: youkefu Problem Types: CWE-22 Description: A vulnerability, which was classified as critical, was found in zhangyanbo2007 youkefu 4.2.0. This affects an unknown part of the file WebIMController.java of the component File Upload. The manipulation of the argument ID leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303627 - http
ic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303627 - https://vuldb.com/?ctiid.303627 - https://vuldb.com/?submit.552369 - https://github.com/mapl3miss/uckefuVul/blob/main/uckefu-upload.md
CVE ID: CVE-2025-3382 State: PUBLISHED Published: 2025-04-07T20:00:09.105Z Last Updated: 2025-04-08T15:55:04.959Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: joey-zhou Products: xiaozhi-esp32-server-java Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in joey-zhou xiaozhi-esp32-server-java up to a14fe8115842ee42ab5c7a51706b8a85db5200b7 and classified as critical. This vulnerability affects the function update of the file /api/user/update. The manipulation of the argument state leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide
otely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303628 - https://vuldb.com/?ctiid.303628 - https://vuldb.com/?submit.552387 - https://github.com/exp3n5ive/Vul/blob/main/xiaozhi-sqli/xiaozhi-sqli.md
CVE ID: CVE-2025-3383 State: PUBLISHED Published: 2025-04-07T20:31:05.777Z Last Updated: 2025-04-08T15:53:38.600Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Web-based Pharmacy Product Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /search/search_sales.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303629 - https://vuldb.com/?ctiid.303629 - https://vuldb.com/?submit.552388 - https://github.com/Colorado-all/cve/blob/main/Web-based%20Pharmacy%20Product%20Management%20System/SQL-1.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-3384 State: PUBLISHED Published: 2025-04-07T21:00:14.356Z Last Updated: 2025-04-08T15:52:20.281Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 1000 Projects Products: Human Resource Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in 1000 Projects Human Resource Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /controller/employee.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303630 - https://vuldb.com/?ctiid.303630 - https://vuldb.com/?submit.552447 - https://github.com/onupset/CVE/issues/7 - https://1000projects.org/
CVE ID: CVE-2025-3385 State: PUBLISHED Published: 2025-04-07T21:31:09.319Z Last Updated: 2025-04-08T16:00:22.493Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: LinZhaoguan Products: pb-cms Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in LinZhaoguan pb-cms 2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Classification Management Page. The manipulation of the argument Classification name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
s been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303631 - https://vuldb.com/?ctiid.303631 - https://gitee.com/LinZhaoguan/pb-cms/issues/IBN3S0
CVE ID: CVE-2025-3386 State: PUBLISHED Published: 2025-04-07T22:00:18.000Z Last Updated: 2025-04-08T15:51:08.388Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: LinZhaoguan Products: pb-cms Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in LinZhaoguan pb-cms 2.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin#links of the component Friendship Link Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303632 - htt
lic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303632 - https://vuldb.com/?ctiid.303632 - https://gitee.com/LinZhaoguan/pb-cms/issues/IBN3MW
CVE ID: CVE-2025-3387 State: PUBLISHED Published: 2025-04-07T22:31:09.523Z Last Updated: 2025-04-08T18:24:53.021Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: renrenio Products: renren-security Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in renrenio renren-security up to 5.4.0. This affects an unknown part of the component JSON Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303633 - https://vuldb.com/?ctiid.303633 - htt
alyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303633 - https://vuldb.com/?ctiid.303633 - https://gitee.com/renrenio/renren-security/issues/IBOU02